Nicolas Nickoli, a California resident, and Oscar Oglesby, a…

Nicolas Nickoli, a California resident, and Oscar Oglesby, a Utah resident, receive notification from WalkRunBike, a U.S.-based exercise app, that their full name, username, account password, Social Security number, and medical information has been exposed online after WalkRunBike failed to patch a known vulnerability in their systems. Both Nicolas and Oscar are worried about their information being on the Dark Web, so both individuals continuously monitor their credit reports. Neither Nicolas nor Oscar has found any instances where their personal data has been misused. Can Nicolas and Oscar sue under applicable state laws?

Consume, a company based in Seattle, Washinton, offers onlin…

Consume, a company based in Seattle, Washinton, offers online shopping services through its site Consume.com. Consume wants to enhance the site’s cybersecurity by requesting additional information when customers access the site from a location that is different from their normal location. Consume keeps terabytes of data from its existing customers which contains the source IP address for each request made to the company’s web servers. When the Chief Privacy Officer reviews this plan, what is the likely response?