"Fear and Loathing in Luxembourg"
Claudia Lea Beckmann and Dominik Hübler1Quantum and class certification in data privacy mass claims after the first ECJ and BGH decisions
Data breaches frequently lead to mass claims. With the European Court of Justice (ECJ) finding that there is no "seriousness threshold" for claims and the German Federal Supreme Court (BGH) confirming that pure loss of control can constitute a compensable event, recent court decisions create a claimant-friendly environment. With both courts delegating the task of determining damages to the lower courts, a key issue for data breach claims remains unresolved. This article outlines an evidence-based framework for the economic analysis of data privacy damages covering market- and individual valuation. The article also assesses whether survey-based conjoint analysis can provide an empirical indication of the variation in the valuation of the data; allowing courts to assess the issue of commonality of valuation based on empirical evidence.