Baysal v. Midvale Indemnity Co., No. 22-1892 (7th Cir. 2023)
Annotate this Case
Midvale created an “instant quote” feature on their websites. Anyone who supplied basic identifying information could receive a quote for auto insurance. Each site would auto-fill some information, including the number of the applicant’s driver’s license. Anyone could enter a stranger’s name and home address, which caused the form to disclose the number of the stranger’s driver’s license. Midvale discontinued the autofill feature after observing unusual activity suggesting misuse, and notified people whose information had been disclosed improperly. Three people who received Midvale’s notice filed a purported class action under the Driver’s Privacy Protection Act, 18 U.S.C. 2721–25.
The district court held that the plaintiffs lacked standing, having failed to show a concrete injury traceable to the disclosure. The Seventh Circuit affirmed, noting that whether the Act applies at all is questionable. Its principal rule is directed to state officials rather than private actors. A driver’s-license number is not potentially embarrassing or an intrusion on seclusion. It is a neutral fact derived from public records, a fact legitimately known to many private actors and freely revealed to banks, insurers, hotels, and others. Plaintiffs have not plausibly alleged that Midvale’s disclosure of their numbers caused them any injury, and the disclosure of a number in common use by both public and private actors does not correspond to any tort.
Some case metadata and case summaries were written with the help of AI, which can produce inaccuracies. You should read the full case before relying on it for legal research purposes.
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.