RadioShack filed for Chapter 11 bankruptcy in Delaware bankruptcy court in February, seeking a court-supervised sale of $1.2 billion in assets. Included in the sale is a database of customer information from about 1,700 stores regarding RadioShack’s 117 million customers.

Much has been written of late about data breaches and the liabilities for the unauthorized acquisition of Personally Identifiable Information (PII) from institutions. But what about when the alleged “breach”--the release of information --is voluntarily and/or legally compelled? What are the risks to businesses when they sell assets that include PII? What liabilities do they face? What are the rights of customers?

Radio Shack – The pioneer of PII data collection

It long has been the law that unpaid creditors of an insolvent debtor can complain if the debtor sells or otherwise transfers any of its assets for less than their fair value. Assume, for example, a company in financial distress sells one of its manufacturing plants to an unrelated purchaser for $15 million. If an unpaid creditor of the seller can demonstrate the fair value of the facility at the time of the sale was $20 million, the purchaser may be required to account to the seller, or its creditors, for the $5 million difference.

At the request of the FTC and the State of Florida, last week, the Southern District Court of Florida temporarily shut down two major telemarketing operations.

Providing an important reminder about the intersection of privacy law and bankruptcy, a bankruptcy judge has ordered the appointment of a consumer privacy ombudsman in the Chapter 11 case filed by Crumbs Bake Shop.

Crumbs Bake Shop Inc. shut down in July and filed for bankruptcy in New Jersey court that same month. The bankruptcy court ordered an auction sale, and a purchaser has come forward to buy all of the company’s assets.

In bankruptcy proceedings involving the US retailer Crumbs Bake Shop Inc (Crumbs), the US trustee has opposed the sale of Crumbs’ customer lists on the basis that this would violate Crumbs’ privacy policy. The privacy policy allows personal data held by Crumbs to be transferred only where this is required by government authorities, needed to provide services or following customer consent.

Recently, the Federal Trade Commission (“FTC”) filed a limited objection in bankruptcy court to the proposed sale of assets of ConnectEdu, Inc. (“ConnectEdu”) on the grounds that the company’s privacy policy protecting customer personal information had potentially not been complied with.

The staff of the Federal Trade Commission’s Bureau of Consumer Protection recently sent a letter to the court handling ConnectEdu’s bankruptcy proceedings and sale of assets, which may include their customer’s personal information.

On May 23, 2014, the Federal Trade Commission announced that the FTC’s Bureau of Consumer Protection sent a letter to the court overseeing the bankruptcy proceedings for ConnectEDU Inc. (“ConnectEDU”), an education technology company, warning that the proposed sale of the company’s assets raises privacy concerns.