Yes, you can sue for invasion of privacy when someone pries into your private life, publishes genuinely private information about you, casts you in a false light, or uses your identity for commercial gain without permission. Federal law adds separate claims for intercepted phone calls and emails and for unauthorized access to your stored communications. Whether any of these fits your situation depends on the specific facts, the state you’re in, and how quickly you act.
The Four Privacy Claims Recognized by Courts
“Invasion of privacy” isn’t one lawsuit. It’s four separate civil wrongs, each protecting a different aspect of your personal life and each requiring different proof. The categories come from the Restatement (Second) of Torts and are accepted across most of the country.1Legal Information Institute. Privacy Torts The first step in any privacy case is figuring out which one describes what happened to you.
Intrusion Upon Seclusion
This covers someone physically or electronically invading your private space. Hidden cameras in a bathroom, hacking into your email, wiretapping your phone, or going through your private records all fit. The intrusion itself must be the kind of thing that would be highly offensive to a reasonable person.1Legal Information Institute. Privacy Torts
You don’t have to show that the intruder shared what they found. The prying is the wrong. No publication needs to have occurred for you to sue.
Public Disclosure of Private Facts
This claim applies when someone broadcasts genuinely private information about you to the public. Medical records, personal debts, intimate details of your life. The disclosure has to be widespread and of a nature that would deeply offend a reasonable person.
Truth is not a defense here, unlike in defamation. Accurate information can still support the claim, because the wrong is exposure rather than falsehood. What can defeat the claim is newsworthiness, which is discussed below.
False Light
False light claims arise when someone publishes information that leaves a misleading and highly offensive impression about you. The material doesn’t have to be technically false; it has to create a seriously wrong picture. Using your photograph to illustrate a story about drug addiction when you have no connection to it is the textbook example.
You generally have to show the false impression would be highly offensive to a reasonable person and that the defendant either knew the impression was false or acted with reckless disregard for its falsity.2Legal Information Institute. False Light
One important boundary: not every state recognizes false light. Several have rejected it as too close to defamation. Check your state before building a case around this theory.
Appropriation of Name or Likeness
This tort protects control over how your identity is used commercially. A company using your face in an advertisement, or your name to endorse a product, without your consent is the core scenario. About half the states also have separate right-of-publicity statutes that layer on additional protections, particularly for public figures and celebrities.3Legal Information Institute. Publicity
The requirement is that someone used your identity for commercial benefit without permission. The harm can be the licensing income you would have earned or the unwanted association with a product or cause.
Federal Claims for Electronic Snooping
Federal statutes create additional lawsuits when someone intercepts your communications or breaks into your stored data. These sometimes give you more concrete remedies than the common-law torts.
The Wiretap Act
If someone intercepts your phone calls, emails, or other electronic communications, the federal Wiretap Act lets you sue. You can recover the greater of your actual damages or statutory damages of $100 per day, with a $10,000 floor. Punitive damages, attorney’s fees, and litigation costs are also available. The two-year filing window starts when you first had a reasonable opportunity to discover the violation, not when the interception happened.4Office of the Law Revision Counsel. United States Code Title 18 – Section 2520
The Stored Communications Act
When someone knowingly or intentionally accesses your stored communications without authorization, this statute provides a separate claim. Think cloud storage break-ins, saved-message access, or a service provider improperly handing over your data. You can recover actual damages plus any profits the violator earned, with a $1,000 minimum. Willful violations open the door to punitive damages. Same two-year clock, running from discovery.5Office of the Law Revision Counsel. United States Code Title 18 – Section 2707
When a Privacy Case Doesn’t Work
Plenty of situations that feel invasive don’t produce a winnable claim. Three doctrines are responsible for most of the losses.
You Had No Reasonable Expectation of Privacy
Courts ask whether you actually treated the matter as private and whether that expectation is one society accepts as reasonable.6Constitution Annotated. Amdt4.3.3 Katz and Reasonable Expectation of Privacy Test Both parts have to be met.
Inside your home or a closed bathroom stall, the expectation is clear. It’s not clear for a loud conversation in a crowded restaurant, activities visible from a public sidewalk, trash left at the curb, or social media set to “public.” Anything you knowingly expose to others generally falls outside the protected zone.
You Consented
If you agreed to the conduct, the case ends. Signed releases, verbal permission, and even conduct that implies agreement all count. This is why terms of service, employee monitoring policies, and photo release forms are so consequential. Clicking “I agree” on a monitoring disclosure typically counts as consent whether or not you read it.
The Information Was Newsworthy
The First Amendment shields the use of your identity or private facts when the material involves legitimate public interest. A journalist using your name or likeness while reporting a genuine news story is protected, so long as the use is reasonably related to the story. The privilege has limits: exploiting someone’s identity far beyond what the story requires, or dressing up commercial use as journalism, can lose the defense. Public figures have significantly less privacy protection for anything tied to their public roles.
Workplace Monitoring
Employees regularly assume they have more privacy at work than they do. Under federal law, employers have broad authority to monitor company-owned devices, including email, web browsing, and stored files. Courts consistently find little to no reasonable expectation of privacy on employer-provided equipment, and a written monitoring policy drops that expectation further. Personal devices and personal accounts on your own time are a different matter, and an employer who hacks into either can face a privacy claim.
How Long You Have to File
Every privacy claim has a statute of limitations, and missing it kills the case regardless of the merits. For the common-law torts, deadlines vary by state and typically run one to three years from the invasion. Check your state’s specific rule.
Many states apply a discovery rule, starting the clock when you actually discovered the violation or reasonably should have. This matters heavily in hidden-surveillance and covert-data cases, where you may not know for months or years. The federal electronic privacy statutes explicitly use this standard, with the two-year clock running from when you first had a reasonable opportunity to discover the violation.4Office of the Law Revision Counsel. United States Code Title 18 – Section 2520
The discovery rule isn’t a safety net. Courts expect reasonable diligence. If warning signs existed and you didn’t investigate, a judge may decide the clock started earlier than you’d like.
Evidence to Gather Now
Privacy cases live or die on proof. Before you talk to an attorney, pull together:
- A timeline with dates, times, and locations of each incident, plus the full name and contact information of the person responsible.
- Direct evidence: screenshots, emails, texts, photographs, video, audio recordings that capture what happened.
- Copies of any newspapers, magazines, or printed advertisements involved.
- Proof of harm: records of financial losses, medical or therapy records for emotional distress, and a personal journal documenting how the invasion has affected your daily life.
Preserve digital evidence immediately. Posts can be deleted, and file metadata can establish when an intrusion happened. If you think the electronic surveillance is still active, don’t use the compromised device to research attorneys.
What You Can Recover
Compensatory damages cover your actual losses. Economic damages are the measurable ones: lost wages, therapy bills, business opportunities. Non-economic damages cover emotional distress, humiliation, anxiety, and reputational harm, and they often make up the bulk of a privacy award because the injury is largely psychological.
Punitive damages are on the table for especially malicious or outrageous conduct. Courts reserve them for the worst behavior, so don’t plan around them in a routine case.
Injunctive relief is often the point. A court can order the defendant to stop the conduct, take down offending publications, or destroy improperly obtained information. The federal electronic privacy statutes explicitly authorize injunctive relief alongside money damages.4Office of the Law Revision Counsel. United States Code Title 18 – Section 2520 When the invasion is ongoing, stopping it may matter more than any dollar figure.
How the Lawsuit Moves Forward
You start by filing a complaint. That document identifies you and the defendant, lays out the facts, states the legal claims, and specifies what you want. Filing means paying a court fee, commonly in the range of $200 to $450 depending on the court.7United States Courts. Civil Cases Your attorney will decide between state and federal court based on where the parties live and whether federal statutes are in play.
Once filed, the defendant must be formally served with the complaint and summons, usually by a professional process server. In federal court, the defendant has 21 days to answer. State deadlines are generally similar. The answer admits or denies your allegations and raises defenses. From there the case enters discovery, where both sides exchange documents and take depositions. Many privacy cases settle during or after discovery. Those that don’t go to trial.
You can represent yourself, but privacy cases carry enough procedural and evidentiary complexity that an experienced attorney meaningfully improves your odds. Many offer free initial consultations, which is usually the fastest way to find out whether your facts add up to a claim worth filing.