When users enter their information or simply browse on a business’s website, they trust that it’s safe, secure, and being used for its intended purpose. Data privacy laws suggest that organizations collecting data have the responsibility to protect it, but according to various state statutes there’s further action required. Organizations may need to inform consumers that data is being obtained in the first place, as well as provide the option to opt out of sharing data through an informed consent process.
If an organization doesn’t inform you that your data is being collected, provide you the opportunity to opt-out, or shares your data to a third-party without obtaining informed consent, it could be considered “wrongful” — but it still depends on the state.