LinkedIn Gets Mixed Ruling In Health Privacy Battle

In a mixed ruling, a federal judge said Thursday a Nevada resident could proceed with a privacy claim against LinkedIn over allegations that it collected tracking data from Nevada's Health Link -- a state-created insurance marketplace.

But the judge dismissed claims by two California residents who alleged that LinkedIn collected data from that state's health exchange, Covered California. That dismissal was without prejudice, meaning the plaintiffs can beef up their allegations and bring the complaint again.

The decision, issued by U.S. District Court Judge Edward Davila in the Northern District of California, stemmed from two separate class-action complaints against LinkedIn -- one by Nevada resident Kimberly Johnson, and the other by California residents including Cynthia Hays.

In both cases, the plaintiffs' complaint included claims that LinkedIn engaged in "intrusion upon seclusion" -- meaning that LinkedIn allegedly engaged in a "highly offensive" privacy violation.

advertisement

advertisement

Both lawsuits centered on claims that LinkedIn tracked web users' activity on the health insurance sites via the LinkedIn Insight Tag. The cases were filed after The Markup reported that the insurance sites were transmitting health data to LinkedIn via its Insight Tag, as part of a marketing campaign.

Nevada's Johnson specifically alleged in her complaint that she provided Health Link with information about her medication and dosage.

LinkedIn sought a rapid dismissal of both suits.

Among other arguments, the company contended that California plaintiffs failed to allege that they provided any specific health data to Covered California.

"Although plaintiffs claim that LinkedIn collected users’ 'sensitive personal and health information,” they never once allege that they submitted any health information or other sensitive information whatsoever to Covered California," LinkedIn argued in a written motion.

Davila appeared to accept that argument, writing that the California plaintiffs "do not need to allege the exact information provided to LinkedIn with great detail at this stage, but they must at a minimum allege facts sufficient to provide notice and show they had a reasonable expectation of privacy in that data."

He gave the California plaintiffs until August 27 to amend their complaint.

LinkedIn also argued that the Nevada case should be dismissed at an early stage. Among other reasons, LinkedIn said Johnson's allegations, if true, wouldn't prove a "highly offensive" privacy violation because she wasn't required to provide information about medication.

"If Plaintiff in fact submitted information about her medication and dosage information on the website, she did so in response to questions that were explicitly marked as 'Optional,'" LinkedIn argued in its bid for a quick dismissal.

"Her choice “to answer these optional questions on a website renders her stated expectation of privacy implausible,” the company added.

Davila disagreed, effectively ruling that Johnson's allegations, if true, could support her claim for "intrusion upon seclusion."

The plaintiffs in California also alleged that LinkedIn violated a state wiretap law, and Johonson alleged that the company violated the federal wiretap law. Davila dismissed those claims, but said the plaintiffs could amend their wiretap-related allegations and bring those claims again.

LinkedIn hasn't yet responded to MediaPost's request for comment.

Next story loading loading..