Court Reinstates Meta Data Lawsuit in California
The Ninth Circuit Court of Appeals ruled that alleged unauthorized data disclosure constitutes a concrete injury.
Updated on Oct. 31, 2026 in Cybersecurity
Live Poll
Should social media companies be held liable for collecting personal data from public agency websites?
The Ninth Circuit Court of Appeals has reinstated a lawsuit accusing Meta of harvesting personal data from the California Department of Motor Vehicles website. Two California drivers are now pushing for a San Francisco federal judge to revive the legal action.
Why it matters
The ruling establishes that the unauthorized disclosure of information counts as a concrete injury, providing a legal pathway for the plaintiffs to proceed. This decision significantly strengthens the position of those challenging data collection practices.
The Ninth Circuit ruling dictates that the unauthorized disclosure of information constitutes a concrete injury. This legal threshold now applies to the claims that Meta allegedly harvested personal data from the California DMV portal.
The players
Meta
Meta is a technology company that owns and operates major social media platforms including Facebook and Instagram.
California Department of Motor Vehicles
This state agency is responsible for issuing driver licenses, vehicle registration, and maintaining records for millions of residents.
Ninth Circuit Court of Appeals
This is one of the federal courts of appeals that covers a large geographic area including California.
The details
The lawsuit contends that Meta improperly collected confidential information from state systems. Plaintiffs are relying on the new appellate ruling to argue that their case should move forward in federal court.
Timeline
October 30, 2026: The Ninth Circuit issued its ruling and drivers requested the federal judge take action.
The Tech Race
This ruling updates the Article III standing requirements for data privacy litigation by lowering the bar for what qualifies as a concrete injury. It marks a significant shift in how tech companies face liability for data collection practices across state portals.
California residents may see broader legal protections regarding their personal data stored in state systems as this case proceeds. The ruling serves as a potential deterrent for companies that scrape information from public databases.
The takeaway
This court decision reinforces the legal accountability tech firms face when handling government-sourced data. Consumers should remain vigilant about how their personal details are accessed by third-party platforms.
Further reading
For broader trends in digital privacy, see our Cybersecurity section.
Source note: This article includes information reported by Law360.
Live Poll
Should social media companies be held liable for collecting personal data from public agency websites?
