A significant roadblock for plaintiffs in data breach cases in Florida is the threshold issue of Article III standing. Plaintiffs must show an actual or imminent injury. Eleventh Circuit courts do not clearly articulate a rule as to the type of actual harm required to survive a motion to dismiss. Plaintiffs and defendants must therefore navigate the case law to determine the degree of harm that must be alleged in the growing canon of data breach litigation.

Under Article III, Section 2 of the U.S. Constitution, the plaintiff bears the burden of proving standing, which requires a three-part showing: the plaintiff must have suffered an injury-in-fact; the plaintiff’s injury must be fairly traceable to the defendant’s actions; and the relief requested must redress the plaintiff’s injury, see Lujan v. Defenders of Wildlife, 504 U.S. 555, 559–560 (1992).