BJ’s Wholesale Club, a popular membership-only warehouse club chain operating in the US, has lost a preliminary bid to dismiss a potentially significant class-action lawsuit. The lawsuit, brought forth by Joe Alves, accuses BJ’s of employing a computer code known as Session Replay Code (SRC) to surreptitiously record consumer activity on the company’s website.
The legal weight underpinning these allegations is substantial. Mr. Alves argues that BJ’s practices have violated two statutory regulations. First, the Massachusetts Wiretap Statute, G.L. c. 272, § 99, which restricts the secret recording of any spoken or oral communication. Second, the Massachusetts Right of Privacy Statute, G.L. c. 214, § 1B, that safeguards citizen’s rights to privacy.
Given the pervasiveness of web-based interactions in the contemporary commercial landscape, the case could become a touchstone for future litigation surrounding covert consumer tracking. Furthermore, it raises significant questions regarding the adequacy of existing legal frameworks aimed at governing online behaviours, particularly in the context of user privacy.
Another point for consideration centres around informed consent. If BJ’s Wholesale indeed used the SRC to track user activity without explicit consent, it could well be seen as a violation of the principle of informed consent — a cornerstone of privacy laws internationally.
It could also put other corporations on notice if they choose to employ similar tracking tools without making their purpose and use clear to users. In a digital age where data is the new “oil,” companies must navigate the thin line of using customer data for business purposes and respect the personal privacy of its users.
This is still a developing situation, to stay updated on this specific case and to learn more about the details, click here.