In Michigan , the Court of Appeals has recently ruled that, under negligence principles, unionized 911 operators who were victims of identity theft were owed a duty of care by the union that held their personal information. The union was aware that confidential member information was being removed from its premises but did not develop procedural safeguards to ensure the security of the information, and the Court determined that it was foreseeable that the information would be misused and union members would suffer harm. Accordingly, the Court concluded that a special relationship existed between the union and its members such that the union owed its members a duty to protect them from identity theft by providing some safeguards to ensure the security of their most essential confidential identifying information, which could easily be used to appropriate a person's identity.
For a copy of the decision, visit:
http://www.michbar.org/opinions/appeals/2005/021505/26184.pdf