Bass v. Facebook, Inc., No. 18-cv-05982 (N.D. Cal., 2019)
Key Insight: A contract clause limiting liability for data breaches caused by third parties is not unconscionable. However, this clause does not bar negligence claims for failing to comply with minimum data-security standards.
Nature of Case: data-breach class action
Electronic Data Involved: customer personal data
Keywords: data security, personal data, breach, unconscionable