Square Inc. (“Square”), a San Francisco-based payment processing company, is being sued by a customer who claims that the company violated privacy laws by accidently sending a receipt detailing his medical history to a friend.
Square’s Point-of-Sale app allows merchants to process payments via smartphone devices. After a transaction occurs, Square sends a digital receipt by text message to the cardholder or authorized user of the credit card. The company issues hundreds of millions of electronic invoices a year, however, as reported by the Wall Street Journal, Square has reportedly experienced issues with misdelivered receipts.
Following a medical appointment, A. customer paid his bill using a Square device at his health-care provider’s office. Following payment, the customer’s digital invoice detailing his personal treatment information and medical history was sent via text message to a friend, instead of his own phone. Lawyers for the customer claim their client “has no idea how his friend’s contact information became associated with his credit card or this particular transaction and never consented to his medical information being shared.”
Unfortunately, Square’s mishap is not an anomaly. The company has been accused of misfiring several receipts including: payment for a divorce attorney, surprise gifts for friends and obstetrician appointments. As such, the customer’s lawyers are seeking class-action status for the lawsuit. They argue that such incidents breach the company’s promise to safeguard its customers confidential data. A spokesman for Square, however, attributes the misfire to consumers sharing credit card numbers, lending out credit cards, and human error on the part of purchasers or merchants.
Regardless of the outcome of the lawsuit, the incident serves as an example of the privacy-related issues faced by many technology companies, especially those that deal frequently with customers’ personal information.
Author: Madeline Warren
Photo Credit: https://unsplash.com/@christiannkoepke
Authors
Expertise
Insights
-
Privacy and Data Protection
Canadian Privacy Regulators Publish Findings and Guidance on OpenAI Privacy Compliance
Following a multi-year joint investigation, federal and provincial privacy regulators recently published their findings with respect to OpenAI’s collection and use of personal information to train… -
Technology
Anthropic Prepares for Public Markets
Anthropic, one of the world’s leading AI firms, has confidentially submitted a draft S-1 registration statement to the U.S. Securities and Exchange Commission, paving the way for a potential initial… -
Technology
Blast-off: The Race to IPO in the American Technology Landscape
On May 20, 2026, Space Exploration Technologies Corp. (“SpaceX”) filed an S-1 form with the United States’ Securities and Exchange Commission, indicating its intention to launch an initial public… -
Technology
Humans: 0, Robot: 1 – Sony’s Project Ace Robot Beats the Pros
Developed by Sony AI, a new robot named Ace has outperformed elite table tennis players, marking a significant milestone in AI and robotics. While AI systems have previously rivalled or surpassed… -
Technology
TikTok Cleared to Continue Canadian Operations Following National Security Review
The Government of Canada (the “Government”) has concluded its most recent national security review of TikTok, the popular short-form video platform owned by Chinese technology company ByteDance Ltd… -
Technology
Confined Space Robotics Awarded $1.5M Contract to Automate Blast and Paint at Seaspan Shipyard
Confined Space Robotics (“CSR”) has been awarded a $1.5 million contract by Seaspan Shipyards to develop and integrate abrasive blast and paint robotic systems at Seaspan’s Vancouver shipyard. Seaspan…