As more states create data privacy laws, plaintiffs face an increasingly complicated litigation landscape for privacy redress, and companies must mount even more complicated defense strategies. One such example is the ongoing multidistrict litigation proceeding against Blackbaud, Inc. in the District of South Carolina. In re Blackbaud, No. 3:20-mn-02972 (D.S.C. filed April 2, 2021), where plaintiffs from 20 states filed a single Consolidated Class Action Complaint. This case provides instructive initial issues for companies to take into consideration as they drive their  data-driven practices.