• DoorDash filed a lawsuit against New York City in a Manhattan federal court over a law that requires online food delivery services to share customers’ data, calling it a “shocking and invasive intrusion of consumers’ privacy,” Time reports. “Customers will face a serious risk of harm from their personal data being shared with every restaurant that fulfills their order on DoorDash’s platform,” the company said.
• Following a ransomware breach that affected 1.4 million individuals, a proposed class-action lawsuit filed against Georgia-based St. Joseph’s/Candler Health System alleges the organization was “negligent” in protecting patient information, GovInfoSecurity reports.

Editor’s note: Squire Patton Boggs Counsel Kyle Fath outlined New York City’s bill on consumer privacy and delivery apps, highlighting key provisions businesses should keep in mind.