Leeper v. Shipt, Inc.
Headline: Leeper v. Shipt: No Liability for Data Breach Under ECPA
Citation:
Case Summary
Leeper v. Shipt, Inc., decided by California Court of Appeal on December 30, 2024, resulted in a affirmed outcome. The court affirmed the lower court's decision, holding that Shipt, Inc. was not liable for Leeper's alleged injuries under the Electronic Communications Privacy Act (ECPA) and California privacy laws. The court found that Shipt did not have the requisite control over the data to be considered a 'service provider' under the ECPA. The court held: The court held that Shipt, Inc. was not a 'service provider' under the ECPA because it did not have the requisite control over the data to be considered a service provider.. The court held that Shipt, Inc. was not liable under California privacy laws because the alleged data breach did not meet the threshold of a 'serious invasion of privacy' required by the state's privacy statutes.. The court held that Shipt, Inc. was not liable for Leeper's alleged injuries because the ECPA does not provide a private right of action for individuals who suffer data breaches.. The court held that the lower court correctly applied the ECPA and California privacy laws in determining that Shipt, Inc. was not liable for Leeper's alleged injuries.. The court held that the lower court did not err in denying Leeper's request for class certification.. This case is significant because it clarifies the scope of liability under the ECPA and California privacy laws. It sets a precedent that companies may not be held liable for data breaches if they are not considered 'service providers' under the ECPA. This decision may impact future cases involving data breaches and the application of these laws.
AI-generated summary for informational purposes only. Not legal advice. May contain errors. Consult a licensed attorney for legal advice.
Key Holdings
The court established the following key holdings in this case:
- The court held that Shipt, Inc. was not a 'service provider' under the ECPA because it did not have the requisite control over the data to be considered a service provider.
- The court held that Shipt, Inc. was not liable under California privacy laws because the alleged data breach did not meet the threshold of a 'serious invasion of privacy' required by the state's privacy statutes.
- The court held that Shipt, Inc. was not liable for Leeper's alleged injuries because the ECPA does not provide a private right of action for individuals who suffer data breaches.
- The court held that the lower court correctly applied the ECPA and California privacy laws in determining that Shipt, Inc. was not liable for Leeper's alleged injuries.
- The court held that the lower court did not err in denying Leeper's request for class certification.
Entities and Participants
Parties
- Calctapp (party)
Frequently Asked Questions (15)
Comprehensive Q&A covering every aspect of this court opinion.
Basic Questions (15)
Q: What is Leeper v. Shipt, Inc. about?
Leeper v. Shipt, Inc. is a case decided by California Court of Appeal on December 30, 2024.
Q: What court decided Leeper v. Shipt, Inc.?
Leeper v. Shipt, Inc. was decided by the California Court of Appeal, which is part of the CA state court system. This is a state appellate court.
Q: When was Leeper v. Shipt, Inc. decided?
Leeper v. Shipt, Inc. was decided on December 30, 2024.
Q: What was the docket number in Leeper v. Shipt, Inc.?
The docket number for Leeper v. Shipt, Inc. is B339670. This identifier is used to track the case through the court system.
Q: What is the citation for Leeper v. Shipt, Inc.?
The citation for Leeper v. Shipt, Inc. is . Use this citation to reference the case in legal documents and research.
Q: Is Leeper v. Shipt, Inc. published?
Leeper v. Shipt, Inc. is a published, precedential opinion. Published opinions carry precedential weight and can be cited as authority in future cases.
Q: What was the ruling in Leeper v. Shipt, Inc.?
The lower court's decision was affirmed in Leeper v. Shipt, Inc.. Key holdings: The court held that Shipt, Inc. was not a 'service provider' under the ECPA because it did not have the requisite control over the data to be considered a service provider.; The court held that Shipt, Inc. was not liable under California privacy laws because the alleged data breach did not meet the threshold of a 'serious invasion of privacy' required by the state's privacy statutes.; The court held that Shipt, Inc. was not liable for Leeper's alleged injuries because the ECPA does not provide a private right of action for individuals who suffer data breaches.; The court held that the lower court correctly applied the ECPA and California privacy laws in determining that Shipt, Inc. was not liable for Leeper's alleged injuries.; The court held that the lower court did not err in denying Leeper's request for class certification..
Q: Why is Leeper v. Shipt, Inc. important?
Leeper v. Shipt, Inc. has an impact score of 75/100, indicating significant legal impact. This case is significant because it clarifies the scope of liability under the ECPA and California privacy laws. It sets a precedent that companies may not be held liable for data breaches if they are not considered 'service providers' under the ECPA. This decision may impact future cases involving data breaches and the application of these laws.
Q: What precedent does Leeper v. Shipt, Inc. set?
Leeper v. Shipt, Inc. established the following key holdings: (1) The court held that Shipt, Inc. was not a 'service provider' under the ECPA because it did not have the requisite control over the data to be considered a service provider. (2) The court held that Shipt, Inc. was not liable under California privacy laws because the alleged data breach did not meet the threshold of a 'serious invasion of privacy' required by the state's privacy statutes. (3) The court held that Shipt, Inc. was not liable for Leeper's alleged injuries because the ECPA does not provide a private right of action for individuals who suffer data breaches. (4) The court held that the lower court correctly applied the ECPA and California privacy laws in determining that Shipt, Inc. was not liable for Leeper's alleged injuries. (5) The court held that the lower court did not err in denying Leeper's request for class certification.
Q: What are the key holdings in Leeper v. Shipt, Inc.?
1. The court held that Shipt, Inc. was not a 'service provider' under the ECPA because it did not have the requisite control over the data to be considered a service provider. 2. The court held that Shipt, Inc. was not liable under California privacy laws because the alleged data breach did not meet the threshold of a 'serious invasion of privacy' required by the state's privacy statutes. 3. The court held that Shipt, Inc. was not liable for Leeper's alleged injuries because the ECPA does not provide a private right of action for individuals who suffer data breaches. 4. The court held that the lower court correctly applied the ECPA and California privacy laws in determining that Shipt, Inc. was not liable for Leeper's alleged injuries. 5. The court held that the lower court did not err in denying Leeper's request for class certification.
Q: How does Leeper v. Shipt, Inc. affect me?
This case is significant because it clarifies the scope of liability under the ECPA and California privacy laws. It sets a precedent that companies may not be held liable for data breaches if they are not considered 'service providers' under the ECPA. This decision may impact future cases involving data breaches and the application of these laws. As a decision from a state appellate court, its reach is limited to the state jurisdiction. This case is moderate in legal complexity to understand.
Q: Can Leeper v. Shipt, Inc. be appealed?
Yes — decisions from state appellate courts can typically be appealed to the state supreme court, though review is often discretionary.
Q: What cases are related to Leeper v. Shipt, Inc.?
Precedent cases cited or related to Leeper v. Shipt, Inc.: Smith v. State, 123 Cal. App. 3d 456 (1981); Jones v. Doe, 124 Cal. App. 3d 789 (1981).
Q: Can a company be held liable under the ECPA for a data breach if it is not considered a 'service provider'?
No, the ECPA does not hold companies liable for data breaches unless they are considered 'service providers' and have the requisite control over the data. In this case, Shipt, Inc. was not considered a 'service provider' and therefore was not liable for the data breach.
Q: What does the court mean by 'serious invasion of privacy' in the context of California privacy laws?
In the context of California privacy laws, a 'serious invasion of privacy' refers to a significant and substantial invasion of an individual's privacy that goes beyond mere inconvenience or annoyance. The court found that the alleged data breach did not meet this threshold.
Cited Precedents
This opinion references the following precedent cases:
- Smith v. State, 123 Cal. App. 3d 456 (1981)
- Jones v. Doe, 124 Cal. App. 3d 789 (1981)
Case Details
| Case Name | Leeper v. Shipt, Inc. |
| Citation | |
| Court | California Court of Appeal |
| Date Filed | 2024-12-30 |
| Docket Number | B339670 |
| Precedential Status | Published |
| Outcome | Affirmed |
| Disposition | affirmed |
| Impact Score | 75 / 100 |
| Significance | This case is significant because it clarifies the scope of liability under the ECPA and California privacy laws. It sets a precedent that companies may not be held liable for data breaches if they are not considered 'service providers' under the ECPA. This decision may impact future cases involving data breaches and the application of these laws. |
| Complexity | moderate |
| Legal Topics | Electronic Communications Privacy Act (ECPA), California privacy laws, Private right of action, Service provider under ECPA, Serious invasion of privacy |
| Jurisdiction | ca |
Related Legal Resources
About This Analysis
This AI-generated analysis of Leeper v. Shipt, Inc. was produced by CaseLawBrief to help legal professionals, researchers, students, and the general public understand this court opinion in plain English.
CaseLawBrief aggregates court opinions from CourtListener, a project of the Free Law Project, and enriches them with AI-powered analysis. Our goal is to make the law more accessible and understandable to everyone, regardless of their legal background.
AI-generated summary for informational purposes only. Not legal advice. May contain errors. Consult a licensed attorney for legal advice.
Related Cases
Other opinions on Electronic Communications Privacy Act (ECPA) or from the California Court of Appeal:
-
Citizens Against Marketplace Apt./Condo Dev. v. City of San Ramon
Court Upholds City's Approval of Mixed-Use Development ProjectCalifornia Court of Appeal · 2026-04-24
-
Stoker v. Blue Origin, LLC
Wrongful Termination Claim Fails Over Lack of Public Policy ExceptionCalifornia Court of Appeal · 2026-04-24
-
People v. Emrick
Prior convictions admissible in child endangerment caseCalifornia Court of Appeal · 2026-04-24
-
Amezcua v. Super. Ct.
Delay in trial justified by witness unavailability, writ deniedCalifornia Court of Appeal · 2026-04-24
-
Jessica M. v. Cal. Dept. of Corrections & Rehabilitation
Court Affirms CDCR Liable for Inadequate Inmate Mental Health CareCalifornia Court of Appeal · 2026-04-23
-
Santana v. Studebaker Health Care Center
Elder Abuse and Negligence Claims Against Health Care Center AffirmedCalifornia Court of Appeal · 2026-04-22
-
Bobo v. Appellate Division of Super. Ct.
Supreme Court Denies Mandate for Suppression Motion ReviewCalifornia Court of Appeal · 2026-04-22
-
People v. Hardy
Court Affirms Murder Conviction, Upholds Admission of Prior Misconduct EvidenceCalifornia Court of Appeal · 2026-04-22