Opinion

Melissa Thornley v. Clearview AI, Inc.

  • 984 F.3d 1241
Court
Court of Appeals for the Seventh Circuit
Filed
Jan 14, 2021
Status
Published
On the bench
Wood
Nature of suit
civil
Cited by
91 cases
Authority
More cited than 90.4%

finding that plaintiffs did not have standing for their Section 15(c) claim where they “described only a general, regulatory violation not something that is particularized to them and concrete”

How later courts described this case

  • finding that plaintiffs did not have standing for their Section 15(c) claim where they “described only a general, regulatory violation not something that is particularized to them and concrete”
  • suggesting that a plaintiff might establish Article III standing by asserting: (1) “that by selling her data, the collector has deprived her of the opportunity to profit from her biometric information”; (2) “that the act of selling her data amplified the invasion of her privacy that occurred when the data was first collected, by disseminating it to some unspecified number of other people”; or (3) “that [the defendant] raise[d] the cost” she incurred in using social media sites.
  • noting that “a plaintiff could assert that the act of selling her data amplified the invasion of her privacy that occurred when the data was first collected, by disseminating it to some unspecified number of other people.”
  • holding that a violation of section 15(c)’s general prohibition on the sale of biometric data does not inflict an Article III injury

Written by the judges who cited it.

The opinion

In the

United States Court of Appeals

For the Seventh Circuit

____________________

No. 20-3249

MELISSA THORNLEY, et al.,

Plaintiffs-Appellees,

v.

CLEARVIEW AI, INC.,

Defendant-Appellant.

____________________

Appeal from the United States District Court for the

Northern District of Illinois, Eastern Division.

No. 20-cv-3843 — Sharon Johnson Coleman, Judge.

____________________

ARGUED JANUARY 4, 2021 — DECIDED JANUARY 14, 2021

____________________

Before EASTERBROOK, WOOD, and HAMILTON, Circuit

Judges.

WOOD, Circuit Judge. Illinois’s Biometric Information Pri-

vacy Act, familiarly known as BIPA, provides robust protec-

tions for the biometric information of Illinois residents. See

740 ILCS 14/1 et seq. It does so by regulating the collection,

retention, disclosure, and destruction of biometric identifiers

or information—for example, retinal scans, fingerprints, or fa-

cial geometry. In recent years, the use of biometric data has

2 No. 20-3249

exploded. Predictably, that development has been followed

by a spate of litigation testing the limits of the law’s protec-

tions. Not all of those cases, however, have proven to be justi-

ciable in federal court: some plaintiffs have failed to demon-

strate that they have standing to sue as required by Article III

of the Constitution.

The question now before us is whether, on the allegations

of the operative complaint, the plaintiffs—Melissa Thornley

and others, on behalf of themselves and a proposed class—

have shown standing. (For convenience, we refer only to

Thornley, unless the context requires otherwise.) Oddly,

Thornley insists that she lacks standing, and it is the defend-

ant, Clearview AI, Inc., that is championing her right to sue in

federal court. That peculiar line-up exists for reasons that only

a civil procedure buff could love: the case started out in an

Illinois state court, but Clearview removed it to federal court.

Thornley wants to return to state court to litigate the BIPA

claims, but Clearview prefers a federal forum. The case may

stay in federal court, however, only if the more stringent fed-

eral standards for standing can be satisfied; Illinois (as is its

right) has a more liberal attitude toward the kinds of cases its

courts are authorized to entertain. The district court held that

Thornley has alleged only a bare statutory violation, not the

kind of concrete and particularized harm that would support

standing, and thus ordered the action remanded to the state

court. Because the case meets the criteria of the Class Action

Fairness Act, 28 U.S.C. § 1332(d), Clearview sought permis-

sion to appeal from that order. See 28 U.S.C. § 1453(c). We

agreed to take the appeal, § 1453(c)(1), and we now affirm the

decision of the district court.

No. 20-3249 3

I

Our description of the factual background of the case is

necessarily brief because we have only the pleadings before

us. We accept Thornley’s account for present purposes. Clear-

view is in a business that would have been impossible to im-

agine a generation ago. Founded in 2017, it designed a facial

recognition tool that takes advantage of the enormous

amount of information that floats around the Internet. Users

may download an application (“App”) that gives them access

to Clearview’s database.

Clearview uses a proprietary algorithm to “scrape” pic-

tures from social media sites such as Facebook, Twitter, Insta-

gram, LinkedIn, and Venmo. The materials that it uses are all

publicly available. The scraping process is not designed, how-

ever, simply to store photographs. Instead, Clearview’s soft-

ware harvests from each scraped photograph the biometric

facial scan and associated metadata (for instance, time and

place stamps), and that information is put onto its database.

The database, which is stored on servers in New York and

New Jersey, at this point contains literally billions of entries.

Clearview offers access to this database for users who

wish to find out more about someone in a photograph—per-

haps to identify an unknown person, or perhaps to confirm

the identity of a person of interest. Many, though not all, of its

clients are law-enforcement agencies. The user purchases ac-

cess to Clearview’s resources and, using the App, uploads her

photograph to its site. Clearview then creates a digital facial

scan of the person in the photograph and compares the new

facial scan to those in its vast database. If it finds a match, it

returns a geotagged photograph (not the facial scan) to the

4 No. 20-3249

user, and it informs the user of the source social-media site for

the photograph.

In the beginning, Clearview appears to have kept a rather

low profile. But on January 18, 2020, The New York Times pub-

lished an article about Clearview and its extensive database.

See Kashmir Hill, “The Secretive Company That Might End

Privacy as We Know It,” The New York Times, Jan. 18, 2020,

https://www.nytimes.com/2020/01/18/technology/clearview-

privacy-facial-recognition.html. A rash of lawsuits followed

in the wake of the article. See, e.g., Mutnick v. Clearview AI, Inc.,

No. 1:20-cv-00512 (N.D. Ill.); Roberson v. Clearview AI, Inc., No.

1:20-cv-00111 (E.D. Va.); Calderon v. Clearview AI, Inc., No.

1:20-cv-01296 (S.D.N.Y.); Burke v. Clearview AI, Inc., No. 3:20-

cv-00370 (S.D. Cal.). This case was one of them. Notably,

Thornley did not choose a federal forum; instead, she filed her

case in state court—specifically, the Circuit Court of Cook

County. Her initial complaint, filed on behalf of herself and a

class on March 19, 2020, asserted violations of three subsec-

tions of BIPA: 740 ILCS 14/15(a), (b), and (c). (We explain be-

low the scope of each of these provisions.) Clearview re-

moved that case to federal court, see 28 U.S.C. § 1441, but

shortly after the removal Thornley voluntarily dismissed the

action.

In certain circumstances, met here, plaintiffs are entitled to

take that action without leave of court should they so desire.

See FED. R. CIV. P. 41(a)(1). Granted, if the plaintiff previously

has dismissed either a federal- or a state-court action based on

the same claim, “a notice of dismissal operates as an adjudi-

cation on the merits.” Id. Rule 41(a)(1)(B). Thornley, however,

had taken no such earlier action, and so her dismissal was

without prejudice. She was thus within her rights when she

No. 20-3249 5

returned to the Circuit Court of Cook County on May 27,

2020, with a new, significantly narrowed, action against

Clearview. The new action was more focused in two respects:

first, it alleged only a violation of BIPA § 15(c), 740 ILCS

14/15(c); and second, the class definition was much more

modest. Clearview again removed the case to the federal

court. This time, Thornley filed a motion to remand, see 28

U.S.C. § 1447(c), in which she asserted that the violation of

section 15(c) she described was only a “bare procedural vio-

lation, divorced from any concrete harm,” see Spokeo, Inc. v.

Robbins, 136 S. Ct. 1540, 1549 (2016), and thus did not support

Article III standing. As we noted earlier, the district court

agreed with her and ordered the case remanded to state court.

II

Ordinarily, it is the plaintiff who bears the burden of

demonstrating that the district court has subject-matter juris-

diction over her case and that it falls within “the Judicial

Power” conferred in Article III. But more generally, the party

that wants the federal forum is the one that has the burden of

establishing the court’s authority to hear the case. See Schur v.

L.A. Weight Loss Centers, Inc., 577 F.3d 752, 758 (7th Cir. 2009);

Brill v. Countrywide Home Loans, Inc., 427 F.3d 446, 447 (7th Cir.

2005). As applied here, that means that Clearview must show

that Thornley (as well as her co-plaintiffs) has Article III

standing.

The Supreme Court’s most recent restatement of the rules

governing standing appears in Thole v. U.S. Bank N.A., 140 S.

Ct. 1615 (2020):

To establish standing under Article III of the Con-

stitution, a plaintiff must demonstrate (1) that he or she

6 No. 20-3249

suffered an injury in fact that is concrete, particular-

ized, and actual or imminent, (2) that the injury was

caused by the defendant, and (3) that the injury would

likely be redressed by the requested judicial relief.

Id. at 1618, citing Lujan v. Defenders of Wildlife, 504 U.S. 555,

560–61 (1992). See also Spokeo, 136 S. Ct. at 1547. In the case

before us, there is no serious dispute about the second and

third of those requirements: whatever injury Thornley suf-

fered occurred at Clearview’s hands, and one can imagine a

number of ways in which that injury could be remedied by a

court. We say this not because the parties have agreed on

those points. No such agreement would be binding on the

court. But the record tells us enough about the nature and

source of the injury to support this conclusion. We thus focus

exclusively on the injury-in-fact requirement.

This appeal is far from our first encounter with BIPA,

though we have not had occasion in the past to consider sec-

tion 15(c). Our earlier cases, however, provide important con-

text for our consideration of the standing issue presented

here, and so we take a moment to review their central hold-

ings.

The first in this line was Miller v. Southwest Airlines Co., 926

F.3d 898 (7th Cir. 2019). The immediate question was whether

employees of Southwest Airlines who contended that the

company had violated BIPA in the operation of its timekeep-

ing system had to present their claims to an adjustment board,

as spelled out in the Railway Labor Act, or if the court was the

proper forum. Id. at 900. Before the court could reach that is-

sue, however, it had to decide whether the employees had

standing under Article III to pursue the litigation. It con-

cluded that they did. If there were some problem in the use of

No. 20-3249 7

the timekeeping system, it would be possible for either an ad-

justment board or a court to remedy that problem:

The prospect of a material change in workers’ terms

and conditions of employment gives these suits a con-

crete dimension that Spokeo, Groshek [v. Time Warner

Cable, Inc., 865 F.3d 884 (7th Cir. 2017)], and Casillas [v.

Madison Ave. Assocs., Inc., 926 F.3d 329 (7th Cir. 2019)]

lacked. Either the discontinuation of the practice, or the

need for the air carriers to agree to higher wages to in-

duce unions to consent, presents more than a bare pro-

cedural dispute. See Robertson v. Allied Solutions, LLC,

902 F.3d 690, 697 (7th Cir. 2018) (“Article III’s strictures

are met not only when a plaintiff complains of being

deprived of some benefit, but also when a plaintiff

complains that she was deprived of a chance to obtain

a benefit.”).

Id. at 902. The Miller opinion did not distinguish further

among the various subsections of BIPA § 15.

We returned to BIPA in Bryant v. Compass Group USA, Inc.,

958 F.3d 617 (7th Cir. 2020). There the plaintiff’s employer had

installed in its cafeteria some “Smart Market” vending ma-

chines owned by the defendant, Compass Group. In order to

use the machines, a patron had to establish an account using

her fingerprint. Section 15(a) of BIPA requires collectors of bi-

ometric information to make publicly available a retention

schedule and guidelines for permanently destroying the in-

formation they obtain. Section 15(b) of BIPA requires the col-

lector to inform those from whom it is collecting information

that it is doing so, and to disclose the purpose of the collection

and the length of the retention. It also requires the collector to

obtain written consent from the affected person. Bryant

8 No. 20-3249

alleged that Compass had violated both section 15(a) and

15(b), 740 ILCS 14/15(a), (b).

Our decision hewed closely to the facts and allegations be-

fore us. As amended on the petition for rehearing, the opinion

emphasized that Bryant’s claim under section 15(a) rested ex-

clusively on Compass’s failure to develop a “written policy,

made available to the public, establishing a retention schedule

and guidelines for permanently destroying biometric identi-

fiers and biometric information[.]’’ Id. § 15(a). We found that

this duty is “owed to the public generally, not to particular

persons whose biometric data the entity collects.” 958 F.3d at

626. In other words, Bryant’s injury in this respect was not

particularized, and thus it did not demonstrate injury-in-fact

for Article III purposes. We left open the question whether a

different allegation under section 15(a)—one based on the

language requiring a collector to comply with its established

retention and destruction criteria—might call for a different

result. Finally, we found that Bryant’s allegations that Com-

pass had violated section 15(b)’s requirement both to inform

those from whom it was collecting data that it was doing so

and why, and to obtain their written consent, was both con-

crete and particularized, and thus were enough to support

standing.

The question under section 15(a) that we reserved in Bry-

ant did not remain unexamined for long. In Fox v. Dakkota In-

tegrated Systems, LLC, 980 F.3d 1146 (7th Cir. 2020), plaintiff

Fox contended that Dakkota, her former employer, had vio-

lated section 15(a) by failing to comply with its data retention

and destruction policies. As in this case, Fox had initiated her

action in state court, Dakkota had removed to federal court,

and the question before us was whether the case had to be

No. 20-3249 9

remanded to state court on Article III standing grounds. After

reviewing many of the same cases we have highlighted here,

we concluded that “[a]n unlawful retention of biometric data

inflicts a privacy injury in the same sense that an unlawful

collection does.” Id. at 1154. We thus held that “an unlaw-

ful retention of a person’s biometric data is as concrete and

particularized an injury as an unlawful collection of a person’s

biometric data. If the latter qualifies as an invasion of a ‘pri-

vate domain, much like an act of trespass would be,’ Bryant,

958 F.3d at 624, then so does the former.” Id. at 1155. We thus

reversed the district court’s order sending the case back to

state court and remanded for further proceedings.

Two other points are important to understanding our ap-

proach to these cases. First, an important corollary to the rule

that injury-in-fact must be both concrete and particularized,

see Spokeo, 136 S. Ct. at 1548–49, is the requirement that “the

plaintiff must clearly allege facts demonstrating each ele-

ment.” Id. at 1547 (cleaned up). In other words, allegations

matter. One plaintiff may fail to allege a particularized harm

to himself, while another may assert one. For example, in

Casillas (which dealt with the Fair Debt Collection Practices

Act, not BIPA), we gave dispositive weight to the fact that the

plaintiff had not pleaded that her receipt of a letter that alleg-

edly failed to comply with the statute had caused her any

harm—indeed, had any effect whatsoever on her. 926 F.3d at

334–35. As the case reached us, “Casillas had no more use for

the notice than she would have had for directions accompa-

nying a product that she had no plans to assemble.” Id. at 334.

That was not enough to support her standing to sue, but noth-

ing in the opinion implied that every recipient of a similarly

nonconforming letter would be in the same position. Simi-

larly, as the difference between the treatment of section 15(a)

10 No. 20-3249

in Bryant and Fox illustrates, the result of the standing inquiry

for the identical section of a statute will depend on what that

section provides and what the plaintiff has alleged.

Second, the fact that a “bare procedural violation” does

not suffice to support an injury-in-fact made some people

wonder whether there is a distinction between alleged proce-

dural injuries and alleged substantive injuries. We clarified in

Larkin v. Finance System of Green Bay, Inc., 982 F.3d 1060, 1066

(7th Cir. 2020), that no such line exists. Article III must be sat-

isfied no matter what kind of violation is asserted.

III

Thornley’s complaint raises only one claim under BIPA:

that Clearview violated section 15(c). (The fact that she had

filed the earlier action and then voluntarily dismissed it is of

no legal relevance, except for purposes of the two-dismissal

rule, which has not been triggered here.) That subpart reads

as follows:

(c) No private entity in possession of a biometric

identifier or biometric information may sell, lease,

trade, or otherwise profit from a person’s or a cus-

tomer’s biometric identifier or biometric information.

740 ILCS 14/15(c). Thornley and her co-plaintiffs, Deborah

Benjamin-Koller and Josue Herrera, all of whom maintained

social media accounts on sites such as Facebook, Instagram,

LinkedIn, Venmo, and YouTube, filed their complaint in the

state court on behalf of themselves and as representatives of

the following class:

All current Illinois citizens whose biometric identifiers

or biometric information were [sic], without their

knowledge, included in the Clearview AI Database at

No. 20-3249 11

any time from January 1, 2016 to January 17, 2020 (the

“Class Period”) and who suffered no injury from De-

fendant’s violation of Section 15(c) of BIPA other than

statutory aggrievement … .

Similarly, the complaint concedes that none of the named

plaintiffs, and no class member, “suffered any injury as a re-

sult of the violations of Section 15(c) of BIPA other than the

statutory aggrievement alleged in Paragraph 38.” Complaint,

¶ 39.

Taking the position that these allegations did not suffice to

show a lack of Article III standing, Clearview removed the

case to federal court. The district court saw things differently.

Noting that a plaintiff is the master of her own complaint, the

court held that the particular allegations before it raised ques-

tions only about a general regulatory rule found in BIPA: no

one may profit in the specified ways from another person’s

biometric identifiers or information.

On appeal, Clearview urges us to equate a person’s poten-

tial injury from the sale (or lease, etc.) of her data with the in-

jury from retention of that data that we recognized in Fox, or

the injury we recognized in Bryant from the collection of that

data and the failure to obtain written consent. We have no

quarrel with the idea that a different complaint might reflect

that type of equivalence. A plaintiff might assert, for example,

that by selling her data, the collector has deprived her of the

opportunity to profit from her biometric information. Or a

plaintiff could assert that the act of selling her data amplified

the invasion of her privacy that occurred when the data was

first collected, by disseminating it to some unspecified num-

ber of other people. Perhaps a plaintiff might assert that the

scraping of data from social media sites raises the cost of

12 No. 20-3249

using those sites in some respect (though they are nominally

free, in the same sense that network television or conventional

radio is free—ads pay for these outlets, and the viewers are

the “product” that the advertiser is buying).

Without any such allegations of concrete and particular-

ized harm to the plaintiffs, we are left with a general rule that

prohibits the operation of a market in biometric identifiers

and information. If it is not profitable to collect or hold that

data, one can assume that the incentive to collect it or hold it

will be significantly reduced. Much the same rationale sup-

ports other laws that are directed against market transactions.

Regulations implementing the Eagle Protection Act and the

Migratory Bird Treaty Act, for example, permit the possession

or transportation of certain migratory birds, and their parts,

nests, or eggs, but they state that these items “may not be im-

ported, exported, purchased, sold, bartered, or offered for

purchase, sale, trade, or barter.” Andrus v. Allard, 444 U.S. 51,

54 (1979) (citing 50 C.F.R. § 21.2(a) (1978)). The Supreme Court

understood this as a regulatory prohibition against commerce

in the covered birds and bird parts, and it upheld the regula-

tions. A similar rationale lay behind the Court’s decision in

Ashcroft v. Free Speech Coalition, 535 U.S. 234 (2002), to uphold

a prohibition on child pornography produced with real chil-

dren on the ground that it furthers the government’s effort to

eliminate the market for such material. Id. at 254. (At the same

time, the Court held that the market-deterrence theory did not

save a prohibition against materials created with computer-

ized images or young-looking adults. But that was because

the underlying conduct could not be criminalized consist-

ently with the First Amendment.)

No. 20-3249 13

Section 15(c) of BIPA is another such statute, albeit one en-

acted by Illinois rather than the federal government. It ad-

dresses only the regulated entity—the collector or holder of

the biometric data—and flatly prohibits for-profit transac-

tions. No one in this case has asked us to decide whether this

prohibition violates some other law, such as the Takings

Clause, substantive due process, or a federal statute, and so

we express no opinion on any such theory. For our purposes,

it is enough to say that this is the same kind of general regu-

lation as the duty to create and publish a retention and de-

struction schedule found in section 15(a), at least when the

plaintiff asserts no particularized injury resulting from the

commercial transaction. See Bryant, 958 F.3d at 626.

One final question remains: may the plaintiffs, by seeking

to represent a class that includes only persons who suffered

no injury from the alleged violation of section 15(c), prevent

the district court from taking a broader view of the case? We

wondered whether such a holding would be consistent with

the Supreme Court’s decision in Standard Fire Insurance Co. v.

Knowles, 568 U.S. 588 (2013). That case involved a putative

class action that was commenced in an Arkansas state court

against Standard Fire; plaintiffs alleged that underpayments

had injured “hundreds, and possibly thousands” of policy-

holders. Id. at 591. Relying on the Class Action Fairness Act,

which confers jurisdiction on the district courts in cases where

minimal diversity exists and the amount in controversy ex-

ceeds $5,000,000, 28 U.S.C. § 1332(d)(2), Standard Fire re-

moved the action to the district court. Once it was there, but

before class certification, the plaintiff filed a statement stipu-

lating that he and the class would not seek damages in excess

of $5,000,000. On the basis of that stipulation, plaintiff then

14 No. 20-3249

sought to have the case remanded to state court for lack of

jurisdiction.

The Supreme Court held that the stipulation was not, and

could not be, binding on the plaintiff class, and thus that it

was ineffective to defeat the removal. It explained that “a

plaintiff who files a proposed class action cannot legally bind

members of the proposed class before the class is certified.”

Id. at 593. Because the district court had not evaluated the ad-

equacy of the amount in controversy independently from the

stipulation, the Court remanded for further proceedings.

The situation in Thornley’s case is different. She does not

contest either the existence of minimal diversity (she is a citi-

zen of Illinois, and Clearview is a citizen of Delaware and

New York) or the fact that more than $5,000,000 is at stake.

Instead, she has simply offered a class definition that is nar-

rower than it might have been. We have no reason to believe

that the district court, acting on its own initiative, would cer-

tify a different and broader class; to that extent, the rule that

the plaintiff controls her own case applies. And unlike the sit-

uation in Standard Fire, people who fall outside Thornley’s

class definition are totally unaffected by this litigation. If they

wish to sue Clearview, either alone or under a class definition

that includes an allegation of injury, they are free to do so.

Indeed, as we noted earlier, there are a number of class actions

pending against Clearview, many of which appear to be

broader than this one. We know of nothing that would pre-

vent a putative class representative from taking a conserva-

tive approach to class definition. And if the plaintiffs change

their tune in the state court, Clearview will be able to attempt

to remove again to federal court, though we do not predict the

outcome of such an effort. See 28 U.S.C. § 1446(b)(3), (c).

No. 20-3249 15

IV

Our job is to decide whether Thornley and her co-plaintiffs

have Article III standing to pursue the case they have pre-

sented in their complaint. We have concluded that they do

not: they have described only a general, regulatory violation,

not something that is particularized to them and concrete. It

is no secret to anyone that they took care in their allegations,

and especially in the scope of the proposed class they would

like to represent, to steer clear of federal court. But in general,

plaintiffs may do this. As long as their allegations are in good

faith, they may include non-diverse parties as defendants.

Outside of the clumsily named area of “complete preemp-

tion,” they may choose to rely exclusively on state law and

avoid federal-question jurisdiction. And here, they may take

advantage of the fact that Illinois permits BIPA cases that al-

lege bare statutory violations, without any further need to al-

lege or show injury. See Rosenbach v. Six Flags Entertainment

Corp., 2019 IL 123186 ¶¶ 22–23.

We express no opinion on the adequacy of Thornley’s

complaint as a matter of Illinois law. That will be for the state

court to address. We hold only that on the basis of the allega-

tions of this complaint, the district court correctly decided

that Thornley and the other plaintiffs did not present a case

that lies within the boundaries set by Article III, and so the

court properly remanded the case to the state court.

AFFIRMED.

16 No. 20-3249

HAMILTON, Circuit Judge, concurring. I join Judge Wood’s

careful and persuasive opinion for the panel. I write sepa-

rately to emphasize a critical point in the panel opinion and

to add two broader cautions about standing issues under con-

sumer-protection statutes.

First, our decision has been determined by the choices that

these plaintiffs have made to narrow both their claims and the

scope of their proposed class. Judge Wood’s opinion recog-

nizes that other plaintiffs might well establish standing for

other alleged violations of Section 15(c). Ante at 11–12. Add to

those possibilities a person who has consented to collection,

retention, and use of her biometric information, perhaps for

non-profit scientific research, but who objects to the sale of her

data to a third party. The resulting injury in such cases would

be comparable to injuries in invasion-of-privacy and unjust-

enrichment cases that the law has long recognized. See Re-

statement (Second) of Torts § 652C (1977) (appropriation of

another’s name or likeness for one’s own use or benefit); Re-

statement of Restitution § 136 (1937) (“A person who has tor-

tiously used a trade name, trade secret, franchise, profit a

prendre, or other similar interest of another, is under a duty

to restitution for the value of the benefit received thereby.”);

see also Robertson v. Allied Solutions, LLC, 902 F.3d 690, 697 (7th

Cir. 2018) (plaintiff may show standing by alleging she was

deprived of a benefit but also by alleging she was deprived of

a chance to obtain a benefit). In fact, the misuse of a person’s

biometric information presents an especially dangerous mod-

ern version of these traditional injuries. A victim of identity

theft can obtain a new email address or even Social Security

number, but “biometric identifiers … are immutable, and

once compromised, are compromised forever.” Fox v. Dakkota

Integrated Systems LLC, 980 F.3d 1146, 1155 (7th Cir. 2020)).

No. 20-3249 17

Second, the opinion’s emphasis on the allegations of these

plaintiffs has a procedural corollary. Standing is an issue that

federal courts have an obligation to raise in any civil case.

When the trial or appellate court raises questions about the

sufficiency of a plaintiff’s allegations to plead standing, fair-

ness requires the court to give the plaintiff a reasonable op-

portunity to elaborate on her initial allegations. See, e.g., Lar-

kin v. Finance System of Green Bay, Inc., 982 F.3d 1060, 1066 (7th

Cir. 2020) (explaining opportunities for plaintiff’s attorney to

identify injury to support standing under Fair Debt Collection

Practices Act); Doermer v. Callen, 847 F.3d 522, 526 (7th Cir.

2017) (affirming dismissal for lack of standing where plaintiff

never took opportunities to offer amended complaint or to ex-

plain possible amendments to remedy lack of standing).

Third, the briefs in this case address very recent decisions

by this court finding that private plaintiffs lacked standing

when they alleged intangible harm based on violations of

other consumer-protection statutes. See Nettles v. Midland

Funding, LLC, — F.3d —, 2020 WL 7488610 (7th Cir. Dec. 21,

2020) (FDCPA); Bazile v. Finance System of Green Bay, Inc., —

F.3d —, 2020 WL 7351092 (7th Cir. Dec. 15, 2020) (FDCPA);

Spuhler v. State Collection Service, Inc., — F.3d —, 2020 WL

7351098 (7th Cir. Dec. 15, 2020) (FDCPA); Gunn v. Thrasher,

Buschmann & Voelkel, P.C., 982 F.3d 1069 (7th Cir. 2020)

(FDCPA); Brunett v. Convergent Outsourcing, Inc., 982 F.3d 1067

(7th Cir. 2020) (FDCPA); Larkin, 982 F.3d at 1066; Groshek v.

Time Warner Cable, Inc., 865 F.3d 884 (7th Cir. 2017) (Fair Credit

Reporting Act). The most recent cases under the Fair Debt

Collection Practices Act rely on our decision creating a circuit

split in Casillas v. Madison Avenue Associates, Inc., 926 F.3d 329,

335–36 (7th Cir. 2019), disagreeing with Macy v. GC Services

Ltd. P’Ship, 897 F.3d 747 (6th Cir. 2018); see also Casillas, 926

18 No. 20-3249

F.3d at 339–43 (Wood, C.J., dissenting from denial of en banc

review).

On the other side of this issue over standing for intangible

harms to consumers, see our previous cases under the Bio-

metric Information Privacy Act discussed in Judge Wood’s

opinion, including Fox v. Dakkota Integrated Systems, LLC, 980

F.3d 1146 (7th Cir. 2020); Bryant v. Compass Group USA, Inc.,

958 F.3d 617 (7th Cir. 2020); and Miller v. Southwest Airlines

Co., 926 F.3d 898 (7th Cir. 2019), as well as Gadelhak v. AT&T

Services, Inc., 950 F.3d 458, 462–63 (7th Cir. 2020) (unwelcome

text messages under Telephone Consumer Protection Act),

and Lavallee v. Med-1 Solutions, 932 F.3d 1049, 1053 (7th Cir.

2019) (omitted notice of rights under FDCPA). I confess that I

have not yet been able to extract from these different lines of

cases a consistently predictable rule or standard.

Much of the debate over standing in these cases stems

from the Supreme Court’s decision in Spokeo, Inc. v. Robins,

136 S. Ct. 1540 (2016), a decision on standing under the Fair

Credit Reporting Act. The Court told us that standing requires

“concrete” injury but that “intangible injuries can neverthe-

less be concrete.” Id. at 1548–49. This Delphic instruction

raised more questions than it answered. Many arise under

federal consumer-protection statutes that use common regu-

latory techniques: ensure that the consumer/debtor/bor-

rower/investor/retiree has accurate and reliable information

for her decisions, and require specific procedures, including

notice and opportunity to respond before adverse action is

taken that may affect her.

The lower federal courts have already spilled a great deal

of ink interpreting the Supreme Court’s statement in Spokeo

No. 20-3249 19

that the plaintiff could not satisfy Article III standing “by al-

leging a bare procedural violation.” Id. at 1550. Given the

number of cases in this and other lower courts finding only

“bare procedural violations,” it is worth emphasizing that the

only example the Court actually provided was utterly trivial:

an incorrect zip code in the information about a debtor under

the Fair Credit Reporting Act.

At the same time, Spokeo taught that “both history and the

judgment of Congress play important roles” in determining

whether an intangible injury can be sufficiently concrete to

support standing. Id. at 1549, discussing Lujan v. Defenders of

Wildlife, 504 U.S. 555, 578 (1992) (Congress “may elevat[e] to

the status of legally cognizable injuries concrete, de facto inju-

ries that were previously inadequate in law”), and id. at 580

(opinion of Kennedy, J.) (“Congress has the power to define

injuries and articulate chains of causation that will give rise to

a case or controversy where none existed before.”).

The legislative power of Congress to protect consumers

(and debtors, borrowers, investors, etc.) by granting informa-

tional and procedural rights, as well as private rights of action

to enforce them, has enormous practical importance. That im-

portance is only growing with the pace of technological

change. To illustrate, one need only imagine Congress soon

trying to draft a federal cousin to the Illinois statute we con-

sider here. It will need to decide whether to create a private

right of action to enforce individual rights rather than leave

enforcement entirely to a federal agency. Many post-Spokeo

decisions in this and other circuits impose constitutional lim-

its that will make that a difficult task.

With respect, I believe that several of our recent opinions

take Spokeo too far. Those opinions do not give sufficient

20 No. 20-3249

weight to Spokeo’s endorsement of standing where Congress

has chosen to provide procedural and informational rights to

reduce the risk of more substantive harm for consumers and

others, and has created private rights of action to enforce

them. We have also too quickly invoked Spokeo to deny con-

crete injury even in cases alleging core substantive violations.

In general, Congress is entitled to greater legislative leeway

than we have allowed in Casillas, Larkin, and Nettles, for exam-

ple. By denying standing in those and similar cases, we im-

pose constitutional limits that undermine legislative discre-

tion to enforce federal law through private rights of action.

The obvious alternative path for Congress will be to rely more

heavily on enforcement through federal bureaucracies, which

will face no standing obstacles.

I will not belabor the point further here, particularly in

light of the time constraints imposed on deciding this appeal

under 28 U.S.C. § 1453(c)(2). Judge Wood’s dissent from the

denial of rehearing in Casillas, the Sixth Circuit’s opinion in

Macy, 897 F.3d at 747, and the Ninth Circuit’s opinion on re-

mand in Spokeo, 867 F.3d 1108 (9th Cir. 2017), express my con-

cerns well. Sooner or later, though, I hope, the Supreme Court

will revisit the problem of standing in private actions based

on intangible injuries under a host of federal consumer-pro-

tection statutes.

This is a copy of a public record, reproduced as it was published. It is not legal advice, and it may not be the version a court would rely on. Check the official source before you cite it.

A word about cookies

We need a few to keep you signed in and the library working. The rest help us see which pages people use and where they get stuck. They stay off unless you say yes.