Almost exactly a year ago, the first COVID-19 tuition reimbursement lawsuits were filed against higher education institutions across the United States and we warned of the continued onslaught of such litigation.  With the filing of those reimbursement class actions decreasing, higher education institutions should be cognizant of a potential new wave of COVID-19 class actions: privacy class action lawsuits related to the COVID-19 vaccine.

In Doe v. University of Cincinnati, plaintiffs allege that the defendants provided UC Health, LLC, “a private third-party entity” with personal information of each of its students in order to assist with the ability to provide vaccinations.

By providing this information, plaintiffs allege defendants violated Ohio Privacy Act, R.C. 1347 because such transfer occurred “without each individual student knowingly, voluntarily, and intelligently consenting.”

Plaintiffs also allege the transfer of personal information violated “their federal constitutional rights” pursuant to 42 U.S.C. § 1983.  According to the complaint, the Ohio courts have ruled that Social Security numbers are subject to federal constitutional right to privacy.

Notably, plaintiffs allege, “[t]here is no pandemic exception to the Constitution and state privacy laws.”

These COVID-19 vaccine lawsuits raise interesting questions about balancing the competing interests of preventing the spread of COVID-19 and ensuring the safety of students, faculty, and staff against the need to protect the security and confidentiality of personal information.  At minimum, this class action, and others like it, should remind all higher education institutions of the importance of implementing and maintaining an effective cybersecurity and data privacy program.

The programs should robustly protect the security, confidentiality, and unauthorized access of personal information taking into account the size and resources of the institution, the nature, sensitivity, and circumstances surrounding the collection of personal information, and the costs and tailored approach of collecting and protecting the personal information.  There should be clear policies explaining when data is collected, how it is used, if and to what extent it is shared, and if possible, whether informed consent has been given.  As with other privacy issues, higher education institutions should also be mindful of how they utilize third-party vendors or contractors to assist with their vaccination roll-outs.  Giving thoughtful consideration to these factors will mitigate risks associated with privacy claims based upon negligence theories, and bolster potential defenses surrounding safe harbor provisions.

Print:
Email this postTweet this postLike this postShare this post on LinkedIn
Photo of Andrew F. Gann Andrew F. Gann

Drew is a litigator, focusing primarily on class actions, mass tort lawsuits, high-stakes litigation, and litigation arising out of catastrophic incidents. He has significant experience with multidistrict litigation (MDL) and advising clients on punitive damages in high-stakes personal injury actions. Drew represents clients…

Drew is a litigator, focusing primarily on class actions, mass tort lawsuits, high-stakes litigation, and litigation arising out of catastrophic incidents. He has significant experience with multidistrict litigation (MDL) and advising clients on punitive damages in high-stakes personal injury actions. Drew represents clients in a wide array of industries, including energy, transportation, construction, and product manufacturing.

Photo of Anthony Q. Le Anthony Q. Le

Anthony has a broad array of experiences assisting with compliance issues, regulatory and enforcement matters, internal investigations, and individual and class litigation. His diverse practice helps him achieve the most efficient and practical results for his clients spanning the financial services, technology, automobile…

Anthony has a broad array of experiences assisting with compliance issues, regulatory and enforcement matters, internal investigations, and individual and class litigation. His diverse practice helps him achieve the most efficient and practical results for his clients spanning the financial services, technology, automobile, and retail sectors.

Photo of Harrison Marshall Jr. Harrison Marshall Jr.

Harrison practices corporate law, including representing large corporations, emerging growth companies, venture capital and private equity funds, and colleges and universities.

Photo of Scott Oostdyk Scott Oostdyk

Scott has represented businesses and corporations in contract, insurance, products and technology disputes, land use issues and a variety of pollution problems including air, water and hazardous substance cases. He counsels clients on litigation avoidance planning.

McGuireWoods LLP

At McGuireWoods, we deliver quality work, personalized service and exceptional value. We use technology to provide efficient legal solutions and employ a diverse workforce to bring real-world and innovative perspectives to meeting our clients’ needs. With 1,100 lawyers and 21 strategically located offices…

At McGuireWoods, we deliver quality work, personalized service and exceptional value. We use technology to provide efficient legal solutions and employ a diverse workforce to bring real-world and innovative perspectives to meeting our clients’ needs. With 1,100 lawyers and 21 strategically located offices worldwide, McGuireWoods uses client-focused teams to serve public, private, government and nonprofit clients from many industries, including automotive, energy resources, healthcare, technology and transportation.