
Square Inc. (“Square”), a San Francisco-based payment processing company, is being sued by a customer who claims that the company violated privacy laws by accidently sending a receipt detailing his medical history to a friend.
Square’s Point-of-Sale app allows merchants to process payments via smartphone devices. After a transaction occurs, Square sends a digital receipt by text message to the cardholder or authorized user of the credit card. The company issues hundreds of millions of electronic invoices a year, however, as reported by the Wall Street Journal, Square has reportedly experienced issues with misdelivered receipts.
Following a medical appointment, A. customer paid his bill using a Square device at his health-care provider’s office. Following payment, the customer’s digital invoice detailing his personal treatment information and medical history was sent via text message to a friend, instead of his own phone. Lawyers for the customer claim their client “has no idea how his friend’s contact information became associated with his credit card or this particular transaction and never consented to his medical information being shared.”
Unfortunately, Square’s mishap is not an anomaly. The company has been accused of misfiring several receipts including: payment for a divorce attorney, surprise gifts for friends and obstetrician appointments. As such, the customer’s lawyers are seeking class-action status for the lawsuit. They argue that such incidents breach the company’s promise to safeguard its customers confidential data. A spokesman for Square, however, attributes the misfire to consumers sharing credit card numbers, lending out credit cards, and human error on the part of purchasers or merchants.
Regardless of the outcome of the lawsuit, the incident serves as an example of the privacy-related issues faced by many technology companies, especially those that deal frequently with customers’ personal information.
Author: Madeline Warren
Authors
Expertise
Insights
-
Energy
Supreme Court of Canada Interprets the Telecommunications Act
In Telus Communications Inc. v. Federation of Canadian Municipalities, the Supreme Court of Canada considered the correct interpretation of the term “transmission line”, as used in sections 43 and… -
Technology
FlexPro Gets a Grip on Baseball Pitchers’ Injuries
Ulnar collateral ligament (“UCL”) injuries – tears of damages to the inner elbow ligament - have been a challenge for baseball pitchers of all skill levels since the sport’s inception. Baseball fans… -
Technology
Securing Canada’s Digital Future
As digital threats become increasingly sophisticated, protecting Canada’s defence supply chains has never been more important. To address this challenge, the Government of Canada introduced the… -
Technology
Canadian Legal Tech Company, Clio, Acquires UK-based ShareDo
In a strategic move to expand its services to large law firms, BC-based legal technology company Clio has acquired UK-based ShareDo. Founded in 2011, ShareDo is a provider of adaptive work management… -
Technology
The 2025 TSX Venture 50 List
The 2025 TSX Venture 50 list has been released, showcasing the top 50 best-performing companies on the TSX Venture Exchange (“TSXV”) over the past year. This year’s list was compiled based on a new… -
Litigation and Dispute Resolution
Court Declines to Rule Out Duty of Care Owed by Social Media Platforms to School Boards
In Toronto District School Board v. Meta Platforms Inc. et al. (2025 ONSC 1499), Ontario Superior Court Justice Leiper dismissed a motion to strike a lawsuit commenced by the Toronto District School…