To “Cure” or Not to “Cure,” That Is the Question

The CCPA grants consumers a private right of action if their personal information is breached. Before bringing a lawsuit, however, the consumer must first provide the business 30 days’ written notice and an opportunity to “cure.” That raises a critical question for any company that experiences a data breach and receives this notice: to “cure” or not to “cure”? In this guest article, Thompson Coburn partner Luke Sosnicki addresses the issues that companies should consider when faced with this decision. See our two-part series on CCPA litigation: “How to Stem the Coming Tide” (Jan. 22, 2020); and “How to Avoid Claims Under Other Statutes” (Feb. 5, 2020).

To read the full article

Continue reading your article with a CSLR subscription.