Experts say there are protections in the law that could allow federal employees caught up in the massive Chinese hack of their personnel data to sue the government. But the feds have many shields against legal action.

Our colleague Andrea Peterson explores this issue in a post Wednesday. She writes:

….Experts have warned that victims of data breaches may face an increased risk of fraud due to compromised information that persists after those services expire. And they may have other legal options.
“The Privacy Act of 1974 clearly placed an obligation on federal agencies to protect information they collected. It also created a mechanism for people to bring lawsuits against agencies that failed to safeguard information in their protection,” said Marc Rotenberg, the executive director of the Electronic Privacy Information Center.
But a such a case would likely be an uphill battle.