Key Insight: A contract clause limiting liability for data breaches caused by third parties is not unconscionable. However, this clause does not bar negligence claims for failing to comply with minimum data-security standards.
Nature of Case: data-breach class action
Electronic Data Involved: customer personal data
Keywords: data security, personal data, breach, unconscionable