UPMC Must Protect Workers' Personal Info, Pa. Justices Rule

By Matt Fair (November 21, 2018, 2:53 PM EST) -- Employers in Pennsylvania have an affirmative legal duty to protect workers' sensitive data from possible hacking, the Pennsylvania Supreme Court ruled Wednesday in a proposed class action over a data breach compromising the personal information of tens of thousands of University of Pittsburgh Medical Center employees.

The justices said that UPMC's collection of workers' personal data as a condition of employment saddled the health care giant with the responsibility to take reasonable care to protect that information against the risk of a cyberattack.

"Employees have sufficiently alleged that UPMC's affirmative conduct created the risk of a data breach," Justice Max Baer...

Stay ahead of the curve

In the legal profession, information is the key to success. You have to know what’s happening with clients, competitors, practice areas, and industries. Law360 provides the intelligence you need to remain an expert and beat the competition.


  • Access to case data within articles (numbers, filings, courts, nature of suit, and more.)
  • Access to attached documents such as briefs, petitions, complaints, decisions, motions, etc.
  • Create custom alerts for specific article and case topics and so much more!

TRY LAW360 FREE FOR SEVEN DAYS

Hello! I'm Law360's automated support bot.

How can I help you today?

For example, you can type:
  • I forgot my password
  • I took a free trial but didn't get a verification email
  • How do I sign up for a newsletter?
Ask a question!