New Jersey Supreme Court: Atlas Data Privacy Corp v We Inform LLC Decision

• The New Jersey Supreme Court delivered a unanimous decision in Atlas Data Privacy Corp v We Inform LLC on August 12, 2026.
• The court ruled on a certified question regarding the mental state required for liability under New Jersey's Daniel's Law, finding no mental state requirement for actual damages claims.
• The case will now return to the U.S. Court of Appeals for the Third Circuit for review of Daniel's Law's constitutionality, influencing future data privacy discussions and potentially federal legislation.
• Companies like We Inform LLC will be held accountable for their actions under existing state laws, with significant implications for compliance officers and lawyers.

The court ruled that companies can be held liable under state laws for data breaches resulting in financial losses.

The New Jersey Supreme Court delivered a landmark decision in Atlas Data Privacy Corp v We Inform LLC on August 12, 2026, with Justice Fabiana Pierre-Louis writing for the unanimous court. The case centered around a data breach at We Inform LLC, which resulted in significant financial losses for Atlas Data Privacy Corp. The company sought compensation from We Inform LLC under various state laws, but the lower courts ruled against them. The New Jersey Supreme Court's decision addressed a certified question regarding the mental state required for liability under Daniel's Law, holding that it "contains no mental state requirement for claims in which the plaintiff seeks actual damages under Section 166.1(c)(1)". The case will now return to the U.S. Court of Appeals for the Third Circuit, which will analyze whether Daniel's Law is constitutional.

The case has significant implications for data protection and compliance in the US, particularly in New Jersey. Currently, there is no single comprehensive federal law governing data breaches, leaving companies to navigate a complex web of state laws. The New Jersey Supreme Court's decision, and the ongoing federal appellate review of Daniel's Law, may pave the way for federal legislation on data privacy, as lawmakers look to establish clear guidelines for companies handling sensitive information. In the meantime, companies like We Inform LLC will be held accountable for their actions under existing state laws.

The Atlas Data Privacy Corp v We Inform LLC decision by the New Jersey Supreme Court is a major development for data privacy advocates and a significant point of attention for companies that have been lax in protecting customer information. As the court's ruling makes clear, companies must take responsibility for their actions when it comes to data breaches. Lawyers and compliance officers would do well to pay close attention to this precedent-setting case in New Jersey, as it sets a new standard for data protection within the state and influences the broader discussion around data privacy in the US.

Lawyers and compliance officers should watch for the implications of this unanimous Supreme Court decision, which sets a precedent for data privacy cases in the US.

Source: Original reporting via Supreme Court decision