Photo of Joshua Davey

Josh has nearly two decades of experience representing companies in high-stakes class action litigation, government investigations, and business disputes. A partner in Troutman Pepper’s Privacy + Cyber team and a Certified Information Privacy Professional, he has extensive experience in data breach litigation, having served as one of the court-appointed lead defense counsel for a cloud software company in one of the largest data breach multidistrict litigation proceedings in the U.S. Josh regularly litigates claims under numerous privacy laws, including the FCRA, the DPPA, and the California Consumer Privacy Act.

In an unusual move, attorneys general (AG) from 30 states and the District of Columbia filed a bipartisan amicus brief in the Ninth Circuit supporting efforts to revive a proposed class action against payment processor Shopify. The amici back plaintiff-appellant Brandon Briskin in his effort to convince the Ninth Circuit to overturn en banc a three-judge panel decision affirming the dismissal of his data privacy suit for lack of personal jurisdiction.

In an era where privacy, security, and artificial intelligence are at the forefront of many business operations, staying informed about the latest developments is crucial. Our 2023 Privacy Year in Review is an in-depth analysis of the past year’s significant advancements and challenges in these areas.

On January 27, California Attorney General Rob Bonta announced an “investigative sweep” of businesses with mobile applications for allegedly failing to comply with the California Consumer Privacy Act (CCPA). This ongoing sweep targets popular mobile applications in the retail, travel, and food service industries that fail to offer a mechanism for consumers to opt out of data sales or that fail to process consumer opt-out requests, including requests submitted via an authorized agent like Permission Slip.

A federal court in Michigan recently ruled that out-of-state residents have standing to sue under the Michigan Personal Privacy Protection Act (PPPA). In Lin v. Crain Communications, Inc., Case No. 2:19-cv-11889 (E.D. Mich., June 25, 2019), Gary Lin, a Virginia resident, filed a putative class-action lawsuit against Crain Communications, Inc. (Crain), a Michigan-based publishing