Post-‘Spokeo’ Standing for Consumer Class Actions a Struggle

by McNees Wallace & Nurick LLC

McNees Wallace & Nurick LLC

Reprinted with permission from the January 31, 2017 issue of The Legal Intelligencer © 2017 ALM Media Properties, LLC. Further duplication without permission is prohibited. All rights reserved.

Federal courts have varied widely in their interpretation of standing for plaintiffs in consumer protection class actions since last year’s U.S. Supreme Court decision in Spokeo v. Robins , __ U.S. __, 136 S.Ct. 1540 (May 16, 2016).

The ‘Spokeo’ Ruling

In Spokeo, the U.S. Supreme Court addressed standing under the “case and controversy” requirement of Article III of the U.S. Constitution and the Fair Credit Reporting Act, 15 U.S.C. Sections 1681, et seq. Plaintiff Thomas Robins, on behalf of a putative class, alleged that the defendant, an online “people search” engine and aggregator of personal information, had violated the FCRA by including inaccurate information in his online profile.

The court’s decision attempted to clarify the Article III constitutional requirement that a civil plaintiff allege an “injury-in-fact” that is both “concrete and particularized” in order to establish federal jurisdiction over a case. The court’s decision focused particularly on the appropriate application of the “concreteness” prong of this test.

Initially, the court noted that a cognizable injury must be concrete but need not be “tangible.” Here, the court referenced constitutional claims, such as free speech cases, over which federal courts have traditionally asserted standing despite the absence of tangible injuries. The court also found that the “risk of a real harm” can satisfy the requirement of concreteness even without allegations of immediate harm, i.e., in cases of slander per se.

Examining the FCRA, Judge Samuel Alito’s 6-2 majority opinion further held that Congress “is well positioned to identify intangible harms that meet minimum Article III requirements.” The court held, nevertheless, that a mere statutory violation is insufficient to create federal jurisdiction in the absence of any concrete harm.

The Supreme Court then remanded the case to the U.S. Court of Appeals for the Ninth Circuit to make a determination of whether the plaintiff in Spokeo had adequately alleged a concrete injury. In December, the Ninth Circuit heard arguments in the remanded case. Counsel for the parties, despite the Supreme Court’s guidance, continued the debate over whether the statutory violation alleged by Robins was sufficient to show a concrete injury entitling him to standing in federal court.

The Aftermath of ‘Spokeo’

If the Spokeo holding recounted above seems to you less than a model of clarity, your response is akin to that of counsel and courts who have struggled to apply the Supreme Court’s reasoning in the wake of the decision.

The obliqueness of the decision suggests the court merely kicked the can down the road to allow lower courts and litigants additional opportunities to develop appropriate theories for standing in consumer class actions.

Unsurprisingly, the results of court decisions applying Spokeo to date have been nearly as mixed as the varied reactions to the decision. Around the country, defendants to consumer class actions subsequently have succeeded arguing that Spokeo raises the bar for plaintiffs. For example, In Myers v. Nicolet Restaurant of De Pere, __ F.3d. __, No. 16-2075 (7th Cir. Dec. 13, 2016), the Seventh Circuit threw out a claim that failure to truncate payment card expiration dates on payment receipts provided standing to assert a violation of the Fair and Accurate Credit Transactions Act, 15 U.S.C. Section 1681(c)(g)(1). The court found that the exposure merely of an expiration date did not increase the risk of identity theft or cause other actual harm of the type that Congress intended FACTA to address, see also Hancock v. Urban Outfitters , 830 F.3d 511 (D.C. Cir. 2016) (requests for disclosure of zip codes did not create standing under District of Columbia consumer protection laws); Braitberg v. Charter Communications , 836 F.3d 925, 926 (8th Cir. 2016), (without allegation of data breach, the defendant’s retention of the customers’ personally identifiable information did not provide standing to assert violation of the federal Cable Communications Policy Act).

By contrast, rulings by local federal courts interpreting Spokeo have been relatively favorable to plaintiffs. Those decisions have been guided by the Third Circuit’s opinion in In re Nickelodeon Consumer Privacy Litigation, 827 F.3d 262 (3d Cir. 2016), which interpreted Spokeo to mean that “what a plaintiff cannot do is treat a bare procedural violation that may result in no harm as an Article III injury-in-fact.” The court stated, “in some cases an injury-in-fact may exist solely by virtue of statutes creating legal rights, the invasion of which creates standing.” The Third Circuit therefore ­permitted privacy claims to proceed on behalf of a plaintiff class of children whose internet browsing habits had been collected by the defendants.

In Hartman v. Medicredit , __ F.Supp.2d __, No. 15-1596 (W.D.Pa. Dec. 20, 2016), the plaintiff alleged on behalf of a putative class that the defendant’s mailing of collection letters that included personally identifiable information on the ­outside of the envelopes had violated the Fair Debt Collection Practices Act, 15 U.S.C. Section 1692, et seq. Applying Nickelodeon , the court refused to dismiss the claim for lack of standing, finding that debtors have a substantive right to be free from harmful debt-collection practices, and so a violation of the FDCPA constitutes a concrete injury, see also Blaha v. First Nat’l Collection Bureau, Inc. , __ F.Supp.2d __, No. 16-2791 (D.N.J. Nov. 10, 2016).

The Future of Standing

The further development of the “concrete harm” analysis set forth in Spokeo will be determinative of the viability going forward of consumer protection lawsuits, including individual claims and class action lawsuits. Certainly, lawyers on both sides of such cases will continue to contest the proper application of that case, until and unless the Supreme Court takes the opportunity in the future to clarify its ruling.

The application of Spokeo may determine whether federal plaintiffs need only allege a bare violation of a consumer protection statute, or must allege some actual financial loss to proceed in federal court. This issue is particularly relevant in consumer protection class actions, where the award of even modest statutory damages to a putative class, together with attorney’s fees, creates strong incentives for defendants to settle cases that survive dismissal and certification proceedings. Meanwhile, defense counsel are pressing the same analysis in nonstatutory cases, including data breach class actions, where plaintiffs allege that they face some risk of future injury, such as identity theft, but do not allege present financial harm, as in Galaria v. Nationwide Mutual Insurance , __ F.3d ___, No. 15-3386 (6th Cir. Sept. 12, 2016), (reversing dismissal of data breach class action and finding Spokeo standing based on the plaintiff’s nonspeculative allegations of continuing risk of fraud).

An attorney representing Robins in his continuing lawsuit against Spokeo has opined that the Supreme Court’s decision will lead lower courts to dismiss weaker privacy claims, but will have little impact on the viability of stronger cases.

To that point, perhaps the most cogent interpretation of Spokeo to date is from the U.S. Court of Appeals for the Second Circuit. That court interpreted the Supreme Court’s decision as instructing “that an alleged procedural violation can by itself manifest concrete injury where Congress conferred the procedural right to protect a plaintiff’s concrete interests,” but “a plaintiff may fail to demonstrate concrete injury where violation of the procedure at issue presents no material risk of harm to that underlying interest,” as in Strubel v. Comenity Bank , 842 F.3d 181 (2d Cir. 2016).

This interpretation would have federal courts continue to open their doors to substantive claims that advance the policy interests underlying consumer protection statutes, while limiting the success of suits rooted in purely technical violations, which may be filed largely in pursuit of potential awards of fees to the plaintiffs’ counsel.

Importantly, the Spokeo “concreteness” analysis speaks only to a plaintiff’s standing to bring a claim in federal court. Accordingly, claims that may not survive a Spokeo analysis in federal court nonetheless still can be brought in state court, subject to jurisdictional limitations set by state laws, as in Dittman v. The University of Pittsburgh Medical Center , __ A.2d __, No. 971-WDA-2015 (Pa. Super. Jan. 12) (affirming dismissal of negligence claims in data breach class action based upon Pennsylvania’s economic loss doctrine). See also Medellin v. Ikea U.S.A. West , __ F.Supp.2d. __, No. 15-55174 (9th Cir. Jan. 13).

Under this reasoning, the plaintiffs can use Spokeo to defeat defendant’s removal efforts, or even to avoid adverse federal rulings by seeking remand to state court for lack of subject-matter jurisdiction. In Medellin, the defendant removed a California consumer protection law claim to federal court. After the district court decertified the class, the plaintiff appealed and, creatively, conceded that there had been no allegation of cognizable harm under Spokeo but only of bare procedural violations. The Ninth Circuit vacated the decertification ruling, holding the district court instead should have dismissed the case for lack of Article III standing, as held in Mocek v. Allsaints USA , __ F.Supp.2d. __, No. 16-C-8484 (N.D.Ill. Dec. 7, 2016) (remanding to state court and awarding attorney fees to the plaintiff after the defendant removed case from state court and then argued the federal court lacked Article III jurisdiction).

DISCLAIMER: Because of the generality of this update, the information provided herein may not be applicable in all situations and should not be acted upon without specific legal advice based on particular situations.

© McNees Wallace & Nurick LLC | Attorney Advertising

Written by:

McNees Wallace & Nurick LLC

McNees Wallace & Nurick LLC on:

Readers' Choice 2017
Reporters on Deadline

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
Sign up using*

Already signed up? Log in here

*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
Custom Email Digest
Privacy Policy (Updated: October 8, 2015):

JD Supra provides users with access to its legal industry publishing services (the "Service") through its website (the "Website") as well as through other sources. Our policies with regard to data collection and use of personal information of users of the Service, regardless of the manner in which users access the Service, and visitors to the Website are set forth in this statement ("Policy"). By using the Service, you signify your acceptance of this Policy.

Information Collection and Use by JD Supra

JD Supra collects users' names, companies, titles, e-mail address and industry. JD Supra also tracks the pages that users visit, logs IP addresses and aggregates non-personally identifiable user data and browser type. This data is gathered using cookies and other technologies.

The information and data collected is used to authenticate users and to send notifications relating to the Service, including email alerts to which users have subscribed; to manage the Service and Website, to improve the Service and to customize the user's experience. This information is also provided to the authors of the content to give them insight into their readership and help them to improve their content, so that it is most useful for our users.

JD Supra does not sell, rent or otherwise provide your details to third parties, other than to the authors of the content on JD Supra.

If you prefer not to enable cookies, you may change your browser settings to disable cookies; however, please note that rejecting cookies while visiting the Website may result in certain parts of the Website not operating correctly or as efficiently as if cookies were allowed.

Email Choice/Opt-out

Users who opt in to receive emails may choose to no longer receive e-mail updates and newsletters by selecting the "opt-out of future email" option in the email they receive from JD Supra or in their JD Supra account management screen.


JD Supra takes reasonable precautions to insure that user information is kept private. We restrict access to user information to those individuals who reasonably need access to perform their job functions, such as our third party email service, customer service personnel and technical staff. However, please note that no method of transmitting or storing data is completely secure and we cannot guarantee the security of user information. Unauthorized entry or use, hardware or software failure, and other factors may compromise the security of user information at any time.

If you have reason to believe that your interaction with us is no longer secure, you must immediately notify us of the problem by contacting us at In the unlikely event that we believe that the security of your user information in our possession or control may have been compromised, we may seek to notify you of that development and, if so, will endeavor to do so as promptly as practicable under the circumstances.

Sharing and Disclosure of Information JD Supra Collects

Except as otherwise described in this privacy statement, JD Supra will not disclose personal information to any third party unless we believe that disclosure is necessary to: (1) comply with applicable laws; (2) respond to governmental inquiries or requests; (3) comply with valid legal process; (4) protect the rights, privacy, safety or property of JD Supra, users of the Service, Website visitors or the public; (5) permit us to pursue available remedies or limit the damages that we may sustain; and (6) enforce our Terms & Conditions of Use.

In the event there is a change in the corporate structure of JD Supra such as, but not limited to, merger, consolidation, sale, liquidation or transfer of substantial assets, JD Supra may, in its sole discretion, transfer, sell or assign information collected on and through the Service to one or more affiliated or unaffiliated third parties.

Links to Other Websites

This Website and the Service may contain links to other websites. The operator of such other websites may collect information about you, including through cookies or other technologies. If you are using the Service through the Website and link to another site, you will leave the Website and this Policy will not apply to your use of and activity on those other sites. We encourage you to read the legal notices posted on those sites, including their privacy policies. We shall have no responsibility or liability for your visitation to, and the data collection and use practices of, such other sites. This Policy applies solely to the information collected in connection with your use of this Website and does not apply to any practices conducted offline or in connection with any other websites.

Changes in Our Privacy Policy

We reserve the right to change this Policy at any time. Please refer to the date at the top of this page to determine when this Policy was last revised. Any changes to our privacy policy will become effective upon posting of the revised policy on the Website. By continuing to use the Service or Website following such changes, you will be deemed to have agreed to such changes. If you do not agree with the terms of this Policy, as it may be amended from time to time, in whole or part, please do not continue using the Service or the Website.

Contacting JD Supra

If you have any questions about this privacy statement, the practices of this site, your dealings with this Web site, or if you would like to change any of the information you have provided to us, please contact us at:

- hide
*With LinkedIn, you don't need to create a separate login to manage your free JD Supra account, and we can make suggestions based on your needs and interests. We will not post anything on LinkedIn in your name. Or, sign up using your email address.