Illuminate wins another round in court, but it may not all be over

The California Supreme Court reversed a lower court ruling and held that claims against Illuminate Education arising from a December 2021 breach (which exposed millions of student records) did not state viable claims under the Confidentiality of Medical Information Act (CMIA) or the Customer Records Act (CRA); the opinion narrows who qualifies as a CMIA health care provider but also holds that stolen information need not have been viewed to constitute a CMIA breach, and the case has been remanded for further proceedings.