305 Ga. 812
Ga.2019Background
- In 2012 the Georgia Department of Labor compiled a spreadsheet with names, SSNs, phone numbers, emails, and ages of 4,757 unemployment‑benefit applicants (including McConnell); in 2013 an employee inadvertently emailed the spreadsheet to ~1,000 recipients.
- McConnell sued (original and amended complaints) individually and as proposed class, alleging negligence, breach of fiduciary duty, and invasion of privacy (public disclosure of private facts); alleged economic costs and emotional distress but not that identity theft or criminal misuse occurred.
- The trial court dismissed for lack of subject‑matter jurisdiction, holding the Georgia Tort Claims Act (GTCA) did not waive sovereign immunity for the alleged “losses,” and also for failure to state claims; Court of Appeals initially considered only merits and affirmed dismissal on state‑law claim grounds.
- This Court vacated and remanded to require the Court of Appeals to decide the sovereign‑immunity threshold; on remand the Court of Appeals held GTCA waived sovereign immunity but nevertheless affirmed dismissal for failure to state claims.
- On certiorari here, the Supreme Court of Georgia affirmed the Court of Appeals: GTCA waived immunity for the asserted torts, but each count (negligence, fiduciary duty, invasion of privacy — public disclosure) failed to state a claim.
Issues
| Issue | Plaintiff's Argument | Defendant's Argument | Held |
|---|---|---|---|
| Whether GTCA waived sovereign immunity for McConnell's tort claims | McConnell: GTCA §50‑21‑23(a) waives immunity for torts by state employees acting within scope; his claims are torts and fall within the GTCA definition of “loss.” | Dept: The GTCA’s definition of “loss” limits the waiver to claims accompanying personal injury, disease, or death, which are not alleged here. | Waiver applies: §50‑21‑23(a) broadly waives immunity for torts by employees acting within scope; §50‑21‑22(3)’s definition of “loss” (including catch‑all) does not bar jurisdiction. |
| Whether the complaint stated a negligence claim (duty to safeguard data) | McConnell: common‑law duty (Bradley Center language) and statutes (OCGA §§10‑1‑910, 10‑1‑393.8) imposed a duty to protect personal information. | Dept: No recognized common‑law duty to the world; statutory provisions cited do not create a tort duty for negligent disclosures. | Dismissed: Court disapproved Bradley Center’s broad language; statutes do not impose an enforceable tort duty for negligent, unintentional disclosures here; negligence claim fails. |
| Whether a fiduciary duty arose under the Trustee Clause or confidential‑relationship principles | McConnell: public officers are trustees under the Georgia Constitution and the Dept.’s role created a confidential relationship, creating fiduciary duty. | Dept: Trustee Clause applies to public officers personally benefitting financially; no allegations of personal financial gain or special trust relationship here. | Dismissed: Trustee Clause inapplicable absent alleged personal financial gain; ordinary provision of government services does not create fiduciary relationship. |
| Whether public disclosure of private facts was alleged (invasion of privacy) | McConnell: disclosure of SSNs, contact info, age, etc., publicly disclosed private facts causing emotional harm and economic costs. | Dept: The disclosed information is not the sort that injures reputation or is offensive/objectionable to a reasonable person; social security numbers and contact info are not embarrassing private facts for this tort. | Dismissed: Information does not implicate reputation or meet offensive/objectionable element; public‑disclosure claim fails. |
Key Cases Cited
- Dept. of Transp. v. Montgomery Tank Lines, 276 Ga. 105 (statewide waiver language supports broad GTCA waiver)
- Bradley Center v. Wessner, 250 Ga. 199 (disapproved to extent it created a general duty “to all the world not to subject others to an unreasonable risk of harm”)
- Rasnick v. Krishna Hospitality, 289 Ga. 565 (duty element of negligence)
- Bullard v. MRA Holding, LLC, 292 Ga. 748 (describing four invasion‑of‑privacy torts)
- Cottrell v. Smith, 299 Ga. 517 (elements and reputation focus of public‑disclosure privacy tort)
- City of Columbus v. Ga. Dept. of Transp., 292 Ga. 878 (Trustee Clause applied where public officer gained personal financial benefit)
- McConnell v. Dept. of Labor, 302 Ga. 18 (prior certiorari order vacating Court of Appeals judgement and remanding on immunity threshold)