"In Re: Facebook Privacy Litigation"
Filing
101
RESPONSE (re 96 MOTION to Dismiss FACEBOOK, INC.S MOTION TO DISMISS FIRST AMENDED CONSOLIDATED CLASS ACTION COMPLAINT ) filed byDavid Gould, Mike Robertson. (Nassiri, Kassra) (Filed on 8/11/2011)
1
2
3
4
5
6
7
8
9
10
KASSRA P. NASSIRI (215405)
(knassiri@nassiri-jung.com)
CHARLES H. JUNG (217909)
(cjung@nassiri-jung.com)
NASSIRI & JUNG LLP
47 Kearny Street, Suite 700
San Francisco, California 94108
Telephone:
(415) 762-3100
Facsimile:
(415) 534-3200
EDELSON MCGUIRE LLP
SEAN REIS (184044) (sreis@edelson.com)
30021 Tomas Street, Suite 300
Rancho Santa Margarita, CA 92688
Telephone:
(949) 459-2124
Facsimile: (949) 459-2123
MICHAEL J. ASCHENBRENER (277114)
(mja@aschenbrenerlaw.com)
ASCHENBRENER LAW, P.C.
795 Folsom Street, First Floor
San Francisco, California 94107
Telephone: (415) 813-6245
Facsimile: (415) 813-6246
ATTORNEYS FOR PLAINTIFF AND THE PUTATIVE CLASS
11
12
13
14
UNITED STATES DISTRICT COURT
NORTHERN DISTRICT OF CALIFORNIA
SAN FRANCISCO DIVISION
Case No. 10-cv-02389-JW
15
CLASS ACTION
16
17
18
IN RE: FACEBOOK PRIVACY LITIGATION
19
PLAINTIFFS’ OPPOSITION TO
FACEBOOK’S MOTION TO
DISMISS FIRST AMENDED
CONSOLIDATED CLASS
ACTION COMPLAINT
ACTION FILED: 05/28/10
20
Date: October 17, 2011
Time: 9:00 a.m.
Judge: Hon. James Ware
21
22
23
24
25
26
27
28
PLAINTIFF’S OPPOSITION TO MOTION TO
DISMISS FIRST AMENDED COMPLAINT
10-cv-2389-JW
1
TABLE OF CONTENTS
2
I.
INTRODUCTION & FACTUAL BACKGROUND.................................................... 1
3
II.
LEGAL STANDARD................................................................................................... 2
4
III.
DISCUSSION ............................................................................................................... 2
5
A.
6
Facebook, in Its Capacity as a Remote Computing Service Provider, Is Liable
Under the SCA. ................................................................................................. 2
1.
As an RCS Provider, Facebook May Not Rely on the “Intended
Recipient” Exception to Liability. ........................................................ 4
3.
Even Assuming the “Intended Recipient” Exception Could Apply to
an RCS Provider, Facebook May Not Give Itself Consent to Divulge
Plaintiffs’ Communications. ................................................................. 6
4.
8
Facebook Was Acting as a Remote Computing Service Provider when
It Divulged the Content of Plaintiffs’ Communications. ...................... 3
2.
7
Facebook Disclosed the Contents of Plaintiffs’ Communications. ...... 8
9
10
11
12
B.
13
Plaintiffs Have Cured the Defects in Their Breach of Contract Claim that the
Court Previously Identified. ............................................................................ 10
14
1.
Plaintiffs Have Alleged “Actual and Appreciable” Damages. ........... 11
15
2.
Plaintiffs’ Theory of Damages Is Supported by Recent Case Law. ... 12
16
C.
Plaintiffs’ FAC Alleges Plaintiffs Relied on Defendant’s Alleged Fraudulent
Misrepresentations. ......................................................................................... 16
D.
Defendant Introduced Computer Instructions that Usurped the Normal
Operation of Plaintiffs’ Computers in Violation of the CCCL. ...................... 17
17
18
19
IV.
CONCLUSION ........................................................................................................... 18
20
21
22
23
24
25
26
27
28
PLAINTIFF’S OPPOSITION TO MOTION TO
DISMISS FIRST AMENDED COMPLAINT
ii
10-cv-2389-JW
TABLE OF AUTHORITIES
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
CASES
Aguilera v. Pirelli Armstrong Tire Corp., 223 F.3d 1010 (9th Cir. 2000) ............................. 11
Ashcroft v. Iqbal, 129 S. Ct. 1937 (2009). ................................................................................ 2
Bell Atlantic v. Twombly, 550 U.S. 544 (2009) ........................................................................ 2
Bosley Med. Inst., Inc. v. Kremer, 403 F.3d 672 (9th Cir. 2005).............................................. 7
Brooks v. Donovan, 699 F.2d 1010 (9th Cir. 1983).................................................................. 7
Cassierer v. Kingdom of Spain, 580 F.3d 1048 (9th Cir. 2009) ............................................... 2
Claridge v. RockYou, No. 09-cv-6032-PJH, Dkt. 47 (N.D. Cal. April 11, 2011)....... 12, 13, 15
Concha v. London, 62 F.3d 1493 (9th Cir. 1995) ................................................................... 16
Crispin v. Christian Audigier, Inc., 717 F. Supp. 2d 965 (C.D. Cal. 2010) ......................... 3, 5
Dyer v. Nw. Airlines Corps., 334 F. Supp. 2d 1196 (D.N.D. 2004) ....................................... 15
Flagg v. City of Detroit, 252 F.R.D. 346 (E.D. Mich. 2008) .................................................... 5
Gautier v. Gen. Tel. Co., 234 Cal. App. 2d 302 (1965) .......................................................... 11
Hepting v. AT&T Corp., 439 F. Supp. 2d 974 (N.D. Cal. 2006) ............................................ 12
Hibbs v. Winn, 542 U.S. 88 (2004) ........................................................................................... 7
Ileto v. Glock Inc., 349 F.3d 1191 (9th Cir. 2003) .................................................................... 2
In re Am. Airlines, Inc., Privacy Litig., 370 F. Supp. 2d 552 (N.D. Tex. 2005)................... 5, 7
In re JetBlue Airways Corp. Privacy Litig., 379 F. Supp. 2d 299 (E.D.N.Y. 2005) ........ 14, 15
Int'l Tel. & Tel. Corp. v. General Tel. & Elec. Corp., 518 F.2d 913 (9th Cir.1975) ................ 7
Kremen v. Cohen, 337 F.3d 1024 (9th Cir. 2003)................................................................... 15
22
Landmark Screens, LLC v. Morgan, Lewis & Bockius LLP, No. C-08-2581-JF, 2008 WL
4483817 (N.D. Cal. Oct. 2, 2008) ............................................................................... 12
23
Quon v. Arch Wireless Op. Co., Inc., 529 F.3d 892 (9th Cir. 2008)......................................... 5
24
Sams v. Yahoo!, Inc., No. 10-cv-5897-JF (HRL), 2011 WL 1884633 (N.D. Cal. May 18,
2011) ........................................................................................................................... 10
25
26
27
Theofel v. Farey-Jones, 341 F.3d 978 (9th Cir. 2003) .............................................................. 3
United States v. American Trucking Ass'ns., 310 U.S. 534, 60 S. Ct. 1059, 84 L. Ed. 1345
(1940) ............................................................................................................................ 7
28
PLAINTIFF’S OPPOSITION TO MOTION TO
DISMISS FIRST AMENDED COMPLAINT
iii
10-cv-2389-JW
1
2
3
4
5
6
7
8
9
10
11
12
United States v. Forrester, 512 F.3d 500 (9th Cir. 2008) ............................................... 8, 9, 10
Vess v. Ciba-Geigy Corp. USA, 317 F.3d 1097 (9th Cir. 2003) ....................................... 16, 17
Viacom Int’l Inc. v. YouTube, Inc., 253 F.R.D. 256 (S.D.N.Y. 2008) .................................. 3, 4
STATUTES
18 U.S.C. § 2702. ............................................................................................................. passim
Cal. Civ. Code §§ 1572-73 ............................................................................................... 16, 17
18 U.S.C. § 2510 ....................................................................................................................... 8
18 U.S.C. § 2711 ....................................................................................................................... 3
Cal. Penal Code § 502 ............................................................................................................. 17
Fed. R. Civ. P. 9(b) ................................................................................................................. 16
OTHER AUTHORITIES
2A N. Singer, Statutes and Statutory Construction § 46.06 (rev. 6th ed. 2000) ....................... 8
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
PLAINTIFF’S OPPOSITION TO MOTION TO
DISMISS FIRST AMENDED COMPLAINT
iv
10-cv-2389-JW
1
2
I.
INTRODUCTION & FACTUAL BACKGROUND
In the Court’s May 12, 2011 Order granting in part Defendant’s motion to dismiss, the
3
Court identified several pleading deficiencies and granted Plaintiffs leave to file an amended
4
complaint as to certain causes of action. In their First Amended Class Action Complaint
5
(“FAC”), Plaintiffs remedy each of the pleading deficiencies identified.
6
With respect to Plaintiffs’ claim under the Stored Communications Act (“SCA”),
7
Facebook again relies primarily on the “intended recipient” exception to liability available
8
exclusively to electronic communication service (“ECS”) providers, arguing that it cannot be
9
liable for disclosing Plaintiffs’ communications because Facebook was the “intended recipient”
10
of such communications under 18 U.S.C. 2702(b)(3). However, Facebook’s argument overlooks
11
the fact that Plaintiffs also allege that Facebook is a remote computing service (“RCS”) provider.
12
(FAC ¶¶ 81, 83.) Because an RCS provider may not avail itself of the “intended recipient”
13
exception under the SCA and Plaintiffs did not consent to Facebook sharing their personal
14
information with third-parties (FAC ¶¶ 3, 34, 84), Facebook lacked consent to divulge Plaintiffs’
15
communications and thus violated the SCA.
16
Facebook’s challenges to Plaintiffs’ remaining claims fare no better. Facebook argues
17
that Plaintiffs fail to allege that they suffered actual and appreciable damages. But as
18
demonstrated below, Plaintiffs now allege specific, non-conclusory facts that establish damages
19
(FAC ¶¶ 16, 17, 22, 23, 122), and present case law from within this District that explicitly
20
accepts Plaintiffs’ damage theory. Accordingly, Facebook’s challenge to Plaintiffs’ breach of
21
contract claim must fail.
22
Facebook similarly rehashes arguments in opposition to Plaintiffs’ claims under Cal.
23
Civil Code §§ 1572 & 1573 (actual and constructive fraud) and Cal. Penal Code § 502(c)(8).
24
But the FAC explicitly addresses any deficiencies of the original complaint by alleging reliance
25
on Facebook’s misstatements (FAC ¶¶ 4, 5, 76, 126) and the particulars of Defendant’s
26
fraudulent conduct (FAC ¶¶ 27-33), and by alleging precisely how Facebook knowingly
27
28
PLAINTIFF’S OPPOSITION TO MOTION TO
DISMISS FIRST AMENDED COMPLAINT
1
10-cv-2389-JW
1
introduced a computer contaminant into Plaintiffs’ computers in violation of the California
2
Computer Crime Law (FAC ¶¶ 3, 33-44, 104).
3
For these reasons, and as explained in further detail below, the Court should deny
4
Facebook’s Motion to Dismiss (“MTD”).
5
II.
LEGAL STANDARD
6
In reviewing a motion to dismiss, the court “accept[s] all well-pleaded factual allegations
7
in the complaint as true, and determines whether the factual content allows the court to draw the
8
reasonable inference that the defendant is liable for the misconduct alleged.” Cassierer v.
9
Kingdom of Spain, 580 F.3d 1048, 1052 (9th Cir. 2009). A motion to dismiss must be denied if
10
the complaint contains factual allegations that, when accepted as true, “plausibly give rise to an
11
entitlement to relief.” Ashcroft v. Iqbal, 129 S. Ct. 1937, 1941 (2009). “Once a claim has been
12
adequately stated, it may be supported by showing any set of facts consistent with the allegations
13
in the complaint.” Bell Atlantic v. Twombly, 550 U.S. 544, 546 (2009). A complaint need only
14
contain a plain and short statement of a plaintiff’s claim, a standard that “contains a powerful
15
presumption against rejecting pleadings for failure to state a claim.” Ileto v. Glock Inc., 349 F.3d
16
1191, 1199 (9th Cir. 2003); Fed. R. Civ. P. 8(a).
17
As demonstrated below, the FAC puts Facebook on notice of the claims it must defend,
18
and amply alleges facts that, taken as true, plausibly allow the Court “to draw the reasonable
19
inference that [Facebook] is liable for the misconduct alleged.” Ashcroft, 129 S. Ct. at 1940.
20
III.
21
22
DISCUSSION
A.
Facebook, in Its Capacity as a Remote Computing Service Provider, Is
Liable Under the SCA.
Facebook’s fundamental challenge to Plaintiffs’ SCA claim is that because Facebook was
23
the “intended recipient” of Plaintiffs’ communications under 18 U.S.C. 2702(b)(3), “Facebook
24
had its own consent to divulge the communication to third-party advertisers.” (MTD at 11.)
25
Facebook’s argument fails, however, because Facebook was acting as an RCS provider at the
26
time that it non-consensually divulged the contents of Plaintiffs’ communications. Because
27
28
PLAINTIFF’S OPPOSITION TO MOTION TO
DISMISS FIRST AMENDED COMPLAINT
2
10-cv-2389-JW
1
unlike an ECS provider, an RCS provider may not avail itself of the SCA’s “intended recipient”
2
exception, Facebook is liable under the SCA.
3
1.
4
Facebook Was Acting as a Remote Computing Service Provider when
It Divulged the Content of Plaintiffs’ Communications.
Depending on the particular service function that it is providing, Facebook functions as
5
both an ECS and RCS provider.1 In the context of an SCA claim, whether a service provider is
6
an RCS provider or an ECS provider depends on the particular service function at issue. See,
7
e.g., Crispin v. Christian Audigier, Inc., 717 F. Supp. 2d 965, 986 n.42 (C.D. Cal. 2010).
8
Although Facebook allows users to send private messages to one another (the ECS function),
9
Plaintiffs’ claims concern Facebook’s remote computing service.2 Plaintiffs allege Facebook
10
provided to them computer storage and processing services by allowing them to process, store,
11
and share content, including pictures, videos, biographical information and more. (FAC ¶¶ 8012
81.) Plaintiffs further allege that Facebook allows its users the choice to grant certain other users
13
a license to view information stored on its remote computing service. (Id.) This content storage
14
and sharing function forms the crux of Plaintiffs’ claims and makes Facebook an RCS provider
15
subject to section 2702(a)(2) of the SCA. See, e.g., Viacom Int’l Inc. v. YouTube, Inc., 253
16
F.R.D. 256 (S.D.N.Y. 2008) (holding that YouTube is an RCS provider because it provides
17
storage, processing and sharing of videos); Crispin, 717 F. Supp. 2d at 990 (holding that
18
Facebook is an RCS provider and subject to § 2702(a)(2)).
19
Plaintiffs allege that the non-consensual disclosures occurred while Facebook users
20
browsed stored content on Facebook’s site (an RCS function). (FAC ¶ 44.) Plaintiffs also allege
21
that they sent communications (i.e., communications concerning their identities and which of
22
23
1
24
25
26
27
28
Facebook provides both remote computing and electronic communications services (e.g.,
private messaging between users). As the Ninth Circuit recognized, an entity may be both an
ECS and RCS provider. Theofel v. Farey-Jones, 341 F.3d 978, 1076-77 (9th Cir. 2003)
(implying that some but “not all remote computing services are also electronic communications
services”). Plaintiffs’ claims here concern Facebook’s remote computing service, not its
electronic communications service.
2
The “term ‘remote computing service’ means the provision to the public of computer storage or
processing services by means of an electronic communications system.” 18 U.S.C. § 2711(2).
PLAINTIFF’S OPPOSITION TO MOTION TO
DISMISS FIRST AMENDED COMPLAINT
3
10-cv-2389-JW
1
their own stored content or friends’ stored content they wished to view) to Facebook for the
2
specific and sole purpose of using Facebook’s remote computing services and did not authorize
3
Facebook to use those communications for any other purpose.3 (Id. ¶ 76.) Accordingly, in the
4
context of Plaintiffs’ allegations, Facebook was acting as an RCS provider and did not have
5
Plaintiffs’ consent to further divulge the subject communications to third parties. By divulging
6
the contents of those communications to third-party advertisers without Plaintiffs’ consent,
7
Facebook violated section 2702(a)(2).
8
2.
9
As an RCS Provider, Facebook May Not Rely on the “Intended
Recipient” Exception to Liability.
Facebook argues that the SCA allows ECS providers to divulge the contents of a
10
communication “with the lawful consent of the originator or an addressee or intended recipient
11
of such communication.” (MTD at 11.) But only ECS providers, and not RCS providers like
12
Facebook, may avail themselves of the SCA’s “intended recipient” exception.4 Because
13
Plaintiffs’ claims implicate Facebook’s RCS function (FAC ¶¶ 81, 83), the “intended recipient”
14
exception does not apply here.
15
Depending on whether ECS or RCS is at issue, section 2702(b)(3) establishes different
16
criteria for establishing an exception to the general rule against disclosure:
17
Exceptions for disclosure of communications.— A provider
described in subsection (a) may divulge the contents of a
communication—
...
18
19
20
21
3
22
23
24
25
26
27
28
Section 2702(a)(2) prevents an RCS provider from divulging electronic communications sent to
it “solely for the purpose of providing storage or computer processing services to such subscriber
or customer, if the [RCS] provider is not authorized to access the contents of any such
communications for purposes of providing any services other than storage or computer
processing.”
4
Indeed, information received by RCS providers, such as YouTube, often has no “intended
recipient” in the way that an email message has an “intended recipient.” For example, Facebook
users who upload pictures may do so purely for storage purposes, and may or may not share
those pictures with others. In that case, even the uploaded pictures have no “intended recipient,”
they are protected by section 2702(a)(2) and may only by divulged by Facebook with the user’s
consent. See, e.g., YouTube, 253 F.R.D. at 264-65 (construing § 2702(b)(3) to require subscriber
consent in the case of RCS providers).
PLAINTIFF’S OPPOSITION TO MOTION TO
DISMISS FIRST AMENDED COMPLAINT
4
10-cv-2389-JW
(3) with the lawful consent of the originator or an addressee or
intended recipient of such communication, or the subscriber in
the case of a remote computing service;
1
2
(Emphasis supplied.)
3
Pursuant to the SCA, in its capacity as an RCS provider Facebook may divulge the
4
contents of communications only with the consent of the subscriber (in this case, Plaintiffs). See,
5
e.g., Crispin, 717 F. Supp. 2d at 973 n.17 (“An RCS provider can avail itself of all but one of the
6
exceptions set forth in § 2702(b). An RCS provider may divulge the contents of a
7
communication with consent of the ‘subscriber,’ while an ECS provider may divulge the
8
contents with the lawful consent of an addressee or intended recipient of such communication.
9
18 U.S.C. § 2702(b)(3).”); Flagg v. City of Detroit, 252 F.R.D. 346, 349-50 (E.D. Mich. 2008)
10
(“The potential importance of distinguishing between an “ECS” and an “RCS” lies in the
11
different criteria for establishing an exception to the general rule against disclosure. The provider
12
of an RCS may divulge the contents of a communication with the “lawful consent” of the
13
subscriber to the service, while the provider of an ECS may divulge such a communication only
14
with the “lawful consent of the originator or an addressee or intended recipient of such
15
communication.”) (citing 18 U.S.C. § 2702(b)(3)).5
16
Because Facebook was acting as an RCS provider, it may not assert the § 2702(b)(3)
17
“intended recipient” exception. As a result, Facebook needs more than its own consent to
18
divulge Plaintiffs’ communications—it needs the consent of Plaintiffs, who are the “subscribers”
19
under § 2702(b)(3). As alleged, Plaintiffs explicitly did not provide consent to Facebook to share
20
their communications. (FAC, ¶¶ 3, 16, 27-34, 77, 79, 84.) Accordingly, the “intended recipient”
21
22
23
24
25
26
27
5
Facebook cites in In re Am. Airlines, Inc., Privacy Litig., 370 F. Supp. 2d 552, 560-61 (N.D.
Tex. 2005) for the proposition that an RCS provider may give its own consent to disclose
customer communications to third parties. The district court there, however, did not bother to
determine whether the defendant was an ECS or RCS provider, nor did it consider whether the
“intended recipient” is available to RCS providers. Similarly, the court in Quon v. Arch Wireless
Op. Co., Inc., 529 F.3d 892, 900 (9th Cir. 2008) noted, without analysis or discussion, that the
intended recipient defense may apply to an RCS provider. The holding of that case, however,
did not depend on the truth of that statement, making it dictum. Moreover, for the reasons noted
immediately below, the dictum in Quon defies the purpose of the SCA as it applies to RCS
providers like Facebook.
28
PLAINTIFF’S OPPOSITION TO MOTION TO
DISMISS FIRST AMENDED COMPLAINT
5
10-cv-2389-JW
1
exception does not exculpate Facebook and it is liable for divulging Plaintiffs’ communications
2
without consent under § 2702(a)(2).
3
3.
4
Even Assuming the “Intended Recipient” Exception Could Apply to
an RCS Provider, Facebook May Not Give Itself Consent to Divulge
Plaintiffs’ Communications.
5
Crediting Facebook’s interpretation of the SCA would mean that virtually every RCS
6
may disclose any communication by any user at any time. This interpretation undermines the
7
clear purpose of the statute and creates an absurd result.
8
9
Liability under Section 2702(a)(2) is created by disclosing communications “received by
means of electronic transmission from (or created by means of computer processing of
10
communications received by means of electronic transmission from), a subscriber or customer of
11
such service.” (Emphasis supplied). But the way that Facebook (and virtually all other RCS
12
providers) provides remote computing services is to send and receive electronic communications
13
directly to and from its users by means of electronic transmission. Plaintiffs (and all Facebook
14
users) must send all of their communications directly to Facebook in order to use Facebook’s
15
services.6
Facebook’s claim that it is not liable for disclosing Plaintiffs’ communications because it
16
17
was the “intended recipient” of those communications is illogical. If this reasoning were
18
followed, all of the SCA’s protections against unauthorized disclosure of communications would
19
be eviscerated, and any RCS provider would be exonerated from any and all of its disclosures.
20
Because all user communications carried or maintained on an RCS’s computers are sent to it
21
directly by the user, it is an “intended recipient” of all of the users’ communications; and
22
following Facebook’s reasoning, any RCS may freely divulge any communication to any third
23
24
25
26
27
28
6
There is no way, for example, for a user to store a picture on Facebook without sending that
picture to Facebook. Similarly, there was no way for Plaintiffs to view stored content on
Facebook without sending a communication to Facebook telling Facebook to display that
content.
PLAINTIFF’S OPPOSITION TO MOTION TO
DISMISS FIRST AMENDED COMPLAINT
6
10-cv-2389-JW
1
party.7 If the Court makes the “intended recipient” defense available to an RCS provider in the
2
manner Facebook suggests, it would defeat the plain purpose of section 2702(a)(2) and much of
3
the SCA.8
4
It is axiomatic that a court may not adopt a plain language interpretation of a statutory
5
provision that directly undercuts the clear purpose of the statute. In Brooks v. Donovan, 699
6
F.2d 1010 (9th Cir. 1983), the Ninth Circuit refused to adopt a plain language interpretation of a
7
statute governing pension funds. The court reasoned that it “must look beyond the express
8
language of a statute where a literal interpretation ‘would thwart the purpose of the overall
9
statutory scheme or lead to an absurd or futile result.’” Id. at 1011 (quoting International Tel. &
10
Tel. Corp. v. General Tel. & Elec. Corp., 518 F.2d 913, 917-918 (9th Cir.1975)).
11
In reaching its conclusion, the Ninth Circuit followed the Supreme Court’s approach in
12
United States v. American Trucking Ass'ns., 310 U.S. 534, 60 S. Ct. 1059, 84 L. Ed. 1345 (1940).
13
There the Court noted that “[w]hen [a given] meaning has led to absurd results . . . this Court has
14
looked beyond the words to the purpose of the act. Frequently, however, even when the plain
15
meaning did not produce absurd results but merely an unreasonable one ‘plainly at variance
16
with the policy of the legislation as a whole,’ this Court has followed that purpose, rather than
17
the literal words.” Id. at 543 (emphasis added; citations omitted). See also Bosley Med. Inst.,
18
Inc. v. Kremer, 403 F.3d 672, 681 (9th Cir. 2005) (“We try to avoid, where possible, an
19
interpretation of a statute that renders any part of it superfluous and does not give effect to all of
20
the words used by [the legislature.]”) (internal quotation marks and citation omitted); Hibbs v.
21
Winn, 542 U.S. 88, 101 (2004) ( “‘[a] statute should be construed so that effect is given to all its
22
provisions, so that no part will be inoperative or superfluous, void or insignificant . . . .’”)
23
7
24
25
26
27
28
For example, cloud-based financial services software would be able to disclose user financial
data to third-parties, and online computer backup services that store customer data online would
be able to sell that data to advertisers without consent.
8
Not surprisingly, of the dozens of other courts to consider the “intended recipient” provision of
section 2702(b)(3), Plaintiffs are aware of only one (In re American Airlines, supra, n.5) that
held that a provider (ECS or RCS) may construe itself as the “intended recipient” and give itself
consent to disclose communications, notwithstanding that every provider in those cases could
have made the same argument Facebook makes here.
PLAINTIFF’S OPPOSITION TO MOTION TO
DISMISS FIRST AMENDED COMPLAINT
7
10-cv-2389-JW
1
(quoting 2A N. Singer, Statutes and Statutory Construction § 46.06, at 181-86 (rev. 6th ed.
2
2000)).
3
Facebook seeks to give itself “its own consent to divulge [Plaintiffs’] communication[s]
4
to third-party advertisers.” This produces a nonsensical result under the SCA. Allowing RCS
5
providers to “give their own consent” to disclose user communications would defeat most all of
6
the consumer privacy protections in the statutes. This Court should preserve the intent and
7
purpose of the SCA and reject Facebook’s “intended recipient” argument.
8
4.
Facebook Disclosed the Contents of Plaintiffs’ Communications.
9
Facebook renews its argument that it merely disclosed customer records relating to
10
Plaintiffs, and not the content of any of Plaintiffs’ communications. In doing so, Facebook
11
claims that it revealed nothing more than Plaintiffs’ usernames, and cites to cases involving the
12
disclosure of bare customer records. But Facebook also disclosed the URLs of the particular
13
pages Plaintiffs were viewing when they clicked on ads (FAC ¶ 35) along with their identities,
14
which courts have held in other contexts constitutes disclosure of content. This bundle of
15
information, all of which was communicated to Facebook by Plaintiffs incident to their use of
16
Facebook’s remote computing services, revealed to advertisers much more than mere customer
17
records.9
The Ninth Circuit has held in other contexts that disclosures of the URLs of the pages
18
19
visited by a user (as Plaintiffs allege here) constitute the disclosure of contents of
20
communication. In United States v. Forrester, 512 F.3d 500 (9th Cir. 2008), the Ninth Circuit
21
considered whether computer surveillance that enabled the government to learn the to/from
22
addresses of the plaintiff’s email messages, the IP addresses of the websites that he visited, and
23
the total volume of information transmitted to or from his account constituted a search for Fourth
24
25
26
27
28
9
In order to browse Facebook’s website, Plaintiffs sent electronic communications to Facebook
indicating which pages they wished to view. (FAC ¶ 74.) The SCA broadly defines an electronic
communication as “any transfer of signs, signals, writings, images, sounds, data, or intelligence
of any nature transmitted in whole or in part by a wire, radio, electromagnetic, photoelectronic or
photooptical system that affects interstate or foreign commerce.” 18 U.S.C. § 2510(12). The
“substance” and “meaning” of Plaintiffs’ communications was that Plaintiffs were interested in
viewing particular content on Facebook’s site. 18 U.S.C. § 2510(8).
PLAINTIFF’S OPPOSITION TO MOTION TO
DISMISS FIRST AMENDED COMPLAINT
8
10-cv-2389-JW
1
Amendment purposes. In holding that it did not, the Ninth Circuit reasoned that the surveillance
2
techniques the government employed were indistinguishable from the use of a pen register, and
3
the surveillance did not acquire the contents of the plaintiff’s communications. Id. at 509-10.
4
The court paid careful attention to the government’s acquisition of the IP addresses of websites
5
that the plaintiff visited, concluding that IP addresses do not reveal content:
6
IP addresses constitute addressing information and do not
necessarily reveal any more about the underlying contents of
communication than do phone numbers. When the government
obtains the to/from addresses of a person’s e-mails or the IP
addresses of websites visited, it does not find out the contents of
the messages or know the particular pages on the websites the
person viewed. At best, the government may make educated
guesses about what was said in the messages or viewed on the
websites based on its knowledge of the e-mail to/from addresses
and IP addresses—but this is no different from speculation about
the contents of a phone conversation on the basis of the identity of
the person or entity that was dialed … the [United States Supreme]
Court in Smith and Katz drew a clear line between unprotected
addressing information and protected content information that the
government did not cross here.
7
8
9
10
11
12
13
14
Id. at 510 (emphasis supplied).10
But the court went on to observe that had the government acquired URLs of the pages
15
16
viewed by the plaintiff, content would be revealed and the surveillance might be constitutionally
17
problematic:
18
Surveillance techniques that enable the government to determine
not only the IP addresses that a person accesses but also the
uniform resource locators (“URL”) of the pages visited might be
more constitutionally problematic. A URL, unlike an IP address,
identifies the particular document within a website that a person
views and thus reveals much more information about the person’s
Internet activity. For instance, a surveillance technique that
captures IP addresses would show only that a person visited the
New York Times’ website at http://www.nytimes.com, whereas a
technique that captures URLs would also divulge the particular
articles the person viewed. See Pen Register Application, 396
F.Supp.2d at 49 (“[I]f the user then enters a search phrase [in the
Google search engine], that search phrase would appear in the
URL after the first forward slash. This would reveal content....”).
19
20
21
22
23
24
25
26
27
28
10
In coming to this conclusion, the court relied on the fact that even though a website like
the New York Times may contain hundreds or thousands of pages, it typically has only one IP
address. Id. at n.5.
PLAINTIFF’S OPPOSITION TO MOTION TO
DISMISS FIRST AMENDED COMPLAINT
9
10-cv-2389-JW
1
Id. at n.6 (emphasis supplied).
2
Plaintiffs allege that Facebook revealed the precise content that the Ninth Circuit found
3
problematic in Forrester: the URLs that Plaintiffs were viewing at the time they clicked on
4
Facebook advertisements. By disclosing the URLs along with Plaintiff’s identities, Facebook
5
divulged more than mere customer records—it divulged the content of Plaintiffs’
6
communications.11
7
Ultimately, none of Facebook’s SCA defenses withstands recent, relevant case law or
8
long-held canons of statutory interpretation. As an RCS, Facebook may not give itself consent to
9
reveal customer communications. Furthermore, the data Facebook disclosed to third-parties
10
constitutes the content of Plaintiffs’ communications and not mere customer records.
11
Accordingly, Plaintiffs request that the Court deny Facebook’s motion to dismiss their SCA
12
cause of action.
13
B.
14
Plaintiffs Have Cured the Defects in Their Breach of Contract Claim that the
Court Previously Identified.
In dismissing Plaintiffs’ breach of contract claim without prejudice from their
15
Consolidated Complaint, the Court articulated two bases for the dismissal: (1) Plaintiffs only
16
alleged they “suffered injury” without alleging facts demonstrating specific, actual damages
17
(Order at 15); and, (2) “Plaintiffs’ contention that their personal information constitutes a form of
18
‘payment’ to Defendant is unsupported by law” (Order at 12 n.10). Facebook reiterates these
19
arguments in its motion to dismiss, arguing that Plaintiffs have not addressed these defects in the
20
FAC.
21
Facebook’s arguments ignore several of Plaintiffs’ amended allegations as well as recent
22
case law specifically embracing Plaintiffs’ damage theory. As to the first basis, Plaintiffs have
23
cured any pleading defect by specifically alleging actual, non-speculative damages. As to the
24
25
26
27
28
11
Facebook’s reliance on Sams v. Yahoo!, Inc., No. 10-cv-5897-JF (HRL), 2011 WL
1884633 (N.D. Cal. May 18, 2011) is inapposite. That case did not involve the disclosure of
particular URLs, and instead involved disclosure of mere “user identification information.” Id.
at *7.
PLAINTIFF’S OPPOSITION TO MOTION TO
DISMISS FIRST AMENDED COMPLAINT
10
10-cv-2389-JW
1
second basis, Plaintiffs can now cite to new, relevant case law supporting their position that
2
personal information constitutes a form of payment.
3
4
1.
Plaintiffs Have Alleged “Actual and Appreciable” Damages.
In order to state a cause of action for breach of contract, Plaintiffs must plead four
5
elements: “[1] the contract, [2] plaintiffs’ performance (or excuse for nonperformance), [3]
6
defendant’s breach, and [4] damage to plaintiffs therefrom.” Gautier v. Gen. Tel. Co., 234 Cal.
7
App. 2d 302, 305 (1965).
8
Defendant concedes in its motion to dismiss that Plaintiffs have sufficiently pleaded the
9
first three elements. Thus, the only issue is whether Plaintiffs have sufficiently alleged “actual
10
and appreciable damage” flowing from Facebook’s breach. Aguilera v. Pirelli Armstrong Tire
11
Corp., 223 F.3d 1010, 1015 (9th Cir. 2000).
12
The FAC contains extensive specific, non-conclusory allegations of actual and
13
appreciable damages flowing from Defendant’s breach of its contract with Plaintiffs and the
14
putative class. First, Plaintiffs allege facts concerning Facebook’s business model of using its
15
users’ personal information to generate substantial advertising revenue, which provides the
16
foundation for Plaintiffs’ theory of damages. (FAC ¶¶ 16-23.)
17
Then, Plaintiffs specifically allege the exact form of the damages that they suffered:
18
As a result of Facebook’s misconduct and breach of the Agreement
described herein, Plaintiffs and the Class suffered damages.
Plaintiff and the Class members did not receive the benefit of the
bargain for which they contracted and for which the[y] paid
valuable consideration in the form of their personal information,
which, as alleged above, has ascertainable value to be proven at
trial. In other words, Plaintiff and each Class member gave up
something of value, PII, in exchange for access to Facebook and
Facebook’s privacy promises. Facebook materially breached the
contracts by violating its privacy terms, thus depriving Plaintiff
and Class members the benefit of the bargain. Thus, their actual
and appreciable damages take the form of the value of their PII that
Facebook wrongfully shared with advertisers.
19
20
21
22
23
24
25
26
27
(FAC ¶ 122.)
As alleged, Plaintiffs have suffered damages because the personal information they
provided to Facebook in exchange for access to Facebook and Facebook’s contractual promise
28
PLAINTIFF’S OPPOSITION TO MOTION TO
DISMISS FIRST AMENDED COMPLAINT
11
10-cv-2389-JW
1
not to share that personal information has concrete, ascertainable value. (FAC ¶¶ 16, 17, 22, 23
2
122.) Plaintiffs’ loss or diminution of that personal information as a result of Facebook’s
3
unauthorized disclosure constitutes actual harm.
4
Robust and established markets exist that can provide valuations for numerous pieces of
5
personal information and allow individuals and entities to purchase and exchange personal
6
information. (FAC ¶ 23.) In the absence of consent, Plaintiffs should be the ones profiting from
7
the distribution of their personal data, not Facebook. Plaintiffs did not provide consent for
8
Facebook to reveal their valuable personal information to advertisers or other third-parties.
9
(FAC ¶¶ 4, 5, 34, 116.) Therefore, Plaintiffs have lost the right to sell that data to the entities
10
that now no longer need to pay Plaintiffs for it because they obtained it from Facebook. That is
11
how Plaintiffs have suffered damages. Facebook has deprived them of the right to sell their own
12
personal data, which Plaintiffs have alleged is of real, demonstrable value.
13
While Plaintiffs intend to introduce expert testimony as to the specific value of Plaintiffs’
14
personal information at issue, Plaintiffs need not identify the specific value associated with the
15
personal information at this procedural stage. See Hepting v. AT&T Corp., 439 F. Supp. 2d 974,
16
999 (N.D. Cal. 2006) (“at the pleading stage, general factual allegations of injury resulting from
17
defendant’s conduct may suffice”); Landmark Screens, LLC v. Morgan, Lewis & Bockius LLP,
18
No. C-08-2581-JF, 2008 WL 4483817, at *6 (N.D. Cal. Oct. 2, 2008) (“the federal rules impose
19
no requirement that plaintiff plead a specific amount of damage”). Accordingly, Plaintiffs have
20
sufficiently pleaded concrete, appreciable damages as required in this district.
21
2.
22
Plaintiffs’ Theory of Damages Is Supported by Recent Case Law.
Recently, a court in this district denied a motion to dismiss a breach of contract claim
23
based on damages allegations identical to those in the instant case. Claridge v. RockYou, No. 09-
24
cv-6032-PJH, Dkt. 47 (N.D. Cal. April 11, 2011).12 Thus, it can no longer be said that there is
25
26
27
28
12
Judge Hamilton issued the order denying the defendant’s motion to dimsis in Claridge six
weeks after Plaintiffs in the instant case filed their opposition to Facebook’s motion to dismiss
and nearly a month after Facebook filed its reply in support of its motion.
PLAINTIFF’S OPPOSITION TO MOTION TO
DISMISS FIRST AMENDED COMPLAINT
12
10-cv-2389-JW
1
no case law supporting Plaintiffs’ contention that personal information constitutes a form of
2
payment.
3
In Claridge, the plaintiff offered the exact same damages theory as Plaintiffs in this case
4
allege: that he paid for access to “free” online services with his personal information, and
5
RockYou breached its contract with him by failing to protect his personal information. Id. at 6.
6
In particular, the plaintiff in Claridge alleged that the defendant caused unauthorized third-
7
parties to gain access to personal information provided to the defendant in exchange for online
8
services. Id. at 2. He further alleged that his personal information had actual and concrete value,
9
and the unauthorized sharing of it caused him economic injury. Id. at 6. On this basis, the
10
plaintiff alleged that the defendant breached its contract with users in which it represented that it
11
would not to allow third-party access to personal information. Id. at 12-13.
12
The court in Claridge held that the plaintiff had adequately alleged concrete,
13
particularized harm for purposes of Article III standing and denied the defendant’s motion to
14
dismiss the breach of contract claim. In finding that the plaintiff had standing, the court
15
expressly embraced the damages theory at issue here:
16
17
18
19
20
21
22
On balance, the court declines to hold at this juncture that, as a
matter of law, plaintiff has failed to allege an injury in fact
sufficient to support Article III standing. Not only is there a
paucity of controlling authority regarding the legal sufficiency of
plaintiff’s damages theory, but the court also takes note that the
context in which plaintiff’s theory arises – i.e., the unauthorized
disclosure of personal information via the Internet – is itself
relatively new, and therefore more likely to raise issues of law not
yet settled in the courts. For that reason, and although the court has
doubts about plaintiff’s ultimate ability to prove his damages
theory in this case, the court finds plaintiff’s allegations of harm
sufficient at this stage to allege a generalized injury in fact.”
Id. at 7. Addressing the breach of contract claim directly, the court stated:
23
24
25
26
27
Moreover, the damage element inherent in contractual claims
parallels the type of concrete, nonspeculative injury that must be
pled in order to adequately allege injury in fact under Article III.
See, e.g., Buttram v. Owens-Corning Fiberglas Corp., 16 Cal. 4th
520, 531 n. 4 (1997)(“[T]o be actionable, harm must constitute
something more than nominal damages, speculative harm, or the
threat of future harm-not yet realized ...”).
28
PLAINTIFF’S OPPOSITION TO MOTION TO
DISMISS FIRST AMENDED COMPLAINT
13
10-cv-2389-JW
4
For the reasons already noted at the outset, therefore, the court
concludes that at the present pleading stage, plaintiff has
sufficiently alleged a general basis for harm by alleging that the
breach of his PII has caused him to lose some ascertainable but
unidentified “value” and/or property right inherent in the PII. As
such, the court declines to dismiss plaintiff’s breach claims on
grounds that plaintiff has failed to allege damages or harm as a
matter of law.
5
Id. at 13. Accordingly, Claridge provides the case law to support Plaintiffs’ damages allegations
6
that this Court sought in ruling on Defendant’s first motion to dismiss. Furthermore, as the court
7
in Claridge noted, the “paucity” of case law concerning personal information as payment is not
8
surprising given the context in which this issue arises is itself new. Id. Thus, the fact that little
9
case law exists should not be held against Plaintiffs; the facts and issues are new, but that does
1
2
3
10
11
not mean that Plaintiffs should be denied the right to make their case.
Facebook counters Plaintiffs’ contentions with a footnote arguing that disclosure of
12
personal information does not cause actionable damages sufficient to support a breach of
13
contract claim. (MTD at 23 n.15; citing In re JetBlue Airways Corp. Privacy Litig., 379 F. Supp.
14
2d 299, 326-27 (E.D.N.Y. 2005).) But the cases on which Facebook relies are readily
15
distinguishable from the instant matter as not one of them involved a contract where personal
16
information itself was the benefit of the bargain sought by the defendant.
17
In JetBlue, the defendant airline compiled personal information on each of its passengers,
18
which it then sold to a data mining company. JetBlue, 379 F.3d at 304. The plaintiff sued for
19
breach of JetBlue’s privacy policy. The court considered the importance of the “nature of the
20
contract asserted” and cited the Second Circuit’s admonition that “damages in contract actions
21
are limited to those that may reasonably be supposed to have been in the contemplation of both
22
parties, at the time they made the contract, as the probable result of the breach of it.” Id. at 327.
23
In dismissing the breach of contract claim, the court concluded that the parties’ contract
24
contemplated the exchange of U.S. currency for an airline ticket, not the economic value of the
25
plaintiff’s personal information that necessarily coincides with ticket purchasing and, therefore,
26
the disclosure of that personal information could not serve as the basis for the plaintiff’s
27
damages. Id. In contrast, Facebook’s contract with Plaintiffs contemplated the exchange of
28
PLAINTIFF’S OPPOSITION TO MOTION TO
DISMISS FIRST AMENDED COMPLAINT
14
10-cv-2389-JW
1
personal information for Facebook’s services. Because Plaintiffs’ personal information was the
2
primary (and indeed only) benefit Facebook bargained for, it is something of value and
3
constitutes good consideration. See Kremen v. Cohen, 337 F.3d 1024, 1029 (9th Cir. 2003)
4
(discussing whether personal information can constitute contract consideration). The damage
5
resulting from the unauthorized disclosure of Plaintiff’s personal information, which itself was
6
the sole consideration provided by Plaintiffs, should have reasonably been contemplated by
7
Facebook. Thus, JetBlue is not applicable in this instant matter.
8
9
JetBlue is distinguishable on an additional, equally important premise. The JetBlue court
wrote that “[t]here is likewise no support for the proposition that an individual passenger’s
10
personal information has or had any compensable value in the economy at large.” JetBlue, 337
11
F.3d at 327. But the JetBlue court, writing in 2005 before Facebook was a multi-billion dollar
12
entity, did not consider the arguments advanced here or the allegations in the instant FAC;
13
namely, that there is now a robust market for personal information available to Plaintiffs and all
14
consumers. (FAC ¶¶ 22-23.) Unlike the timeframe in which JetBlue arose, personal information
15
now has significant compensable value in the economy at large.
16
Dyer v. Nw. Airlines Corps., 334 F. Supp. 2d 1196, 1199-1200 (D.N.D. 2004), is also
17
distinguishable because the court ruled therein that the plaintiffs failed to allege any specific
18
facts supporting their claim of damages. Id. In contrast, Plaintiffs here have alleged in great
19
detail the specific basis of their claim of damages. While the Court may find the basis novel,
20
Plaintiffs nonetheless thoroughly allege factual support for their claim of damages, which is
21
more than sufficient to meet Plaintiffs’ burden at the pleading stage. Besides, as the Court stated
22
in Claridge, “the court also takes note that the context in which plaintiff’s theory arises – i.e., the
23
unauthorized disclosure of personal information via the Internet – is itself relatively new, and
24
therefore more likely to raise issues of law not yet settled in the courts.” Claridge at 7.
25
As thoroughly discussed herein, Plaintiffs have sufficiently alleged that they suffered
26
actual and appreciable harm as a result of Facebook’s breach. Furthermore, Plaintiffs’ damages
27
theory now finds legal support in a ruling on this identical issue in this district. In other words,
28
PLAINTIFF’S OPPOSITION TO MOTION TO
DISMISS FIRST AMENDED COMPLAINT
15
10-cv-2389-JW
1
Plaintiffs’ damages theory now finds support not only in economics and commerce, but in the
2
law, as well.
3
4
5
6
Therefore, Plaintiffs ask the Court to hold that Plaintiffs have sufficiently alleged actual
and appreciable damages, and deny Defendant’s motion to dismiss their breach of contract claim.
C.
Plaintiffs’ FAC Alleges Plaintiffs Relied on Defendant’s Alleged Fraudulent
Misrepresentations.
In dismissing without prejudice Plaintiffs’ causes of action under §§ 1572 & 1573 of the
7
California Civil Code, the Court ruled that Plaintiffs failed to allege “that they relied upon any
8
allegedly fraudulent misrepresentations by Defendant.” (Order at 15.) In the FAC, Plaintiffs
9
have explicitly alleged that they relied on Facebook’s false assertions that it would not share user
10
PII without consent in contracting with and using Facebook. (FAC ¶¶ 4, 5, 76, 126.)
11
Accordingly, having cured the lone pleading defect identified by the Court, Plaintiffs §§ 1572
12
and 1573 fraud claims should not be dismissed.
13
Facebook’s remaining challenges to Plaintiffs’ §§ 1572 and 1573 claims are without
14
merit. Facebook first argues that Plaintiffs fail to plead facts sounding in fraud with particularity
15
as required by Fed. R. Civ. P. 9(b). However, Plaintiffs have met their burden of pleading the
16
“who, what, when, where, and how” of the alleged fraud. Vess v. Ciba-Geigy Corp. USA, 317
17
F.3d 1097, 1106 (9th Cir. 2003). In particular, Plaintiffs specifically allege who committed the
18
fraud (Mark Zuckerberg, ¶ 31; Facebook’s Director of Corporate Communications, ¶ 30); what
19
the fraud consists of (Facebook’s Privacy Policy and public statements, ¶¶ 27-33); when the
20
fraud was committed (April 5, 2010, ¶ 30; February 16, 2009, ¶ 31); where the fraud was
21
committed (facebook.com, ¶¶ 27-33); and how it was committed (through official Facebook
22
public communications) (¶¶ 27-33). These allegations are more than sufficient to put Facebook
23
“on notice” of their alleged fraudulent conduct. See Concha v. London, 62 F.3d 1493, 1502 (9th
24
Cir. 1995) (finding that the purpose of Rule 9(b) “is to ensure that defendants accused of the
25
conduct specified have adequate notice of what they are alleged to have done, so that they may
26
defend against the accusations”).
27
28
PLAINTIFF’S OPPOSITION TO MOTION TO
DISMISS FIRST AMENDED COMPLAINT
16
10-cv-2389-JW
1
Facebook’s additional argument that Plaintiffs fail to specifically allege “when” they
2
clicked on advertisements is irrelevant to §§ 1572 and 1573. Facebook’s attempt to distort the
3
pleading requirements of allegations sounding in fraud misses the point. Rule 9(b) requires that
4
Plaintiffs specifically identify “when” the fraud occurred, not “when” Plaintiffs acted on the
5
fraud. See Vess, 317 F.3d at 1106. And as discussed above, Plaintiff alleges that Facebook
6
committed the fraud on February 16, 2009 and April 5, 2010, as well as all times that its Privacy
7
Policy was available on facebook.com.
8
9
Furthermore, Plaintiffs explicitly detail what was false or misleading about Facebook’s
statements, and why it was false. Id. Namely, that Facebook promised it would not share
10
Plaintiffs’ personal information with third-parties but did so anyway. (FAC ¶¶ 27-34.)
11
Therefore, Plaintiffs have met and surpassed their burden of pleading fraud, and the Court should
12
deny Facebook’s motion to dismiss.
13
D.
14
Defendant Introduced Computer Instructions that Usurped the Normal
Operation of Plaintiffs’ Computers in Violation of the CCCL.
The Court granted Plaintiffs leave to re-plead their cause of action under Cal. Penal Code
15
§ 502(c)(8) with specific “facts suggesting that Defendant introduced computer instructions
16
designed to ‘usurp the normal operation’ of a computer, computer system or computer network.”
17
(Order at 13 n.11.) Plaintiffs’ FAC fully addresses the Court’s concerns with detailed allegations
18
and facts supporting its § 502(c)(8) claims. As a result, Plaintiffs request that the Court deny
19
Defendant’s motion to dismiss this cause of action.
20
Facebook’s conduct, as alleged in detail in Plaintiffs’ FAC, exemplifies the exact conduct
21
proscribed by § 502(c)(8), which applies to any person who “knowingly introduces any computer
22
contaminant into any computer, computer system, or computer network.” Cal. Penal Code
23
§ 502(c)(8). The term “computer contaminant” is defined as “any set of computer instructions
24
that are designed to . . . transmit information within a computer, computer system, or computer
25
network without the intent or permission of the owner of the information.” Cal. Penal Code
26
§ 502(b)(10).
27
28
PLAINTIFF’S OPPOSITION TO MOTION TO
DISMISS FIRST AMENDED COMPLAINT
17
10-cv-2389-JW
1
As alleged, Facebook knowingly introduced a computer contaminant into Plaintiffs’
2
computers by instructing Plaintiffs’ computers and web browsers to transmit Plaintiffs’ personal
3
information without Plaintiffs’ permission. (FAC ¶¶ 3, 33-44, 104.) As these detailed
4
allegations and facts demonstrate, Facebook was in full control over whether the web browsers
5
on Plaintiffs’ computers transmitted Plaintiffs’ personal information. Because of Facebook’s
6
explicit computer instructions controlling the handling and content of referrer headers, Defendant
7
usurped the normal operation of Plaintiffs’ computers, which would not have transmitted
8
personal information via referrer headers if not for Facebook’s explicit computer instructions to
9
do so. (FAC ¶¶ 42, 104.)
10
Accordingly, Plaintiffs request that the Court dismiss Facebook’s motion to deny
11
Plaintiffs’ Computer Crime Law cause of action.
12
IV.
13
CONCLUSION
In their FAC, Plaintiffs have fixed the pleading defects identified by the Court.
14
Furthermore, Defendant’s MTD does not offer any new arguments that warrant dismissal of
15
Plaintiffs’ remaining claims.
16
As discussed herein, Facebook may not avail itself of the “intended recipient” exception
17
to the SCA’s mandate not to disclose customer communications sent to Facebook because the
18
FAC alleges it was acting as an RCS, not an ECS, when it disclosed Plaintiffs’ communications.
19
Accordingly, Facebook is liable under the SCA for its admitted practice of divulging Plaintiffs’
20
communications without consent.
21
Additionally, Plaintiffs cured the defects in their Breach of Contract, statutory fraud, and
22
Computer Crime Law claims. First, Plaintiffs’ FAC contains specific and thorough allegations
23
of actual and appreciable injuries. Moreover, Plaintiffs are now able to cite to case law from this
24
District that adopts Plaintiffs’ damage theory. Second, Plaintiffs’ FAC contains explicit
25
allegations that Plaintiffs relied on Facebook’s fraudulent misrepresentations, thus curing the
26
Court’s lone identified concern with Plaintiffs’ §§ 1572 and 1573 claims. Finally, Plaintiffs’
27
FAC demonstrates exactly how Facebook introduced a computer contaminant into Plaintiffs’
28
PLAINTIFF’S OPPOSITION TO MOTION TO
DISMISS FIRST AMENDED COMPLAINT
18
10-cv-2389-JW
1
computers that usurped the normal operation of Plaintiffs’ computers and thereby transmitted
2
personal data in violation of Cal. Civ. Code § 502(c)(8).
3
In the end, Plaintiffs have fixed every pleading defect identified by the Court and refuted
4
all of Facebook’s supposed bases for dismissal. As a result, Plaintiffs respectfully request that
5
the Court deny Facebook’s motion to dismiss Plaintiffs’ FAC.
6
7
Dated: August 11, 2011
Respectfully submitted,
NASSIRI & JUNG LLP
8
_/s/ Kassra P. Nassiri_____
Kassra P. Nassiri
Attorneys for Plaintiffs and the Putative Class
9
10
11
12
Dated: August 11, 2011
Respectfully submitted,
EDELSON MCGUIRE, LLP
13
/s/ Sean Reis _
Sean Reis
Attorneys for Plaintiffs and the Putative Class
14
15
16
Dated: August 11, 2011
Respectfully submitted,
ASCHENBRENER LAW, P.C.
17
_/s/ Michael Aschenbrener
Michael Aschenbrener
Attorneys for plaintiffs and the Putative Class
18
19
20
21
22
23
24
25
26
27
28
PLAINTIFF’S OPPOSITION TO MOTION TO
DISMISS FIRST AMENDED COMPLAINT
19
10-cv-2389-JW
Disclaimer: Justia Dockets & Filings provides public litigation records from the federal appellate and district courts. These filings and docket sheets should not be considered findings of fact or liability, nor do they necessarily reflect the view of Justia.
Why Is My Information Online?