Uber acknowledged there was a data breech in 2016 and failed to notify its customers of the breach Uber concealed the breach from its clients, drivers, and the public, affecting millions of people. Not notifying those affected and concealing the information was a clear violation of consumer privacy.

Here is a link to the article that my paper is based on.

https://www.darkreading.com/attacks-breaches/lawsuits-pile-up-on-uber/d/d-id/1330530

I understand how consumer protection and antitrust laws applies to this scenario, how do other legal concepts or topics apply to this scenario?