Florida Supreme Court Holds CGL Policy Covers an "Advertising Injury" Based Upon a TCPA Violation

            The Florida Supreme Court recently held that a commercial general liability (“CGL”) insurance policy that provides coverage for an “advertising injury” covers a violation of the Telephone Consumer Protection Act (“TCPA”). Penzer v. Transp.  Ins. Co., No. SC08-2068, 2010 WL 308043 (Fla. Jan. 28, 2010). The definition of “advertising injury” in the CGL policy at issue provided coverage for an “injury arising out of” the “[o]ral or written publication of material that violates a person’s right of privacy.” Id. at *4. The policy at issue had no relevant exclusions. Id. at *5-6.

            In the case, the plaintiff filed a class action lawsuit against Nextel South Communication for a violation of the TCPA. Id. at *2. The plaintiff alleged that 24,000 unsolicited blast-fax advertisements were sent to him and others like him in violation of the TCPA. Id. at *2, 9. Seeking indemnity and contribution for any liability Nextel might have in the underlying suit, Nextel filed a third-party complaint against Southeast Wireless. Id. at *3. Southeast Wireless then requested Transportation Insurance Company (“Transportation”), its commercial liability insurer, to defend it in the class action. Id. Transportation refused to defend Southeast Wireless and disclaimed coverage. Id. Ultimately, Southeast Wireless settled with the plaintiff and assigned its right to seek insurance coverage from Transportation to the plaintiff. Id.

            The case came to the Florida Supreme Court on a certified question from the U.S. Court of Appeals for the Eleventh Circuit. Id. at *1-2. Essentially, the Eleventh Circuit asked whether the policy provides coverage for a TCPA violation when no private information is revealed in the fax. Id. at *2.

 

            Answering the certified question in the affirmative, Florida Supreme Court Justice Polston, writing for the court, applied the plain meaning approach to the interpretation of the insurance contract. Id. at *14. The court focused on the three essential elements of the coverage provision, “publication,” “material,” and “right of privacy,” and referred to a dictionary to define the first two terms, which were left undefined in the insurance contract. Id. at *8, 9.

 

            The court concluded that sending 24,000 unsolicited fax advertisements constitutes “publication” because the faxes disseminated information to the public. Id. at *9. The court concluded that the faxes were “material” because a faxed advertisement “consists of matter” and “may be synthesized or further elaborated or may serve as the basis for arriving at fresh interpretations or judgments or conclusions.” Id. (internal quotations and ellipses omitted).

 

            Most importantly, the court noted that “the plain meaning of ‘right to privacy’ is the legal claim one may make for privacy, which is to be gleaned from federal or Florida law.” Id. at *10. The court stated that “[i]n this case, the source of the right of privacy is the TCPA.” Id. Citing several federal district and circuit court cases for the proposition, the court stated that the TCPA “provides the privacy right to seclusion.” Id. The court therefore rejected Transportation’s argument to the contrary that the “right to privacy” applies only to the content of the material and should not apply to a TCPA violation where the content of the material disseminated does not violate a person’s right to privacy. Id. at *12.

 

            Concurring separately in the result, Justices Pariente and Canady both found ambiguity in the coverage provision and stated that they would find that coverage existed by applying the rule that coverage ambiguities are resolved in favor of the insured. Justice Pariente stated that the policy is ambiguous as to whether coverage exists when it is the content of the material that violates a person’s right of privacy, or when it is the act of sending the material that violates a person’s right of privacy. Id. at *16. Similarly, Justice Canady found ambiguity in the words “material” and “publication.” Id. at *18.

            Although Penzer dealt with a privacy violation arising from a fax communication, the Florida Supreme Court’s approach to CGL coverage is not explicitly limited to faxes. It is important to note that the Florida Supreme Court’s approach to addressing CGL coverage for an injury affecting a “person’s right of privacy” appears to be entirely dependent upon an underlying law providing for a right to privacy. The court’s focus on the TCPA protecting the right to seclusion specifically suggests that the court will look to the specific form of privacy protected by the underlying law, rather than vague notions of privacy. If the underlying law providing the right to privacy does not vindicate a particular form of privacy, it is possible that the Florida Supreme Court would find that no CGL coverage exists.

Iowa Enacts 43rd State Breach Notification Law

On May 9, 2008, Iowa Governor Chester Culver signed legislation (SF 2308) requiring any person who owns or licenses computerized data that includes a consumer's personal information to give notice of a breach of security. The law does not require notification if, after an appropriate investigation or after consultation with the relevant federal, state, or local agencies responsible for law enforcement, the person determined that no reasonable likelihood of financial harm to the consumers whose personal information has been acquired has resulted or will result from the breach.  Following is an updated list of the 43 state security breach notification laws (plus District of Columbia and Puerto Rico).

Arizona (ARIZ. REV. STAT. ANN. § 44-7501(h))

Arkansas (ARK. CODE ANN. § 4-110-101 et seq.)

California (CAL. CIV. CODE § 1798.82)

Colorado (COLO. REV. STAT. § 6-1-716)

Connecticut (CONN. GEN. STAT. § 36a-701b)

Delaware (DEL. CODE ANN. tit. 6, § 12B-101)

District of Columbia (District of Columbia B16-810, D.C. Code § 28-3851)

Florida (FLA. STAT. § 817.5681)

Georgia (GA. CODE ANN. § 10-1-911)

Hawaii (Hawaii Revised Stat. §§ 487N-1 et seq.)

Idaho (IDAHO CODE ANN. § 28-51-104 et seq.)

Illinois (815 ILL. COMP. STAT. ANN. 530/5, /10)

Indiana (IND. CODE § 24-4.9)

Iowa (SF 2308)

Kansas (KAN. STAT. ANN. §§ 50-7a01-02)

Louisiana (LA. REV. STAT. ANN. § 51:3071 et seq.)

Maine (ME. REV. STAT. ANN. tit. 10, §1346 et seq.)

Maryland (H.B. 208 and S.B. 194)

Massachusetts (Massachusetts General Laws Ann. 93H §§ 1 et seq.)

Michigan (Michigan Compiled Laws Ann. 445.72)

Minnesota (MINN. STAT. § 325E.61)

Montana (MONT. CODE ANN. § 30-14-1704)

Nebraska (NEB. REV. STAT. § 87-801 et seq.)

Nevada (NEV. REV. STAT. 603A.010 et seq.)

New Hampshire (N.H. REV. STAT. ANN. § 359-C:19 et seq.)

New Jersey (N.J. STAT. ANN. § 56:8-163)

New York (N.Y. GEN. BUS. LAW § 899-aa)

North Carolina (N.C. GEN. STAT.§ 75-60 et seq.)

North Dakota (N.D. CENT. CODE § 51-30-01 et seq.)

Ohio (OHIO REV. CODE ANN. § 1349.19)

Oklahoma (Okla. Stat. § 74-3113.1)

Oregon (S.B. 583)

Pennsylvania (73 PA. CONS. STAT. ANN. § 2303)

Puerto Rico (Law 111 and Regulation 7207)

Rhode Island (R.I. GEN. LAWS § 11-49.2-3))

South Carolina S.B. 453

Tennessee (TENN. CODE ANN. § 47-18-21)

Texas (TEX. BUS. & COMM. CODE ANN. § 48.001 et seq.)

Utah (UTAH CODE ANN. § 13-44-101 et seq.)

Vermont (VT. STAT. ANN. tit. 9, § 2430 et seq.)

Virginia S.B. 307

Washington (WASH. REV. CODE § 19.255.010)

West Virginia S.B. 340

Wisconsin (WIS. STAT. § 895.507)

Wyoming (W.S. 40-12-501 through 40-12-509)

More Breach Notification Laws -- 42 States and Counting

Virginia, West Virginia, and South Carolina are the latest states to pass data breach notification laws, bringing to 42 the total number of states with such laws on the books (including the one state with a law that applies only to public entities, Oklahoma).  Listed below are the 41 states with laws that apply to private entities (plus the District of Columbia and Puerto Rico).

Arizona (ARIZ. REV. STAT. ANN. § 44-7501(h))

Arkansas (ARK. CODE ANN. § 4-110-101 et seq.)

California (CAL. CIV. CODE § 1798.82)

Colorado (COLO. REV. STAT. § 6-1-716)

Connecticut (CONN. GEN. STAT. § 36a-701b)

Delaware (DEL. CODE ANN. tit. 6, § 12B-101)

District of Columbia (District of Columbia B16-810, D.C. Code § 28-3851)

Florida (FLA. STAT. § 817.5681)

Georgia (GA. CODE ANN. § 10-1-911)

Hawaii (Hawaii Revised Stat. §§ 487N-1 et seq.)

Idaho (IDAHO CODE ANN. § 28-51-104 et seq.)

Illinois (815 ILL. COMP. STAT. ANN. 530/5, /10)

Indiana (IND. CODE § 24-4.9)

Kansas (KAN. STAT. ANN. §§ 50-7a01-02)

Louisiana (LA. REV. STAT. ANN. § 51:3071 et seq.)

Maine (ME. REV. STAT. ANN. tit. 10, §210-B-1346 et seq.)

Maryland (H.B. 208 and S.B. 194)

Massachusetts (Massachusetts General Laws Ann. 93H §§ 1 et seq.)

Michigan (Michigan Compiled Laws Ann. 445.72)

Minnesota (MINN. STAT. § 325E.61)

Montana (MONT. CODE ANN. § 30-14-1704)

Nebraska (NEB. REV. STAT. § 87-801 et seq.)

Nevada (NEV. REV. STAT. 603A.010 et seq.)

New Hampshire (N.H. REV. STAT. ANN. § 359-C:19 et seq.)

New Jersey (N.J. STAT. ANN. § 56:8-163)

New York (N.Y. GEN. BUS. LAW § 899-aa)

North Carolina (N.C. GEN. STAT.§ 75-60 et seq.)

North Dakota (N.D. CENT. CODE § 51-30-01 et seq.)

Ohio (OHIO REV. CODE ANN. § 1349.19)

Oregon (S.B. 583)

Pennsylvania (73 PA. CONS. STAT. ANN. § 2303)

Puerto Rico (Law 111 and Regulation 7207)

Rhode Island (R.I. GEN. LAWS § 11-49.2-3))

South Carolina S.B. 453

Tennessee (TENN. CODE ANN. § 47-18-21)

Texas (TEX. BUS. & COMM. CODE ANN. § 48.001 et seq.)

Utah (UTAH CODE ANN. § 13-44-101 et seq.)

Vermont (VT. STAT. ANN. tit. 9, § 2430 et seq.)

Virginia S.B. 307

Washington (WASH. REV. CODE § 19.255.010)

West Virginia S.B. 340

Wisconsin (WIS. STAT. § 895.507)

Wyoming (W.S. 40-12-501 through 40-12-509)

H.B. 208 and S.B. 194)