Fourth Circuit Decision Highlights Class Action Waivers For Data Breaches Are Alive And Well

On August 18, 2023, the Fourth Circuit decertified approximately 20 million putative class action claims arising out of a 2018 data breach involving Marriott Hotels. See here. The Fourth Circuit reversed the district court's certification and required it to consider in the first instance whether all of the putative plaintiffs waived their claims by signing class action waivers when they registered to be part of the Starwood Preferred Guest Program ("SPG"). The SPG waiver specifically stated that "Any disputes arising out of or related to the SPG Program or the[] SPG Program Terms will be handled individually without any class action ...."

The Fourth Circuit made clear that trial courts must consider the import of class-action waivers signed by putative class members before certifying class actions against a Defendant. According to the Fourth Circuit, this "error affect[ed] the whole of the certification order." This important decision speaks not only to the process