- Joined
- Apr 4, 2025
- Messages
- 27
- Thread Author
- #51
2. All documentation, policies, procedures, or technical diagrams showing how user financial data is shared between Vanguard Securities LLC and Discover Bank.
We have recently established a Privacy Policy: Vanguard & Co Privacy Policy and we already had the ToS: Vanguard Market Access TOS
Objection
NON-RESPONSIVE
The Plaintiff objects to the Defendant's response to Document Request 2 as non-responsive.
This response fails to address the specific request for technical documentation in the following ways:
1. The request explicitly asked for documentation showing "HOW user financial data is shared" - including technical diagrams and procedures. The referenced documents contain only general statements that data is shared "internally, among affiliates and business units" without any of the requested technical details.
2. The newly created Privacy Policy ("Effective Date: April 10, 2025") cannot possibly contain the technical documentation of data sharing processes that existed during the relevant period (January 2025 to April 10, 2025).
3. The response completely fails to address whether technical documentation, diagrams, or procedural documentation exists, instead substituting general policy documents that do not contain the specific information requested.
The Plaintiff requests the Court find this response non-responsive to the discovery request.
Motion
MOTION TO COMPEL
The Plaintiff respectfully moves this Court to compel the Defendant to produce the technical documentation requested in Document Request 2:
GROUNDS:
1. The Defendant's response cited only their general Privacy Policy (created April 10, 2025) and Terms of Service, neither of which contains any technical details about HOW data is shared between entities.
2. The requested technical documentation is directly relevant to our claims under Privacy Act Section 9(1) regarding improper data sharing between entities.
3. As a financial services provider, the Defendant must have technical documentation detailing data flows, APIs, or database access mechanisms between their affiliated entities. Such documentation is standard in the industry and necessary for technical implementation, auditing, and compliance purposes.
4. The Defendant has AFFIRMED they have "direct access to users' Discover Bank account information" (Answer 4), which necessarily requires technical mechanisms to implement. Documentation of these mechanisms is precisely what our request seeks.
5. The Defendant's citation of a Privacy Policy created AFTER the period of violations is non-responsive to our request for documentation showing how data was shared during the relevant time period.