Getting into Court When the Data Has Gotten Out: A Two-Part Framework


Part I of this Note will examine the history of the Fair Credit Reporting Act, the basics of Article III standing, and its applications to intangible harms and data-privacy related injuries. Part II of this Note will then propose two potential solutions to the standing issues that arise when consumers are granted a right to sue credit reporting agencies for data breach harms. First, this Note will argue that, as the law currently stands, the Supreme Court should recognize that data breaches cause particularized and concrete harms sufficient to satisfy the injury-in-fact requirement of Article III. Finally, this Note will argue that because of judicial inconsistencies in applying the standing doctrine, state legislatures should adopt a uniform law, allowing Article III standing issues to be avoided altogether.


Data breaches, Fair Credit Reporting Act, Article III standing, Privacy harm, Injury-in-fact



Alyssa L. Aubuchon (Washington University School of Law)



Publication details



All rights reserved

File Checksums (MD5)

  • pdf: a9e26d36a17f5c2ccef73502b4189ed6