Michael Daugherty spent years wrangling with the Federal Trade Commission over a 2008 data breach at his now-defunct company LabMD before finally defeating the agency after the U.S. Court of Appeals for the Eleventh Circuit ruled the FTC overstepped its authority in ordering sweeping and largely undefined remedial measures.

That five-year fight isn’t over: Daugherty and LabMD—which still exists as a corporate entity—are still embroiled in litigation, including a $1.7 million attorney fee request he filed against the FTC to recoup his fees at the Eleventh Circuit.