Category: Privacy Expert Witness

  • Privacy Expert Was Not Allowed to Opine on ECPA and SCA

    Privacy Expert Was Not Allowed to Opine on ECPA and SCA

    Plaintiff sued Defendants for their purported involvement in unlawfully accessing and disclosing confidential financial information pertaining to him, and to others similarly situated to him, in connection with a state court case against Plaintiff’s accountant. As part of the discovery in that case, which involved claims against the accountant for contractual breaches and related business torts, the State Court ordered the accountant to provide access to client records. Plaintiff thereafter filed this putative class action. Plaintiff’s motion for class certification was denied on July 20, 2026.

    Plaintiff has disclosed Jeffery Stollman as an expert on the two statutes that Defendants are accused of violating in this case—the Electronic Communications Privacy Act (ECPA) and the Stored Communications Act (SCA)—as well as on damages.

    Privacy Expert Witness

    Jeffery P. Stollman is an identity and privacy expert with decades of experience in the technology and privacy fields. His educational background is also in those fields, as well as in economics

    Want to know more about the challenges Jeffery Stollman has faced? Get the full details with our Challenge Study report.

    Discussion by the Court

    To begin with Stollman lacked sufficient familiarity with the ECPA and SCA to qualify him to offer legal opinions on these statutes. His deposition testimony indicated, for example, that before Plaintiff retained him for this case, Stollman had not read the statutes and did not know the good faith reliance defense applicable to them.

    As to Stollman’s methods, he reviewed the operative pleading in this case and read the text of the statutes to arrive at his opinions as to how the complained-of misconduct amounted to violations of the ECPA and SCA, and he calculated damages based on general risks associated with the disclosure of personally identifiable information, such as the information that Plaintiff alleged Defendants unlawfully disclosed. The Court held that Stollman’s methods regarding the ECPA and SCA are unreliable because they amount to his ipse dixit.

    As to helpfulness, Stollman concluded that Defendants violated the ECPA and the SCA, and that in general, damages from unlawfully disclosed information totaled approximately $5,905, although additional analysis aimed at increasing precision could “result in values significantly lower or significantly higher.” These conclusions are not helpful. Respecting the ECPA and SCA, an expert “may not . . . merely tell the jury what result to reach” and “may not testify to the legal implications of conduct” because “the Court must be the jury’s only source of law.”

    Held

    The Court granted Defendants’ motion to exclude Jeffery Stollman’s testimony.

    Key Takeaway

    Expert testimony will not help the trier of fact when it offers nothing more than what lawyers for the parties can argue in closing arguments.

    Case Details:

    Case Caption: Mohamad V. Lawgical Insight
    Docket Number: 6:24cv2354
    Court Name: United States District Court, Florida Middle
    Order Date: July 21, 2026
  • Privacy Expert’s Testimony on Alexa Users Limited

    Privacy Expert’s Testimony on Alexa Users Limited

    This class action lawsuit arises out of Amazon’s practice of using smart-speaker technology (“Alexa”) to surreptitiously: (a) intercept; (b) eavesdrop; (c) record; (d) disclose; or (e) use millions of Americans’ voices and communications, all without their knowledge or consent. Such conduct blatantly violates Washington’s wiretapping law, which applies nationwide to Plaintiffs and all members of the Class.

    Defendants here, Amazon.com, Inc. and Amazon.com Services LLC (collectively, “Amazon” or “Defendants”), are therefore liable as a result of their egregious violations of the State Wiretapping laws – and are also liable for their violations of the Washington Consumer Protection Act (“CPA”), the Electronic Communications Privacy Act of 1986 (“Federal Wiretap Act”), and the Stored Communications Act of 1986 (“SCA”). Plaintiffs Kaeli Garner, Jodi Brust, Diane McNealy, Michael McNealy, Ricky Babani, Jeffrey Hoyt, Lorlie Tesoriero, Ronald Johnson, Selena Johnson and Caron Watkins (collectively, “Plaintiffs”) brought this action individually, and on behalf of a Class of similarly situated individuals, to redress those violations of law.

    Amazon filed a motion to exclude the testimony of Plaintiffs’ expert, David Hoffman. Defendants sought to exclude Hoffman’s testimony regarding the sufficiency of Amazon’s disclosures in its privacy policies, terms of use, and marketing materials as improper legal conclusion and/or an invasion of the province of the jury.

    Privacy Expert Witness

    David Alfred Hoffman is the Steed Family Professor of the Practice of Cybersecurity Policy at the Sanford School of Public Policy at Duke University. Hoffman has advised employers and other organizations regarding the use of consumer data, cybersecurity, privacy, and data governance. While employed by Intel Corporation, Hoffman was the Director of Privacy, overseeing privacy issues related to the data Intel collected, processed, and used and Intel’s products.

    He has authored internet privacy policies and terms of use documents for corporations and served on governmental advisory boards tasked with considering issues related to the effective provision of information about the collection of personal data by devices. In addition, Hoffman oversaw industry efforts to create a certification process for companies with responsible data management practices, including efforts to adequately disclose data collection and use practices through privacy policies.

    Get the full story on challenges to David Hoffman’s expert opinions and testimony with an in-depth Challenge Study.

    Discussion by the Court

    The Court found that Hoffman has the necessary experience to opine regarding industry standards and best practices for providing notice to consumers or users that data is being collected and how it will be used. He also has the expertise to compare Amazon’s policies, practices, and disclosures to the industry standards, to identify in what way Amazon’s practices are deficient, and explain how the deficiency or deficiencies would impact a reasonable consumer’s understanding of how Alexa works.

    In two important respects, however, Hoffman’s opinions are not supported by any knowledge, skill, experience, training, or education he may have.

    Hoffman did not suggest that the universe of representations are subject to or violate any industry standard or best practice

    First, with regards to his opinion that Amazon’s marketing materials are inconsistent with and countermand the disclosures made in the privacy policy, Hoffman did not suggest that the universe of representations are subject to or violate any industry standard or best practice. Thus, his area of expertise did not inform this opinion. Nor is there any reason to suspect that his opinion regarding the interactions between documents would be helpful to the trier of fact.

    There is no indication that Hoffman has relevant experience or training that would allow him to opine on what Alexa users actually knew

    Second, Hoffman’s conclusion that a user or group of users did not, in fact, understand how Alexa works or did not consent to the recording of their voice data is not supported by any surveys, interviews, research, or studies. There is no indication that Hoffman has relevant experience or training that would allow him to opine on what Alexa users, individually or collectively, actually knew given the disparate sources of information regarding the Alexa device.

    Finally, Hoffman will not be permitted to testify regarding opinions that were not included in his report, such as that Amazon shares Alexa data with third-parties or that Amazon created its disclosures with the intent to mislead consumers. He may, however, opine on facts that may be relevant to the jury’s understanding of Amazon’s practices and intentions.

    Held

    The Court granted in part and denied in part the Defendants’ Daubert motion regarding Professor David Hoffman.

    Key Takeaway

    While Hoffman’s experiences in evaluating privacy policies and establishing best practices for alerting consumers when and why their personal data is being collected necessarily involves an understanding of how the typical or reasonable consumer would react to and understand different practices, that is not the same as opining what a particular person or group of persons actually knew or understood.

    Please refer to the blog previously published about this case:

    Computer Science Expert’s Testimony on the Value of Data Admitted

    Case Details:

    Case Caption: Garner V. Amazon.Com, Inc.
    Docket Number: 2:21cv750
    Court Name: United States District Court for the Western District of Washington
    Order Date: January 05, 2026