Data privacy litigation