San Jose Starbucks Hidden Camera: Your Privacy Rights Under California Law
You stopped at the Starbucks on East Santa Clara Street for a coffee. Maybe you were heading to work downtown, or walking over from San Jose State, or passing through on the VTA. You used the restroom. And now you are reading that someone hid a camera inside that restroom — and you cannot stop wondering whether images of you are sitting on a stranger’s phone right now.
That fear is real, it is justified, and the law takes it seriously. California treats concealed surveillance in a restroom as one of the most severe privacy violations a person can suffer. The man who planted that device has been arrested — but his arrest is only the first door. The civil justice system opens a second one, and it is the one that can force answers to the questions keeping you up at night: How long was the camera there? Who was recorded? Were the images stored, shared, or uploaded?
We are Attorney911 — The Manginello Law Firm, PLLC. We build privacy-violation and premises-liability cases against corporations that failed to protect the people walking through their doors. This page is for you: the person who used that restroom, or the family member of someone who did. Everything here is legal information, not legal advice — but every word is written by a trial team that knows how these cases are built, what the evidence looks like, and what Starbucks’ lawyers are already doing to limit what the company has to pay.
Your Legal Rights: The Direct Answers
Can you sue? Yes. California law gives you at least two separate paths: a privacy tort claim against the person who planted the camera, and a premises-liability claim against Starbucks for failing to detect and remove a concealed surveillance device from a space where you had a legally protected expectation of privacy.
Who can you sue? The arrested individual is the direct perpetrator — but they may have limited assets. Starbucks Corporation, as the business that owed you a duty to maintain a safe and private facility, is the defendant with the resources to actually compensate you. If the perpetrator was a Starbucks employee, the corporation’s exposure expands dramatically through vicarious liability and negligent hiring. If restroom cleaning was outsourced, the maintenance contractor may share responsibility for failing to discover the device during routine servicing.
How much is your case worth? That depends on three variables we explain in detail below: whether the perpetrator was a Starbucks employee, whether recorded images were stored or distributed, and how many people used the restroom while the camera was active. A single-victim claim against the individual perpetrator alone may yield modest recovery. A multi-plaintiff action against Starbucks Corporation with evidence of inadequate inspection protocols can reach seven figures collectively. We give you the honest range — $75,000 on the low end to $3,000,000 or more on the high end — and explain exactly what drives the difference.
How long do you have to file? California generally gives you two years from the date you discovered, or should have discovered, that you were recorded. If you only learned about the camera from news coverage or a police notification, the clock may have just started. The discovery rule can extend the filing window for victims who were unaware they had been recorded — but you should never gamble on time. Evidence is dying right now, and the deadline is not your friend.
Was it your fault? No. A person using a business restroom has a near-absolute expectation of privacy. The idea that you should have checked for hidden cameras before using a toilet is not a defense — it is an insult, and California law does not permit comparative fault to reduce your recovery in any meaningful way when the violation is this clear.
Do you have to use your real name? No. California courts permit Doe pseudonyms and confidentiality protections in privacy-violation filings. You can pursue your case without your name appearing in public records. We explain how below.
California’s Privacy Law: What Protects You in a Business Restroom
California provides among the strongest privacy protections in the nation. The foundation is constitutional:
“All people are by nature free and independent and have inalienable rights. Among these are enjoying and defending life and liberty, acquiring, possessing, and protecting property, and pursuing and obtaining safety, happiness, and privacy.”
— California Constitution, Article I, Section 1
That single word — “privacy” — was added to California’s Constitution by voter initiative in 1972, and California courts have since applied it against private actors, including businesses. A Starbucks restroom is not a public street. When you walk into that space and close the door, you are exercising one of the most fundamental privacy rights the law recognizes. The company that invited you in as a customer owes you a duty that extends to protecting that privacy from concealed surveillance.
California common law recognizes all four privacy torts — the recognized categories of civil claims for privacy violations. The one that applies most directly to a hidden-camera case is called intrusion upon seclusion, and it is the doctrine we turn to next.
California also criminalizes concealed recording in areas where people have a reasonable expectation of privacy, including restrooms, dressing rooms, and tanning booths. The arrested individual faces prosecution under those criminal statutes — but a criminal prosecution, while it can put the perpetrator in jail, does not compensate you. It does not pay for therapy. It does not remove images from the internet. It does not answer the question of whether Starbucks should have found that camera before you walked in. That is what the civil case is for.
California follows a pure comparative negligence system — but in a restroom hidden-camera case, comparative fault is a near-nonfactor. A patron using a business restroom for its intended purpose has a legally protected expectation of privacy that negates any claim of contributoriness. The defense may raise it, but it should not materially reduce your recovery.
California does not impose a general cap on emotional-distress or privacy-tort damages. A jury can award the full measure of what you have suffered — the anxiety, the humiliation, the loss of your sense of safety — without a statutory ceiling cutting the number down. And punitive damages are available under California Civil Code principles when oppressive, fraudulent, or malicious conduct is proven by clear and convincing evidence. Against the direct perpetrator, punitives are almost always available. Against Starbucks, punitives become reachable if discovery reveals prior similar incidents the company ignored, complaints it buried, or inspection protocols so deficient they demonstrate conscious disregard for patron safety.
Intrusion Upon Seclusion: The Tort That Covers Hidden-Camera Surveillance
Intrusion upon seclusion is the common-law privacy tort that California courts apply when someone intentionally intrudes into a private space in a way that would be highly offensive to a reasonable person. Concealed recording in a restroom is the paradigmatic example — the textbook scenario this tort was built to address.
To build an intrusion-upon-seclusion claim, the case must show four elements. First, the defendant intentionally intruded — physically or by surveillance — into a private place or private affairs. Second, the intrusion would be highly offensive to a reasonable person. Third, the plaintiff had a reasonable expectation of privacy in that space. Fourth, the intrusion caused harm.
Every one of these elements is met by a hidden camera in a Starbucks restroom. The placement of the device is an intentional act. A concealed camera in a toilet stall is the definition of highly offensive to any reasonable person. A restroom is perhaps the most universally recognized private space in American life. And the harm — the psychological violation, the fear of distribution, the destruction of your sense of safety — is real and compensable.
The critical question in building this claim is not whether the tort applies. It does. The question is who bears civil responsibility — the individual who planted the device, the business that failed to detect it, or both. That is where premises liability enters.
Premises Liability: When Starbucks Is Responsible for What Happened
A business that opens its doors to the public owes its customers — legally classified as “business invitees” — the highest duty of care that premises law recognizes. That duty includes maintaining the premises in a reasonably safe condition and conducting reasonable inspections to identify and remediate hazards. A hidden camera concealed inside a restroom is not just a crime by a third party — it is a condition on the premises that the business had a duty to discover and remove.
The premises-liability analysis turns on three questions. First, did Starbucks have adequate inspection protocols for its restroom — trained staff checking the facility on a regular schedule? Second, was the placement and duration of the camera foreseeable given the location’s characteristics — a high-traffic downtown corridor where third-party criminal intrusion is an elevated risk? Third, did Starbucks have actual or constructive notice of the device, or would a reasonable inspection have discovered it before you walked in?
The 100 block of East Santa Clara Street sits in the heart of downtown San Jose. This is a high-density urban corridor characterized by heavy foot traffic from office workers, transit commuters, San Jose State University students, and convention center visitors. A Starbucks at this location serves substantial daily volume, meaning the restroom likely saw dozens to hundreds of uses per day. That high-traffic reality is central to the foreseeability analysis: businesses in dense downtown corridors face elevated risk of third-party criminal intrusion, which directly informs the standard of care for restroom inspection and monitoring. When a business chooses to operate in a high-traffic downtown location and invites the public to use its facilities, it assumes a correspondingly elevated duty to inspect those facilities for concealed hazards — including surveillance devices planted by third parties.
The civil venue for a premises-liability claim arising from this incident would be the Santa Clara County Superior Court, located at the downtown San Jose courthouse. Santa Clara County juries have historically been receptive to privacy-violation claims against corporate defendants — which means a jury of people from this community, people who may have walked past that very Starbucks, would decide what the violation was worth.
If you want to understand how we approach premises cases against national chains — the duty analysis, the inspection-protocol discovery, the corporate-notice fights — our premises liability practice page walks through the framework we use when a business fails to protect the people it invited through its doors.
Who Can Be Held Liable: The Defendant Map
A hidden-camera case is not one defendant — it is a map of potentially responsible parties, each with a different theory of liability and a different insurance picture.
The arrested individual. This is the direct perpetrator — the person who placed the device. The criminal arrest establishes probable cause, which is a powerful predicate for civil claims. This person faces intentional-tort liability for invasion of privacy, intrusion upon seclusion, and intentional infliction of emotional distress. Punitive damages are almost always available against an intentional tortfeasor. The practical problem is collectibility: an individual perpetrator may have limited assets, meaning a judgment against them alone could be worth less on paper than it appears.
Starbucks Corporation. This is the premises-liability defendant — the business that owed you a duty of reasonable care and may have breached it through inadequate inspection, negligent supervision, or failure to implement industry-standard monitoring protocols. Starbucks is a Fortune 500 company with the resources to pay a substantial judgment. The case against Starbucks turns on whether the business had adequate protocols to detect concealed devices and whether those protocols were actually followed. If discovery reveals prior hidden-camera incidents at other Starbucks locations nationwide, or customer complaints about privacy in restrooms that were ignored, the corporate entity faces punitive-damages exposure on top of compensatory liability.
The property owner or landlord. If the building is owned by an entity separate from the operating company, that landlord may bear responsibility for maintaining the leased premises free from hazards. The allocation depends on lease terms controlling restroom maintenance and inspection obligations — documents that come out in discovery.
Third-party maintenance or janitorial contractor. If restroom cleaning was outsourced, the contractor may share liability for failure to discover and report concealed devices during routine servicing. A janitorial team that cleans a restroom daily should have noticed an anomalous device — and if they did not, the question is whether their inspection was adequate or merely perfunctory.
The single most important gating variable in this case is whether the arrested individual was a Starbucks employee. If they were, the case transforms from a single-defendant criminal matter into a vicarious-liability action against a Fortune 500 company. Employee status opens theories of negligent hiring, negligent retention, negligent supervision, and respondeat superior — and it eliminates the collectibility ceiling that limits recovery against an individual perpetrator. This is the first fact discovery should lock down.
The Evidence Clock: What Exists and How Fast It Dies
This is the most urgent section on this page. The evidence that proves your case is perishable — some of it is dying right now, as you read this. Here is what exists, who holds it, and how fast it can legally disappear.
The hidden camera device and its storage media. The device itself — along with any SD card, internal memory, or storage containing recorded images — is the single most critical piece of evidence. It proves the mechanism of surveillance, may contain images identifying victims, and establishes the duration and scope of recording. This device is likely in police custody, which provides some protection — but civil counsel must issue preservation letters immediately to prevent destruction after criminal proceedings conclude. The device is the case. Without it, there is no recording to prove.
Starbucks surveillance footage covering the restroom entrance. The store’s own CCTV system — pointing at the seating area, the order counter, and potentially the hallway leading to the restroom — may have captured the perpetrator entering, placing, accessing, or removing the device. It may also show the flow of patrons in and out of the restroom, which helps establish the potential victim count and the camera’s operational timeframe. This footage is critical and dying fast. Typical retail CCTV overwrite cycles range from 7 to 30 days. Every day that passes without a preservation demand, the footage of the day the camera was placed — and the days it was active — degrades or vanishes entirely.
The perpetrator’s phone, computer, cloud accounts, and social media. This is the evidence that reveals whether images were transmitted, shared, uploaded, or distributed — the single most important factor in escalating damages. A perpetrator’s digital devices can be remotely wiped in minutes. Cloud accounts can be deleted with a few keystrokes. Social media posts can be removed. Preservation letters and forensic imaging are time-sensitive in the most literal sense — hours can matter. If images were distributed online, the scope of distribution exponentially increases emotional-distress damages, punitive exposure, and the number of identifiable plaintiffs. The difference between a case where images stayed on one device and a case where images were uploaded to the internet is the difference between a modest settlement and a seven-figure recovery.
Starbucks restroom inspection logs, cleaning schedules, and maintenance records. These documents establish whether the business had protocols adequate to detect concealed devices and whether those protocols were followed. Did the store have a documented restroom-check schedule? Did employees actually perform those checks? Were there gaps — hours or days when nobody inspected the restroom at all? Retail retention policies may routinely purge operational logs after 30 to 90 days. These records must be obtained through targeted discovery before document-destruction policies take effect.
Starbucks corporate safety and security policies. This is the discovery that can unlock punitive damages. Does Starbucks have a corporate-wide protocol for restroom inspection? Has the company experienced hidden-camera incidents at other locations? Were there customer complaints about privacy in restrooms at this store or others? If the answer to any of these is yes, and Starbucks knew but did not adjust its protocols, the company faces the argument that it acted with conscious disregard for patron safety. These documents must be demanded before corporate document-retention policies destroy them.
Police reports, arrest records, and search-warrant returns. These establish the factual predicate, any admissions by the perpetrator, and the scope of seized evidence. These records are generally stable — available through public-records requests and subpoena — but should be requested promptly to ensure nothing is sealed or expunged.
Point-of-sale transaction data. If you made a purchase at this Starbucks on the day you used the restroom, your transaction record — timestamped to the minute — can help establish that you were in the store at a time consistent with the camera’s operational period. This is one reason to save any receipts, app-order confirmations, or bank-card statements from visits to this location.
The preservation letter is the tool that freezes this evidence. It goes out the day you call — not weeks later, not after the criminal case concludes, not when the insurance company makes first contact. Every day without that letter is a day the defense is counting on.
What Your Case Is Worth: Damages and Value
Privacy-violation damages are primarily emotional and psychological rather than physical — but California courts and juries recognize concealed restroom surveillance as among the most severe categories of privacy violation, capable of producing substantial compensatory awards. Here is what a damages model includes.
Economic damages — the out-of-pocket costs that flow from the violation:
– Therapy and counseling costs — the treatment you need for anxiety, PTSD symptoms, and the psychological aftermath of knowing you were secretly recorded in a private moment
– Expenses related to monitoring the internet for unauthorized distribution of recorded images — services that scan for your likeness, or the cost of doing this yourself over months and years
– Lost wages from anxiety-related work disruption — the days you could not focus, could not go to work, could not function normally
– Costs of identity-theft or reputation-protection services if images were distributed
Non-economic damages — the human losses no receipt can measure:
– Anxiety — the constant, low-grade fear that images of you exist somewhere you cannot control
– Humiliation — the specific shame of knowing your most private moments were captured without your consent
– Loss of your sense of safety — the change in how you move through the world, the hypervigilance in public restrooms, the trust that does not come back
– Fear of image distribution — the dread that today is the day someone finds the images online
– Post-traumatic stress symptoms — nightmares, intrusive thoughts, heightened startle response, avoidance behaviors
These are not soft injuries. The psychological harm from a privacy violation is a recognized medical condition with diagnostic criteria, validated assessment instruments, and treatment protocols. A clinical psychologist specializing in privacy-violation trauma can quantify these damages through DSM-5 diagnostic criteria and structured clinical assessments — the same way any psychological injury is proven.
Punitive damages — the punishment tier:
– Against the direct perpetrator: almost always available as an intentional tortfeasor
– Against Starbucks: available if discovery reveals prior similar incidents the company ignored, complaints it buried, or inspection protocols so inadequate they demonstrate conscious disregard for patron safety
The case-value range: $75,000 to $3,000,000 or more. This range is wide because three variables dramatically affect per-victim value:
First, whether the perpetrator was a Starbucks employee. Employee status opens vicarious liability and negligent-hiring theories that increase corporate exposure and eliminate the collectibility ceiling. A case against an individual perpetrator alone, with limited assets, may settle modestly. A case against Starbucks Corporation with evidence of corporate negligence can reach seven figures.
Second, whether recorded images were stored, transmitted, or distributed online. Distribution exponentially increases emotional-distress damages, punitive exposure, and the number of identifiable plaintiffs. A camera that recorded to a local SD card and was never accessed is a different case from a camera whose images were uploaded to the internet.
Third, the number of victims who used the restroom during the camera’s active period. A downtown San Jose Starbucks restroom could see hundreds of users per week. If the camera was operational for days or weeks, the potential victim pool is enormous — creating multi-plaintiff or class-action exposure that changes the litigation dynamic entirely.
These figures are honestly framed — every case depends on its specific facts, and past results depend on the facts of each case and do not guarantee future outcomes. But the variables above are what a life-care planner, a forensic economist, and a trial team evaluate when building the number.
The Insurance-Adjuster Playbook: What They’ll Do and How to Counter It
The insurance company and corporate defense team working for Starbucks are already in motion. Here is what they will do — and what you do about it.
Play 1: “We had no duty to inspect for hidden cameras.”
The defense will argue that a business cannot be expected to check every restroom for concealed surveillance devices — that this is a third-party crime the company could not have foreseen. The counter: California businesses owe invitees a duty of reasonable care that includes regular inspection of facilities. In a high-traffic downtown location, third-party criminal intrusion is foreseeable. A reasonable inspection protocol — trained staff checking the restroom on a defined schedule — is what the duty requires. If Starbucks had no such protocol, or had one and did not follow it, the duty was breached.
Play 2: “The perpetrator was a third party, not our employee.”
The defense will distance the company from the arrested individual. If the perpetrator was not a Starbucks employee, the defense argues the company is not vicariously liable. The counter: even without vicarious liability, the company faces direct liability for negligent inspection and supervision. The business does not get to wash its hands of a concealed device in its own restroom by blaming the person who planted it — the question is whether reasonable inspections would have found it first.
Play 3: “There’s no proof of emotional harm.”
The defense will argue that emotional distress from a hidden camera is speculative — you cannot prove you suffered because there is no broken bone, no scar, no hospital bill. The counter: privacy-violation trauma is a recognized psychological injury with DSM-5 diagnostic criteria. A clinical psychologist can diagnose and quantify the harm through structured assessment instruments. California does not require physical injury to recover for emotional distress caused by an intentional privacy violation. The injury is real, it is diagnosable, and it is provable.
Play 4: The quick settlement offer.
A claims adjuster may contact you with a sympathetic voice and a fast, low offer — designed to close your claim before you understand its full value. The release they ask you to sign will waive all future claims, including claims you do not yet know you have (like a claim for image distribution that has not yet been discovered). Never accept a settlement before the scope of the violation is known — before forensic analysis confirms whether images were stored or shared, before the victim universe is quantified, before the corporate inspection protocols are examined. The first offer is always a fraction of what the case is worth. For more on what not to say to an adjuster, this resource breaks down the recorded-statement trap and other plays.
Play 5: The “you assumed the risk” argument.
The defense may suggest that using a public restroom carries some inherent risk of loss of privacy. This is a nonstarter in California law. A restroom is a space of legally protected privacy. Using it for its intended purpose does not constitute assumption of risk. This argument should be demolished early, not negotiated.
Play 6: Delay and the statute of limitations.
The defense strategy may include slow-walking discovery, delaying responses, and running the clock toward the statute of limitations. The counter: file early, push discovery hard, and let the court know the evidence is perishable. The preservation letter and early filing are the tools that keep the clock working for you, not against you.
How a Privacy Case Is Actually Built: The Proof Story
Here is how a case like this moves from the day you call to the day a number is on the table.
Week one. The preservation demand goes out — to Starbucks, to the property owner, to any maintenance contractor, and to whatever third-party data vendors hold the store’s CCTV footage. The letter names every record by category: surveillance video covering the restroom entrance and interior hallway, restroom inspection logs, cleaning schedules, maintenance records, incident reports, customer complaints, corporate safety policies, prior hidden-camera incident reports nationwide. The letter also demands preservation of the perpetrator’s digital devices through law enforcement channels. This letter is what stops the clock on evidence destruction. Without it, the defense is free to let records cycle out on their normal retention schedules.
Early discovery. The first targeted discovery requests go to Starbucks: the store’s restroom inspection protocol, the schedule of documented inspections for the relevant period, the identity and employment status of the arrested individual, all prior complaints about privacy or security at this location, and the corporate-wide history of hidden-camera incidents at Starbucks locations. Parallel discovery targets the perpetrator’s digital footprint: phone records, cloud-storage accounts, social media history, internet browsing data — everything that reveals whether images were stored, transmitted, or distributed.
Forensic analysis. The camera device is forensically examined — by law enforcement first, and by a civil forensic expert if access is obtained through discovery or coordination. The examination reveals when the device was manufactured, when it was placed, how long it recorded, how many files it contains, and whether any files were transmitted offsite. Cross-referencing the device’s timestamped recordings with the store’s CCTV footage and point-of-sale data can identify the operational timeframe and begin to identify victims.
Expert witnesses. A premises-security expert opines on industry standards for restroom inspection in high-traffic retail environments — what a reasonable inspection protocol looks like, how frequently it should be performed, and what training staff should receive. A clinical psychologist specializing in privacy-violation trauma evaluates the emotional harm and quantifies it through diagnostic testing and clinical assessment.
Depositions. The store manager explains under oath how often the restroom was inspected, by whom, and what the protocol actually was — as opposed to what the corporate manual says it should have been. The cleaning contractor’s staff explain what they checked and what they did not. If the perpetrator was an employee, the hiring manager explains the screening process. Corporate representatives answer questions about prior incidents and whether the company adjusted its protocols in response.
The number. The demand is built from all of it — the therapy costs, the monitoring costs, the lost wages, the clinical assessment of emotional harm, the expert opinion on premises-security failures, the scope of image distribution if any occurred, and the punitive-damages exposure if corporate notice is established. That number is not a guess. It is an arithmetic problem assembled from evidence, expert opinions, and the law’s own framework for what privacy is worth.
If You Used This Restroom: Your First 72 Hours
Do not contact Starbucks directly. Anything you say to the store, to corporate, or to their insurer can be used to limit your claim. Let your lawyer do the talking.
Do not sign anything. No release, no statement, no settlement agreement — nothing. A document pushed in front of you in the aftermath is designed to close your claim cheaply, not to help you.
Do not post about it on social media. Not the fact that you were there, not how you feel about it, not a photo of the store. The defense monitors social media for statements that can be used to undermine your claim.
Write down what you remember. The date and approximate time you visited this Starbucks. Whether you used the restroom. Whether you made a purchase (and kept the receipt or have an app record). Anything you noticed about the restroom that day — anything unusual, anything out of place, any sense that something was wrong.
Save your evidence. Receipts, app-order confirmations, bank or credit-card statements showing a transaction at this location. If you received a notification from law enforcement, save it. If you heard about the camera from a specific source, note it.
Get a lawyer immediately. The preservation letter — the document that freezes the evidence before it disappears — goes out the day you call. Every day without it is a day the defense is counting on. For more on what to do as a customer injured at a major retail chain, our guide on what to do if you are hurt at a big-box store covers the steps that apply to any retail-premises situation — including preserving evidence and refusing to sign anything.
Consider counseling. The psychological impact of knowing you were recorded in a private moment can surface immediately or weeks later. Early documentation of symptoms — through a therapist, a primary-care visit, or an ER evaluation — strengthens both your recovery and your case.
Call 1-888-ATTY-911. The consultation is free, the call is confidential, and you pay nothing unless we win your case.
Sus Derechos Si Usó Este Baño: Información en Español
Si usted usó el baño del Starbucks en la calle East Santa Clara en San José y ahora sabe que había una cámara oculta adentro, la ley de California le da derechos.
Usted puede presentar una demanda. La ley de California reconoce que cada persona tiene un derecho innegable a la privacidad. Una cámara oculta en un baño es una de las violaciones de privacidad más graves que existen. Usted puede demandar a la persona que puso la cámara y también a Starbucks por no haber detectado y removido el dispositivo.
Usted tiene tiempo limitado. Generalmente, tiene dos años desde la fecha en que descubrió que fue grabado. Si acaba de enterarse por las noticias o por la policía, el reloj puede haber empezado ahora. No espere — la evidencia está desapareciendo en este momento.
No es su culpa. Usar el baño de un negocio no significa que usted renunció a su privacidad. La ley de California protege su derecho a privacidad en un baño, y ninguna defensa de “usted debió haber revisado” es válida.
No tiene que usar su nombre real. Los tribunales de California permiten presentar demandas de privacidad usando seudónimos (como “Jane Doe” o “John Doe”). Su identidad puede ser protegida durante todo el caso.
No hable con Starbucks ni con su seguro. Cualquier cosa que usted diga puede ser usada en su contra. Deje que su abogado hable por usted. No firme nada.
Llame hoy. La consulta es gratis y confidencial. No paga nada a menos que ganemos su caso. Llame al 1-888-ATTY-911. Hablamos Español.
Lupe Peña, nuestro abogado asociado, es completamente bilingüe y conduce consultas completas en español sin intérprete. Su familia recibe la misma información, la misma protección y la misma profundidad de análisis en el idioma en el que piensan y oran.
Confidentiality: You Can File Without Using Your Name
One of the most common fears we hear from privacy-violation victims is that filing a lawsuit will expose them further — that their name will appear in public court records alongside the very violation they are trying to put behind them. California law addresses this directly.
California courts permit Doe pseudonyms in privacy cases where the plaintiff’s identity is itself part of the private information at issue. A hidden-camera victim can file as “Jane Doe” or “John Doe” and maintain that pseudonym throughout the litigation. The court can also issue protective orders sealing sensitive filings and restricting access to evidence containing recorded images. Your identity does not have to become public to pursue your rights.
This is not a loophole or a special favor. It is a recognition built into the legal system that the victim of a privacy violation should not have to sacrifice more privacy to seek justice for the privacy that was already taken.
If you are犹豫 about coming forward because of the fear of exposure, understand this: the system has mechanisms to protect you, and an experienced privacy-litigation team knows how to use them. Your name does not have to be in the newspaper. Your face does not have to be on a court filing. What matters is that the evidence is preserved, the responsible parties are identified, and the harm is compensated.
Our Firm: Who Fights for You
Ralph Manginello is the Managing Partner of Attorney911 — The Manginello Law Firm, PLLC. He has been licensed and practicing law for 27+ years, admitted in November 1998. Ralph was a journalist before he was a lawyer — he spent years learning how to find facts, dig through records, and tell a story that a jury can feel. He graduated from South Texas College of Law Houston and earned his undergraduate degree from the University of Texas at Austin in Journalism and Public Relations. He is admitted to federal court in the Southern District of Texas and handles cases that take him into courtrooms across the country, working with local counsel where required. Ralph speaks Spanish. He built this firm on the principle that the people who have been failed by a system — by a corporation that did not inspect its own restroom, by an insurer that values a human being’s privacy at pennies — deserve a trial lawyer who treats their case as a fight, not a file. Read more about Ralph here.
Lupe Peña is our Associate Attorney, licensed since December 2012. Before he joined this firm, Lupe spent years inside a national insurance-defense firm — the rooms where adjusters and their software decide how to deny, delay, and devalue people exactly like you. He knows how claims are valued from the inside, how the recorded-statement call is engineered, and how the quick settlement check is designed to close a claim before the client understands what it is worth. Now he sits on your side of the table. Lupe is a third-generation Texan, fluent in Spanish, and conducts full client consultations in Spanish without an interpreter. Read more about Lupe here.
We are a Houston-based firm that takes California cases, working with local counsel and pro hac vice admission where required. We do not claim a California office — we claim something more useful: the experience, the resources, and the willingness to build a case against a Fortune 500 corporation that failed to protect its customers.
Our fee is contingency. We do not get paid unless we win your case. The fee is 33.33% before trial and 40% if the case goes to trial. The consultation is free. We have 24/7 live staff — not an answering service, but people who can take your call and start the process at any hour. To learn how contingency fees work in detail, this explanation walks through the structure plainly.
The firm has recovered over $50 million in aggregate across its history — a marketing figure that represents the combined results of years of work for injured clients. Past results depend on the facts of each case and do not guarantee future outcomes. What we guarantee is this: when you call, you talk to a real person. When we take your case, we build it as if it is going to trial — because that is how you get the other side to take it seriously.
For a case like the one at this Starbucks — a privacy violation in a high-traffic business restroom in downtown San Jose — we bring the same approach we bring to every premises-liability case: identify every responsible party, freeze every piece of evidence before it disappears, and build the proof that the business failed in its duty to the people it invited through its doors. Our work on negligent-security cases against businesses is built on the same doctrine: when a corporation knows — or should know — that its facilities can be used to harm its customers, and does not take reasonable steps to prevent it, the corporation answers for what happens.
Frequently Asked Questions
Can I sue Starbucks if I was recorded by a hidden camera in their restroom?
Yes. You have at least two legal paths. The first is a claim against the individual who planted the device for intrusion upon seclusion — the California privacy tort that covers intentional intrusion into a private space. The second is a premises-liability claim against Starbucks for failing to maintain its restroom in a reasonably safe condition, which includes a duty to inspect for and remove concealed surveillance devices. If the perpetrator was a Starbucks employee, additional theories of vicarious liability and negligent hiring apply. The strength of each path depends on the specific facts — particularly the company’s inspection protocols and the perpetrator’s relationship to Starbucks.
How do I know if I was one of the people recorded?
This is one of the most difficult questions, and the answer comes from the evidence itself. The hidden camera device and its storage media — once forensically analyzed — may contain timestamped recordings that can be cross-referenced with the date and time you visited the store. Starbucks’ own CCTV footage and point-of-sale data can further corroborate your presence. If law enforcement identifies victims through the device’s recordings, they may contact you directly. In the meantime, write down everything you remember about your visit — the date, the approximate time, whether you made a purchase — and preserve any receipts or app records.
How long do I have to file a lawsuit?
California generally gives you two years from the date you discovered, or reasonably should have discovered, that you were recorded. This is known as the discovery rule, and it can extend the filing window for victims who were unaware they had been recorded until police notification or news coverage. However, you should never wait to test the limits of the deadline. Evidence is dying now, and the preservation letter that freezes it needs to go out immediately. The deadline is a backstop, not a strategy.
What if I didn’t see the camera — can I still have a case?
Yes — and most victims of hidden-camera surveillance never see the device. That is the entire nature of the harm: the intrusion happens without your knowledge. Your case does not depend on you having noticed the camera. It depends on proving that the camera was present during your visit, that it recorded you or could have recorded you, and that the business failed in its duty to detect and remove it. The forensic analysis of the device and the store’s surveillance footage are what establish the connection — not your own observation.
Can I file a lawsuit without using my real name?
Yes. California courts permit Doe pseudonyms in privacy cases where the plaintiff’s identity is itself part of the private information at issue. You can file as “Jane Doe” or “John Doe” and maintain that protection throughout the litigation. The court can also issue protective orders sealing sensitive filings and restricting access to evidence containing recorded images. Your privacy — the very thing that was violated — does not have to be sacrificed again to pursue justice.
What if the images were shared online?
This is the single most important factor in escalating the value of a hidden-camera case. If images were stored locally on a device and never transmitted, the damages model focuses on the psychological harm of knowing you were recorded. If images were transmitted, shared, uploaded, or distributed, the damages multiply — because the fear of ongoing exposure, the potential for images to surface at any time in the future, and the scope of the violation all expand exponentially. Distribution also opens the door to higher punitive damages and potentially to claims against any platform or individual that knowingly hosted or shared the material. The forensic analysis of the perpetrator’s digital devices — phone, computer, cloud accounts, social media — is what reveals whether distribution occurred.
Was it my fault for not checking the restroom for cameras?
No. This is not a serious legal defense, and you should not let anyone — not an adjuster, not a friend, not your own second-guessing — convince you otherwise. A person using a business restroom for its intended purpose has a near-absolute expectation of privacy under California law. The duty to ensure the restroom is free from concealed surveillance devices belongs to the business that invited you in — not to you. Comparative negligence should not materially reduce your recovery in a case this clear.
How much is a hidden-camera privacy case worth?
The honest range is $75,000 on the low end to $3,000,000 or more on the high end, with the wide spread driven by three variables: whether the perpetrator was a Starbucks employee (which opens corporate vicarious liability and eliminates the collectibility ceiling), whether images were stored or distributed (which exponentially increases emotional-distress damages and punitive exposure), and how many victims used the restroom during the camera’s active period (which creates multi-plaintiff or class-action exposure). A single-victim claim against an individual perpetrator with limited assets and no image distribution may settle modestly. A multi-plaintiff action against Starbucks Corporation with evidence of inadequate inspection protocols and image distribution can reach seven figures collectively. Every case depends on its specific facts.
What if the person who planted the camera was a Starbucks employee?
This transforms the case. If the arrested individual was a Starbucks employee, the corporation faces vicarious liability under respondeat superior — meaning Starbucks is legally responsible for the employee’s actions taken within the scope of employment. It also opens direct claims for negligent hiring (did Starbucks screen this person adequately?), negligent retention (did Starbucks know or should it have known this person was a risk?), and negligent supervision (was this employee given unsupervised access to the restroom facility?). Employee status eliminates the collectibility problem that limits recovery against an individual perpetrator alone — because Starbucks, not the employee, becomes the primary defendant with the resources to pay a substantial judgment. This is the first fact discovery should establish.
I’m undocumented — can I still file a lawsuit?
Yes. Your immigration status does not affect your right to file a civil lawsuit for a privacy violation in California. The civil justice system does not require you to be a citizen or a legal resident to seek compensation for harm done to you. Your identity can be protected through Doe pseudonym filings. A consultation with our firm is free and confidential, and your immigration status is not something we report to any government agency. If you were recorded in that restroom, you have rights — regardless of your status.
If You Were There, Time Is Not on Your Side
The camera has been found. The man has been arrested. Those are the facts the public knows. What the public does not know — and what you need to find out — is whether images of you exist on a device, on a computer, or somewhere online. The answer to that question is sitting on evidence that is dying right now. Store CCTV overwrites in days. Digital accounts can be wiped in minutes. Inspection logs purge on corporate retention schedules that do not wait for you.
The preservation letter — the document that orders Starbucks and every responsible party to freeze the evidence — goes out the day you call. Not the day the criminal case concludes. Not the day the insurance company makes first contact. The day you call.
The consultation is free. The call is confidential. You pay nothing unless we win your case. And you do not have to use your name.
1-888-ATTY-911. 24/7. Hablamos Español.
Contact us now. Or explore our practice areas to see the full range of cases we handle for people who have been failed by the systems that were supposed to protect them.