The Privacy Statute That Couldn't Survive Strict Scrutiny: Fourth Circuit's West Virginia Ruling Reshapes Data Broker Litigation

The Collision of Judicial Safety and the First Amendment

The Fourth Circuit's decision striking down West Virginia's judicial privacy statute as an unconstitutional content-based restriction on speech represents a significant setback for states attempting to balance public officials' safety against the free flow of information. The ruling, arising from class-action lawsuits against data brokers Thomson Reuters, Whitepages, Thryv, PeopleConnect, and LexisNexis, establishes that even compelling governmental interests in protecting judges and law enforcement officers cannot justify speech restrictions that fail strict scrutiny's narrow tailoring requirement.

The decision matters because it draws a constitutional line in an area where legislatures have increasingly sought to shield public officials from doxxing and harassment. While the court acknowledged West Virginia's legitimate safety concerns, the statute's categorical prohibition on publishing home addresses and unpublished phone numbers swept too broadly, capturing protected speech without adequate justification.

Strict Scrutiny's Unforgiving Framework

Under Reed v. Town of Gilbert, 576 U.S. 155 (2015), content-based restrictions on speech are presumptively unconstitutional and survive only if the government proves they are narrowly tailored to serve a compelling state interest. The Fourth Circuit's application of this framework reveals how difficult it is for legislatures to craft privacy statutes that pass constitutional muster when they target specific categories of truthful information.

The court's reasoning suggests that West Virginia failed to demonstrate why less restrictive alternatives—such as enhanced criminal penalties for using published information to threaten or harass, or opt-in confidentiality programs—could not adequately protect judicial officers. This analysis echoes the Supreme Court's approach in Sorrell v. IMS Health Inc., 564 U.S. 552 (2011), where Vermont's prohibition on pharmacies selling prescriber-identifying information failed strict scrutiny because the state had less restrictive means to protect physician privacy.

The Fourth Circuit's decision establishes that protecting public officials from potential harm, while undoubtedly compelling, cannot justify blanket prohibitions on publishing truthful information lawfully obtained from public records.

Implications for Data Broker Litigation

For practitioners representing data brokers and information aggregators, the ruling provides substantial constitutional cover against state privacy statutes that attempt to restrict the publication of publicly available information. The decision strengthens the argument that such statutes impermissibly target speech based on its content, particularly when they distinguish between different types of personal information or different categories of data subjects.

However, the ruling does not immunize data brokers from all regulation. States retain authority to regulate commercial data practices through content-neutral means, such as disclosure requirements, opt-out mechanisms, or restrictions on how data is collected and sold rather than whether it can be published. The constitutional defect here was the statute's focus on suppressing publication of specific information rather than regulating the commercial practices surrounding that information.

The Class Action Dimension

The procedural posture of this case—class actions against multiple data brokers—highlights the scale of potential liability that privacy statutes create for information aggregators. When states impose statutory damages for each violation, the aggregation of claims in class actions can create enormous exposure, making constitutional challenges economically rational even when individual violations might seem trivial.

The Fourth Circuit's willingness to invalidate the statute on First Amendment grounds suggests that federal courts will scrutinize privacy legislation more carefully when it targets speech rather than conduct. This represents a shift from earlier eras when courts showed greater deference to legislative judgments about privacy protection, particularly for public officials.

Strategic Considerations for Privacy Litigators

For plaintiffs' attorneys pursuing privacy claims against data brokers, the decision narrows the available statutory theories. Claims based on state statutes that restrict publication of truthful information now face heightened constitutional risk. Successful claims will likely need to focus on:

• Common law privacy torts that survive constitutional scrutiny
• Federal statutes like the Fair Credit Reporting Act, 15 U.S.C. § 1681, that regulate data accuracy and permissible purposes rather than publication
• State consumer protection laws targeting deceptive or unfair data practices

Defense counsel should view this decision as authority for early constitutional challenges to state privacy statutes that restrict publication of truthful information. The ruling suggests that motions to dismiss under Rule 12(b)(6) may succeed where statutes fail strict scrutiny as a matter of law, potentially avoiding costly discovery and class certification battles.

The Broader Constitutional Landscape

The Fourth Circuit's decision fits within a broader trend of courts applying rigorous First Amendment scrutiny to privacy regulations. The Supreme Court's decision in Americans for Prosperity Foundation v. Bonta, 141 S. Ct. 2373 (2021), striking down California's donor disclosure requirements, demonstrated similar skepticism toward privacy-based justifications for compelled disclosure or restricted speech.

What makes this case particularly significant is its application to judicial and law enforcement safety—interests that typically receive substantial judicial deference. The fact that even these compelling interests could not save an inadequately tailored statute suggests that future privacy legislation must be crafted with surgical precision to survive constitutional challenge.

For state legislatures, the message is clear: protecting public officials requires more nuanced approaches than categorical publication bans. For litigators, the decision opens new avenues for challenging privacy statutes while potentially limiting the theories available to plaintiffs seeking to hold data brokers accountable for publishing sensitive personal information.