Data Breach Class Action Settlement Gets Final Approval - Payment To Be Made To Class Members Who Did Not Experience ID Theft

Last week, a judge for the Southern District of Florida gave final approval  to a settlement between health insurance provider AvMed and plaintiffs in a class action stemming from a 2009 data breach of 1.2 million sensitive records from unencrypted laptops. The settlement requires AvMed to implement increased security measures, such as mandatory security awareness training and encryption protocols on company laptops. More notably, AvMed agreed to create a $3 million settlement fund from which members can make claims for $10 for each year that they bought insurance, subject to a $30 cap (class members who experienced identity theft are eligible to make additional claims to recover their monetary losses). According to Plaintiffs' Unopposed Motion and Memorandum in Support of Preliminary Approval of Class Action Settlement   ("Motion"), this payment to class members "represents reimbursements for data security that they paid for but allegedly did not receive. The true