In re Google, Inc. Privacy Policy Litigation
Filing
67
ORDER GRANTING MOTION TO DISMISS by Magistrate Judge Paul Singh Grewal granting 53 Motion to Dismiss.(psglc3S, COURT STAFF) (Filed on 12/3/2013)
1
2
3
4
5
6
7
8
UNITED STATES DISTRICT COURT
9
NORTHERN DISTRICT OF CALIFORNIA
10
United States District Court
For the Northern District of California
SAN JOSE DIVISION
11
Case No. C-12-01382-PSG
12
13
IN RE GOOGLE, INC. PRIVACY POLICY
LITIGATION
14
15
ORDER GRANTING MOTION TO
DISMISS
(Re: Docket No. 53, 57, 59)
16
After this court’s order dismissing their consolidated complaint on standing grounds with
17
18
leave to amend, 1 Plaintiffs Robert Demars, Pedro Marti, David Nisenbaum, Lorena Barrios,
19
Nicholas Anderson, Matthew Villani and Scott McCullough (“Plaintiffs”) filed an amended
20
complaint. In their amended complaint, Plaintiffs again challenge the introduction of a new, unified
21
privacy policy by Defendant Google, Inc. (“Google”) permitting the commingling of user data
22
23
across different Google products. Plaintiffs also challenge Google’s disclosure of this data to third
24
parties, including developers of applications for the Google Play market and advertising partners.
25
Google again moves to dismiss, arguing that Plaintiffs still lack standing because they have not
26
sufficiently alleged any injury-in-fact traceable to Google. Google also argues that Plaintiffs have
27
28
1
See Docket No. 45.
ORDER GRANTING MOTION TO DISMISS -1Case No. 5:12-cv-01382-PSG
1
failed to state any claim upon which relief may be granted. As detailed below, the court agrees with
2
Google that the amended complaint is defective and therefore must be dismissed, but only in part
3
and with further leave to amend.
4
I. BACKGROUND 2
5
By now, most people know who Google is and what Google does. Google serves billions of
6
7
online users in this country and around the world. What started as simply a search engine has
8
expanded to many other products such as YouTube and Gmail. Google offers these products and
9
most others without charge. With little or no revenue from its users, Google still manages to turn a
United States District Court
For the Northern District of California
10
11
healthy profit by selling advertisements within its products that rely in substantial part on users’
personal identification information (“PII”). As some before have observed, in this model, the users
12
13
are the real product.
Before March 1, 2012, Google maintained separate privacy policies for each of its products,
14
15
each of which confirmed that Google used a user’s PII to provide that particular product. 3 These
16
policies also confirmed that Google would not use the PII for any other purpose without the user’s
17
explicit consent. As Google put it, “[w]hen you sign up for a particular service that requires
18
registration, we ask you to provide personal information. If we use this information in a manner
19
different than the purpose for which it was collected, then we will ask for your consent prior to such
20
21
22
23
24
25
26
27
use.” 4
2
Unless otherwise noted, the following allegations are taken from the amended consolidated
complaint, see Docket No. 50. For the reasons stated in the court’s previous order, the court grants
Google’s request for judicial notice of the same documents. See Docket No. 45.
3
For example, in a legal notice issued to Gmail users in 2011, Google stated, “We will not use any
of your content [defined to include “text, data, information, images, photographs, music, sound,
video, or other material.”] for any purpose except to provide you with the service.” Docket No. 50 ¶
84. Google has also pledged that “Gmail stores processes, and maintains your messages, contact
lists, and other data related to your account in order to provide the service to you.” Id. ¶ 85.
4
Id. ¶ 83.
28
ORDER GRANTING MOTION TO DISMISS -2Case No. 5:12-cv-01382-PSG
On March 1, 2012, Google announced a new policy. The majority of its separate privacy
1
2
policies were eliminated in favor of a single, universal privacy policy that spells out that Google
3
may combine a user’s PII across multiple Google products. Google explained the basis for the
4
change in policy as follows:
5
Our new Privacy Policy makes clear that, if you’re signed in, we may
combine information that you’ve provided from one service with
information from other services. In short, we’ll treat you as a single user
across all our products, which will mean simpler, more intuitive Google
experience. 5
6
7
8
9
In other words, through the new policy, Google is explicit that it may combine PII collected from a
United States District Court
For the Northern District of California
10
user’s Gmail or YouTube account, including the content of that account, with PII collected from
11
that user’s Google search queries, along with the user’s activities on other Google products, such as
12
Picasa, Maps, Docs, and Reader. This PII includes:
13
•
first and last name;
•
home or other physical address (including street name and city);
•
current, physical location, a user’s email address, and other online contact
information (such as the identifier or screen name);
•
IP address;
•
telephone number (both home and mobile numbers);
•
list of contacts;
21
•
search history from Google’s search engine;
22
•
web surfing history from cookies placed on the computer; and
23
•
posts on Google+.
14
15
16
17
18
19
20
24
Plaintiffs contend that Google’s new policy violates its prior policies because the new policy
25
no longer allows users to keep information gathered from one Google product separate from
26
27
28
information gathered from other Google products. Plaintiffs further contend that Google’s new
5
Id. ¶ 7.
ORDER GRANTING MOTION TO DISMISS -3Case No. 5:12-cv-01382-PSG
1
policy violates users’ privacy rights by allowing Google to take information from a user’s Gmail
2
account, for which users may have one expectation of privacy, for use in a different context, such as
3
to personalize Google search engine results, or to personalize advertisements shown while a user is
4
surfing the internet, products for which a user may have an entirely different expectation of privacy.
5
In addition to commingling Plaintiffs’ PII across the various Google products, Plaintiff contend
6
7
8
Google has shared Plaintiffs’ PII with third-party entities who have partnered with Google in order
to develop applications for the Google Play app store to help it place targeted advertisements. 6
Plaintiffs bring this nationwide class action against Google on behalf of all persons and
9
United States District Court
For the Northern District of California
10
entities in the United States who acquired a Google account between August 19, 2004, and February
11
29, 2012, and maintained such an account until, on, or after March 1, 2012. Plaintiffs also bring this
12
action on behalf of a subclass of persons and entities in the United States who acquired a device
13
powered by Android between August 19, 2004 and February 29, 2012, continued to own that device
14
on or after March 1, 2012, and switched to a non-Android device on or after March 1, 2012 (the
15
16
“Android Device Switch Subclass”). 7 Plaintiffs also seek to represent a second subclass of persons
17
and entities in the U.S. who acquired a device powered by Android between August 19, 2004 and
18
the present, and downloaded at least one Android application through Google Play (the “Android
19
App Disclosure Subclass”). 8
20
21
Plaintiffs allege that they each acquired a Gmail account before the March 1, 2012
announcement of the new policy and continued to use it after the new policy took effect. They each
22
further allege they purchased an Android phone before March 1 and that after implementing the new
23
24
policy Google aggregated their personal information without consent or compensation. Mr. Marti
25
6
See id., ¶¶ 4, 10, 22, 58, 120, 133, 183, 346.
26
7
See id. 50, ¶¶ 36-37.
27
8
See id.
28
ORDER GRANTING MOTION TO DISMISS -4Case No. 5:12-cv-01382-PSG
1
further alleges Google used his likeness in display advertisements without authorization. Mr.
2
Nisenbaum further alleges that after March 1, for privacy reasons, he replaced his Android phone
3
for privacy reasons with an iPhone. The other plaintiffs allege use of various Android-powered
4
phones and that they downloaded various Android Applications (“apps”) from the Google Play
5
store. Based on these allegations, Plaintiffs bring claims against Google for statutory and common
6
law misappropriation of likeness, violation of California’s Unfair Competition Law (“UCL”),
7
8
9
United States District Court
For the Northern District of California
10
breach of contract, common law intrusion upon seclusion, violation of California’s User Legal
Remedies Act (“CLRA”), violation of the Wiretap Act, and violation of the Stored Communications
Act (“SCA”).
11
II. LEGAL STANDARDS
12
To satisfy Article III, a plaintiff “must show that (1) it has suffered an ‘injury in fact’ that is
13
14
(a) concrete and particularized and (b) actual or imminent, not conjectural or hypothetical; (2) the
15
injury is fairly traceable to the challenged action of the defendant; and (3) it is likely, as opposed to
16
merely speculative, that the injury will be redressed by a favorable decision.” 9 A suit brought by a
17
plaintiff without Article III standing is not a “case or controversy,” and an Article III court therefore
18
lacks subject matter jurisdiction over the suit. 10 In that event, the suit should be dismissed under
19
Fed. R. Civ. Pro. 12(b)(1). 11 The injury required by Article III may exist by virtue of “statutes
20
21
22
creating legal rights, the invasion of which creates standing.” 12 In such cases, the “standing question
. . . is whether the constitutional or standing provision on which the claim rests properly can be
23
24
9
25
10
26
See Friends of the Earth, Inc. v. Laidlaw Envtl. Sys. (TOC), Inc., 528 U.S. 167, 180-181 (2000).
Steel Co. v. Citizens for a Better Environment, 523 U.S. 83, 101, 118 S.Ct. 1003, 140 L.Ed.2d 210
(1998).
11
27
See Steel Co., 523 U.S. at 109-110; White v. Lee, 227 F.3d 1214, 1242 (9th Cir. 2000).
12
28
See Edwards v. First Am. Corp., 610 F.3d 514, 517 (9th Cir. 2010) (quoting Warth v. Seldin, 422
U.S. 490, 500, 95 S.Ct. 2197, 45 L.Ed.2d 343 (1975)).
ORDER GRANTING MOTION TO DISMISS -5Case No. 5:12-cv-01382-PSG
1
understood as granting persons in the plaintiff’s position a right to judicial relief.” 13 At all times the
2
threshold question of standing “is distinct from the merits of [a] claim” and does not require
3
“analysis of the merits.” 14 The Supreme Court also has instructed that the “standing inquiry
4
requires careful judicial examination of a complaint’s allegations to ascertain whether the particular
5
plaintiff is entitled to an adjudication of the particular claims asserted.” 15
6
7
8
9
A complaint must state a “short plain statement of the claim showing that the pleader is
entitled to relief.” 16 While “detailed factual allegations” are not required, a complaint must include
more than an unadorned, the defendant-unlawfully-harmed-me accusation.” 17 In other words, a
United States District Court
For the Northern District of California
10
complaint must have sufficient factual allegations to “state a claim to relief that is plausible on its
11
face.” 18 A claim is facially plausible “when the pleaded factual content allows the court to draw the
12
reasonable inference that the defendant is liable for the misconduct alleged.” 19 Accordingly, under
13
14
Fed. R. Civ. P. 12(b)(6), which tests the legal sufficiency of the claims alleged in the complaint,
“[d]ismissal can be based on the lack of cognizable legal theory or the absence of sufficient facts
15
16
alleged under a cognizable legal theory.” 20
When evaluating a Rule 12(b)(6) motion, the court must accept all material allegations in the
17
18
19
20
complaint as true and construe them in the light most favorable to the non-moving party. 21 Review
13
See id. (quoting Warth, 422 U.S. at 500).
14
Maya v. Centex Corp., 658 F.3d 1060, 1068 (9th Cir. 2011).
21
15
22
DaimlerChrysler, 547 U.S. at 352 (quoting Allen v. Wright, 468 U.S. 737, 752 (1984)); see also
Chandler v. State Farm Mut. Auto. Ins. Co., 598 F. 3d 1115, 1121-22 (9th Cir. 2010).
23
16
Fed. R. Civ. P. 8 (a)(2).
24
17
Ashcroft v. Iqbal, 129 S.Ct. 1937, 1949 (2009).
25
18
Id. at 1940 (quoting Bell Atlantic Corp. v. Twombly, 550 U.S. 544, 570 (2007)).
26
19
Id.
27
20
Balistreri v. Pacifica Police Dep’t., 901 F.2d 696, 699 (9th Cir. 1990).
28
21
See Metzler Inv. GMBH v. Corinthian Colls., Inc., 540 F.3d 1049, 1061 (9th Cir. 2008).
ORDER GRANTING MOTION TO DISMISS -6Case No. 5:12-cv-01382-PSG
1
of a motion to dismiss is limited to the face of the complaint, materials incorporated into the
2
complaint by reference, and matters of which the court may take judicial notice. 22 The court is not
3
required to accept “legal conclusions cast in the form of factual allegations if those conclusions
4
cannot reasonably be drawn from the facts alleged.” 23 Further, the court need not accept as true
5
6
allegations that contradict matters that are either subject to judicial notice or attached as exhibits to
the complaint. 24
7
Claims sounding in fraud or mistake must comply with the heightened pleading
8
9
requirements of Fed. R. Civ. P. 9(b) by pleading with particularity the circumstances surrounding
United States District Court
For the Northern District of California
10
the fraud or mistake. Rule 9(b) applies to the state claims at issue here as they involve allegations
11
that users were misled. The allegations must be “specific enough to give defendants notice of the
12
particular misconduct which is alleged to constitute the fraud charged so that they can defend
13
against the charge.” 25 This includes “the who, what, when, where, and how of the misconduct
14
charged.” 26
15
“Dismissal with prejudice and without leave to amend is not appropriate unless it is clear
16
17
that the complaint could not be saved by amendment.” 27 A dismissal with prejudice, except one for
18
lack of jurisdiction, improper venue, or failure to join a party operates as an adjudication on the
19
merits. 28 Dismissal without leave to amend, however, may be granted for reasons of undue delay,
20
21
22
22
See id. at 1061.
23
23
Clegg v. Cult Awareness Network, 18 F.3d 752, 754-55 (9th Cir. 1994).
24
24
See In re Gilead Sciences Securities Litigation, 536 F.3d 1049, 1055 (9th Cir. 2008).
25
25
Semegen v. Weidner, 780 F.2d 727, 731 (9th Cir. 1985).
26
26
Vess v. Ciba-Geigy Corp. USA, 317 F.3d 1097, 1106 (9th Cir. 2003).
27
27
Eminence Capital, LLC. v. Aspeon, Inc., 316 F.3d 1048, 1052 (9th Cir. 2003).
28
28
See Fed. R. Civ. P. 41(b).
ORDER GRANTING MOTION TO DISMISS -7Case No. 5:12-cv-01382-PSG
1
2
bad faith, repeated failure to cure deficiencies by previous amendments, futility of the amendment,
and prejudice. 29
III. DISCUSSION
3
4
A. Article III Standing
5
Once again, the issues of standing and in particular injury-in-fact are front-and-center in
6
Google’s Rule 12 challenge to the operative complaint. 30 And so once again, standing is where the
7
8
9
court begins. Before considering the standing question, however, the court cannot help but make a
few observations. First, despite generating little or no discussion in most other cases, the issue of
United States District Court
For the Northern District of California
10
injury-in-fact has become standard fare in cases involving data privacy. In fact, the court is hard-
11
pressed to find even one recent data privacy case, at least in this district, in which injury-in-fact has
12
not been challenged. 31 Second, in this district’s recent case law on data privacy claims, injury-in-
13
14
fact has proven to be a significant barrier to entry. And so even though injury-in-fact may not
generally be Mount Everest, as then-Judge Alito observed, 32 in data privacy cases in the Northern
15
16
District of California, the doctrine might still reasonably be described as Kilimanjaro.
In any event, this time around, Plaintiffs aim to establish their standing with six theories of
17
18
injury that can fairly be grouped into three categories: (1) commingling of Plaintiffs’ PII, (2) direct
19
20
21
22
23
24
25
29
Foman v. Davis, 371 U.S. 178, 182 (1962); Abagninin v. AMVAC Chem. Corp., 545 F.3d 733,
742 (9th Cir. 2008).
30
See White v. Lee, 227 F.3d 1214, 1242 (9th Cir. 2000) (“A challenge to standing under Article III
‘pertain[s] to a federal court’s subject matter jurisdiction’ and is therefore ‘properly raised in a
motion under Federal Rule of Civil Procedure 12(b)(1).’”).
31
26
See, e.g., In re iPhone Application Litig., Case No. 5:11-md-02250-LHK, 2013 WL 6212591
(N.D. Cal. Nov. 25, 2013); Pirozzi v. Apple Inc., 913 F. Supp. 2d 840, 847 (N.D. Cal. 2012).
27
32
See Danvers Motor Co., Inc. v. Ford Motor Co., 432 F.3d 286, 294 (3d Cir. 2005).
28
ORDER GRANTING MOTION TO DISMISS -8Case No. 5:12-cv-01382-PSG
1
2
economic injury, and (3) violations of statutorily created rights. 33
The court considers each
category in turn.
3
1. Personal Identification Information
4
Plaintiffs claim that when Google combined information that Plaintiffs provided to discrete
5
6
Google products, without Plaintiffs’ consent, Google injured them in two different ways. 34 First,
7
Google did not compensate them for the substantial economic value of the combined information. 35
8
Second, Google’s unauthorized co,mingling of their information, especially their likeness, was a
9
breach of contract. Neither alleged harm, however, is sufficient to establish an injury-in-fact.
United States District Court
For the Northern District of California
10
11
As the court previously explained, injury-in-fact in this context requires more than an
allegation that a defendant profited from a plaintiff’s personal identification information. Rather, a
12
13
14
plaintiff must allege how the defendant’s use of the information deprived the plaintiff of the
information’s economic value. 36 Put another way, a plaintiff must do more than point to the dollars
15
in a defendant’s pocket; he must sufficient allege that in the process he lost dollars of his own.
16
Plaintiffs’ allegations certainly plead that Google made money using information about them for
17
which they were provided no compensation beyond free access to Google’s services. But an
18
19
20
21
22
33
See Docket No. 57 at 4-9; Docket No. 50 ¶ 129-135.
23
34
See Docket No. 50 ¶¶ 132, 169-178.
24
35
25
26
27
28
In 2011, Google’s revenues were $37.91 billion, approximately 95% of which ($36.53 billion)
came from advertising. In 2012, Google’s revenues increased to $46.04 billion, approximately 95%
of which ($43.69 billion) came from advertising. See Docket No. 50 ¶ 3.
36
See Docket No. 45 at 9-10 (citing In re iPhone Application Litig., Case No. 5:11-md-02250LHK, 2011 WL 4403963 (N.D. Cal. Sept. 20. 2011), Low v. LinkedIn Corp., Case No. 5:11-CV01468-LHK, 2011 WL 5509848 (N.D. Cal. Nov. 11, 2011), and LaCourt v. Specific Media, Inc.,
Case No. SACV 10-1256-GW (JCGX), 2011 WL 1661532 (C.D. Cal. Apr. 28, 2011)).
ORDER GRANTING MOTION TO DISMISS -9Case No. 5:12-cv-01382-PSG
1
2
allegation that Google profited is not enough equivalent to an allegation that such profiteering
deprived Plaintiffs’ of economic value from that same information. 37
As before, the court finds the reasoning in LaCourt v. Specific Media instructive. There the
3
4
plaintiffs alleged that the defendant installed cookies to track users’ internet browsing to build
5
behavior profiles to better target advertisements. 38 The court found the tracked users lacked
6
standing because, among other reasons, they did not “explain how they were ‘deprived’ of the
7
8
9
economic value of their personal information simply because their unspecified personal information
was purportedly collected by a third party.” 39 Other courts have agreed. 40
Addressing a set of facts similar to the present case, in In re Google Android User Privacy
United States District Court
For the Northern District of California
10
11
Litig., the court found no Article III standing where plaintiffs alleged that Google’s unauthorized
12
use of PII reduced its value to them because the plaintiffs failed to tie Google’s use to their alleged
13
loss, such as being foreclosed from capitalizing on its value. 41 Here, Plaintiffs similarly have not
14
alleged how Google’s use of PII in any way deprives them of the ability to profit from the same
15
16
information.
Plaintiffs rely on Goodman v. HTC to support their argument that Google’s commingling of
17
18
19
20
21
information did inflict an injury-in-fact sufficient for standing. 42 However, in Goodman, the court
37
See generally, Del Vecchio v. Amazon.com Inc., Case No. 5:11-cv-0366-RSL, 2011 WL 6325910,
*3 (W.D. Wash. Dec. 1, 2011) (“While it may be theoretically possible that Plaintiffs’ information
could lose value as a result of its collection and use by Defendant, Plaintiffs do not plead any facts
from which the Court can reasonably infer that such devaluation occurred in this case.”).
22
38
See Specific Media, Inc., 2011 WL 1661532, *4-5.
23
39
Id. at *5.
40
See, e.g., Low v. LinkedIn Corp., 2011 WL 5509848 at *4-5; Goodman, 2012 WL 2412070 at *7.
24
25
26
27
28
41
See In re Google Android User Privacy Litig., Case No. 5:11-md-02264-JSW, 2013 WL
1283236, at *2, 4 (“Plaintiffs also do not allege they attempted to sell their personal information,
that they would do so in the future, or that they were foreclosed from entering into a value for value
transaction relating to their PII, as a result of the Google Defendants’ conduct.”).
42
See Docket No. 57 at 8.
ORDER GRANTING MOTION TO DISMISS -10Case No. 5:12-cv-01382-PSG
1
held that “misappropriation of personally identifiable information does not allege injury in fact,
2
absent a separate statutory or constitutional right.” 43 The court thus explicitly rejected Article III
3
standing under the theory Plaintiffs urge here. 44 The court separately addresses the statutory theory
4
below.
5
6
Finally, although Plaintiffs assert that the breach of contract arising from Google’s
unauthorized commingling activities offers a separate basis for injury-in-fact, they still fail to
7
8
9
articulate a sufficient contract injury. Nominal damages are not available in California for breach of
contract, 45 and the amended complaint does not allege any other injury based on the breach. In
United States District Court
For the Northern District of California
10
their opposition, Plaintiffs assert that “one of the most egregious ways in which Google breaches its
11
contracts … is by misusing Plaintiffs’ information to misappropriate their likeness.” 46 But even if
12
this point in opposition were presented in the complaint itself, which it is not, Plaintiffs still cite no
13
case law holding that a contract breach by itself constitutes an injury in fact. This is insufficient.
14
2. Direct Economic Injuries
15
16
The court next considers whether Plaintiffs have alleged direct economic injuries sufficient
17
to establish injury-in-fact. As the Supreme Court has noted, “palpable economic injuries have long
18
been recognized as sufficient to lay the basis for standing.” 47 Plaintiffs each allege that they were
19
injured when their Android devices sent their respective names, email addresses, and locations to
20
21
the developer of each app they purchased or downloaded because they had to pay for the battery and
22
23
43
Goodman, 2012 WL 2412070, at *5 (emphasis added).
24
44
See id. at *7-8.
25
45
26
See Ruiz v. Gap, Inc., 380 F. App’x 689, 692 (9th Cir. 2010) (quoting Aguilera v. Pirelli
Armstrong Tire Corp., 223 F.3d 1010, 1015 (9th Cir. 2000)).
27
46
See Docket No. 57 at 8.
28
47
Sierra Club v. Morton, 405 U.S. 727, 733 (1972).
ORDER GRANTING MOTION TO DISMISS -11Case No. 5:12-cv-01382-PSG
1
bandwidth consumed by the unauthorized transmissions. 48 Mr. Nisenbaum, representing the
2
Android Device Switch Subclass, claims further injury in that he overpaid for his Android phone in
3
2010 because he would not have bought the phone had Google disclosed its intention to use his
4
information as alleged in the complaint. 49
5
6
Mr. Nisenbaum also claims that he replaced his Android
phone with an iPhone in 2012 as a result of Google’s policy change, causing him further economic
injury. 50
7
The Court will consider each of these direct economic injury theories in turn to determine if
8
9
United States District Court
For the Northern District of California
10
they articulate “something more” than pure economic harm to support subject-matter jurisdiction
under Rule 12(b)(1). 51
11
12
13
14
With respect to Plaintiffs’ injury claims based on battery and bandwidth consumption, courts
have found that the unauthorized use of system resources can suffice to establish a cognizable
injury. For example, in Goodman, the court found standing based upon battery discharge where the
application at issue sent fine location data every three hours or whenever the device’s screen was
15
16
refreshed. 52 Similarly, in In re iPhone Application Litigation, the court found standing where the
17
device systematically collected and transmitted location information. 53 In In re Google Android
18
User Privacy Litigation, the plaintiffs did not clearly allege how frequently Google collected
19
geolocation data from a phone, but did allege that collecting relocation data was particularly battery
20
21
22
48
See Docket No. 50 ¶¶ 131, 156-168.
23
49
See id. ¶¶ 130, 146-155.
24
50
See id.
25
51
See In re LinkedIn User Privacy Litig., 932 F. Supp. 2d 1089, 1094 (N.D. Cal. 2013).
52
Goodman, 2012 WL 2412070.
26
27
28
53
In re iPhone Application Litigation, 844 F. Supp. 2d 1040, 1054-56 (N.D. Cal. 2012)
(“iPhone I”).
ORDER GRANTING MOTION TO DISMISS -12Case No. 5:12-cv-01382-PSG
1
intensive, that “their batteries discharged more quickly[,] and that their services were interrupted.” 54
2
This latter allegation was deemed sufficient to establish standing. At the same time, in Hernandez
3
v. Path, Inc., the court found that any harm from the use of phone resources in an app’s uploading a
4
user’s address book a single time upon first running the app was de minimis and thus insufficient to
5
establish injury. 55
6
Plaintiffs’ allegations here are closer to Goodman, iPhone I and Android than Hernandez.
7
8
9
Like Hernandez, Plaintiffs’ alleged unauthorized battery consumption only happened infrequently,
when a plaintiff first downloaded an app. But in Hernandez the allegedly unauthorized upload only
United States District Court
For the Northern District of California
10
happened once, when a plaintiff downloaded the Path app. Here, it happens each time a user
11
downloads any app. The plaintiff who downloaded the most apps, according to the amended
12
complaint, did so at least 27 times. 56 In addition, like the plaintiffs in Goodman and Android,
13
14
Plaintiffs here specifically allege a greater discharge of battery power as a result of unauthorized
conduct and as in iPhone I the discharge is systemic rather than episodic. This is sufficient to
15
16
establish more than a de minimis injury.
With respect to Mr. Nisenbaum’s further allegations of injury, they, too, support standing for
17
18
purposes of Article III.
19
First, the allegation that Mr. Nisenbaum bought a new phone after the policy change and that
20
his motivation for choosing an iPhone over the Android device was substantially for privacy
21
reasons, 57 establishes that he was injured by making the purchase. 58 To be sure, users frequently
22
23
24
54
In re Google Android User Privacy Litig., 11-MD-02264 JSW, 2013 WL 1283236, at *2, 4 (N.D.
Cal. Mar. 26, 2013) (“Android”).
55
25
26
27
28
See Hernandez v. Path, Inc., Case No. 12-CV-01515 YGR, 2012 WL 5194120 (N.D. Cal. Oct.
19, 2012) (depletion of two to three seconds of battery capacity is de minimis); Caldwell v.
Caldwell, 545 F.3d 1126, 1134 (9th Cir. 2008) (concurrence) (de minimis injury does not support
standing). See Hernandez, 2012 WL 5194120, *1, 2, n.2 (N.D. Cal. Oct. 19, 2012).
56
See Docket No. 60 ¶ 163.
57
See id. at ¶ 130.
ORDER GRANTING MOTION TO DISMISS -13Case No. 5:12-cv-01382-PSG
1
replace old phones for all kinds of reasons beyond privacy. For example, from the complaint, it
2
appears Mr. Nisenbaum had his Android device for approximately two years, the length of most
3
phone contracts that often include a discount for bundled phones, before purchasing a new phone.
4
But Mr. Nisenbaum specifically alleges that but for the policy switch he would not have otherwise
5
have bought a new phone. 59 The alleged injury is fairly traceable to Google based on Mr.
6
Nisenbaum’s allegation that he relied on Google’s previous policies in purchasing the Android
7
8
phone in the first place.
Second, Mr. Nisembaum’s allegations regarding overpayment establish injury. In Pirozzi v.
9
United States District Court
For the Northern District of California
10
Apple, the court explained that Article III standing under an overpayment theory may be supported
11
by “allegations [by plaintiffs] that, when they purchased their [] devices, they relied upon
12
representations regarding privacy protection, which caused them to pay more than they would have
13
for their devices.” 60 Similarly, in Goodman, the court found standing for overpayment of a
14
smartphone where plaintiffs alleged they would have “paid less for the phones had [d]efendant’s not
15
16
misrepresented the relevant features.” 61 The court held that a “general averment of quality, alleged
17
to be false, was sufficient to constitute an alleged injury in the form of overpayment.” 62 The
18
allegations here are equally sufficient.
19
20
21
58
22
See Docket No. 50 ¶ 19 (“Nisenbaum owned and used an Android device before and after March
1, 2012, but subsequently ceased using the device and acquired and Apple device in its place in
substantial part because of Google’s invasive practices.”).
23
59
24
60
25
26
See id. ¶¶ 19, 150-51.
See, e.g., Pirozzi v. Apple Inc., 913 F. Supp. 2d 840, 846-47 (N.D. Cal. 2012) (“Overpaying for
goods or purchasing goods a person otherwise would not have purchased based upon alleged
misrepresentations by the manufacturer would satisfy the injury-in-fact and causation requirements
for Article III standing.”).
27
61
Goodman, 2012 WL 2412070, at *5.
28
62
Id. at *6.
ORDER GRANTING MOTION TO DISMISS -14Case No. 5:12-cv-01382-PSG
Google highlights that Mr. Nisenbaum has not alleged that he bought his phone from Google
1
2
or that Google manufactured the phone. But the complaint is clear that Mr. Nisenbaum’s phone ran
3
on Android, Google’s open-source operating system, and that in order to access the Google Play
4
marketplace included in Android, Mr. Nisenbaum had to create a Google account. Under such
5
circumstances, the alleged harm of overpayment to a third party is fairly traceable to Google. 63
6
3. Violation of Statutory Rights
7
The final category of Plaintiffs’ injury-in-fact theories concerns statutory rights. The Ninth
8
9
United States District Court
For the Northern District of California
10
11
Circuit has made it clear that Article III standing can also be established by virtue of “statutes
creating legal rights, the invasion of which creates standing.” 64 Courts have found that both state
and federal statutes can create these legal rights. 65 To decide if a statute created such a legal right, a
12
13
14
court must determine whether the “standing provision on which the claim rests properly can be
understood as granting persons in the plaintiff’s position a right to judicial relief.” 66 Put another
15
way, plaintiffs have standing where they have a “direct stake in the controversy.” 67 Although
16
Article III always requires an injury, the alleged violation of a statutory right that does not otherwise
17
require a showing of damages is an injury sufficient to establish Article III standing. 68 For example,
18
19
63
20
21
22
See Maya v. Centex Corp., 658 F.3d 1060, 1073 (9th Cir. 2011).
64
Edwards v. First Am. Corp., 610 F.3d 514, 517 (9th Cir. 2010) (quoting Warth v. Seldin, 422 U.S.
490, 500 (1975)).
65
23
See Cantrell v. City of Long Beach, 241 F.3d 674, 684 (9th Cir. 2001) (“state law can create
interests that support standing in federal courts”).
24
66
25
Id. See also Jewel v. Nat’l Sec. Agency, 673 F.3d 902, 908 (9th Cir. 2011) (finding standing for
an allegation of violation of the Stored Communication Act without other specific injury).
67
26
27
28
Goodman, 2012 WL 2412070, at *8 (quoting U.S. v. Students Challenging Regulatory Agency
Procedures (SCRAP), 412 U.S. 669, 687 (1973)).
68
See Edwards v. First Am. Corp., 610 F.3d at 516 (finding standing for violation of the Real Estate
Settlement Procedures Act even though plaintiff could not allege that she was overcharged); Jewel,
673 F.3d at 908 (finding Article III injury-in-fact for alleged violations of three surveillance statutes
ORDER GRANTING MOTION TO DISMISS -15Case No. 5:12-cv-01382-PSG
1
in a case where a credit card company failed to make required disclosures and the Truth in Lending
2
Act created a private right of action for such failures without a showing of damages, the Ninth
3
Circuit held that the plaintiff “suffered the loss of a statutory right to disclosure and has therefore
4
suffered injury in fact for purposes of Article III standing.” 69 Similarly, in Edwards v. First
5
6
American Corp., the Ninth Circuit held that a plaintiff had standing for a violation of the Real Estate
Settlement Procedures Act even when she could not allege that she was financially harmed. 70
7
Plaintiffs have alleged unauthorized access and wrongful disclosure of communications,
8
9
including disclosure to third parties. 71 Plaintiffs also have alleged the interception of
United States District Court
For the Northern District of California
10
communications. 72 Courts have recognized that such alleged violations of the Wiretap Act or the
11
Stored Communications Act are sufficient to establish Article III injury. 73 These statutes grant
12
persons in Plaintiffs’ position a right to relief and thus Plaintiffs have standing for these claims.
13
14
The complaint also alleges that Mr. Marti was injured when Google used his name or
likeness in connection with its “+1” function without authorization. 74 California Civil Code Section
15
16
17
18
19
3344 prohibits the commercial use another’s name or likeness. The statute thus creates a right of
action for “persons injured as a result thereof.” 75 Where a plaintiff alleges an unauthorized
that each “explicitly creates a private right of action for claims of illegal surveillance” without
requiring a showing of damages).
20
69
21
70
22
23
24
25
26
DeMando v. Morris, 206 F.3d 1300, 1303 (9th Cir. 2000).
See Edwards, 610 F.3d at 516. The case was briefed and argued before the Supreme Court, but
the Court ultimately decided that the writ of certiorari was “improvidently granted” and dismissed.
132 S. Ct. 2536 (2012).
71
See Docket No. 50 ¶ 133.
72
See Docket No. 50 ¶ 134.
73
See, e.g., In re Google Inc., 13-MD-02430-LHK, 2013 WL 5423918 (N.D. Cal. Sept. 26, 2013);
In re iPhone Application Litig., 844 F. Supp. 2d at 1055; Jewel, 673 F.3d at 908.
27
74
See Docket No. 50 ¶¶ 129, 136-145.
28
75
Cal. Civ. Code § 3344.
ORDER GRANTING MOTION TO DISMISS -16Case No. 5:12-cv-01382-PSG
1
commercial use of a person’s name or likeness, “courts generally presume that [injury] has been
2
established” for a Section 3344 claim. 76 In Fraley v. Facebook, the court found standing for
3
allegations nearly identical to Mr. Marti’s . 77 The court agrees with Fraley that Section 3344
4
provides a right whose alleged violation creates standing.
5
6
Google disputes any injury-in-fact from the +1 feature because Plaintiffs have not alleged an
unauthorized use. However, the amended complaint states that Google did not compensate Mr.
7
8
9
United States District Court
For the Northern District of California
10
Marti for the commercial use of his personal endorsement and that he “did not authorize Google’s
use of that endorsement.” 78 As explained above, whatever the merits of the parties’ competing
views of consent, a merits analysis is not appropriate when considering standing. 79
11
12
13
14
In sum, while the Plaintiffs’ allegations regarding the loss of PII is insufficient to establish
the required injury-in-fact, their economic and certain statutory injuries are sufficient to support
standing for each of their Plaintiffs’ stated claims. The court therefore will next turn to whether
these claims are those upon which relief may be granted. 80
15
16
17
18
19
20
21
22
76
Del Amo v. Baccash, CV 07-663-PSG, 2008 WL 4414514 (C.D. Cal. Sept. 16, 2008) (citing
Miller v. Collectors Universe, Inc., 159 Cal. App. 4th 988, 1005 (2008)); see also Motschenbacher
v. R. J. Reynolds Tobacco Co., 498 F.2d 821, 825 (9th Cir. 1974) (suggesting that the appropriation
itself may create injury, the court noted that “the appropriation of the identity of a relatively
unknown person may result in economic injury or may itself create economic value in what was
previously valueless.”).
77
See Fraley v. Facebook, Inc., 830 F. Supp. 2d 785, 797 (N.D. Cal. 2011).
78
See Docket No. 50 ¶ 143.
23
79
24
25
26
27
28
See Catholic League for Religious & Civil Rights v. City & Cnty. of San Francisco, 624 F.3d
1043, 1049 (9th Cir. 2010) (“Nor can standing analysis, which prevents a claim from being
adjudicated for lack of jurisdiction, be used to disguise merits analysis, which determines whether a
claim is one for which relief can be granted if factually true.”).
80
See Lujan, 504 U.S. at 578 (“injury required by Art. III may exist solely by virtue of ‘statutes
creating legal rights, the invasion of which creates standing..’”); Jewel, 673 F.3d at 908 (finding
Article III injury-in-fact for claims asserted under federal surveillance statutes because the statutes
created a private right of action for failure to comply with the statutory procedures).
ORDER GRANTING MOTION TO DISMISS -17Case No. 5:12-cv-01382-PSG
B. ADEQUACY OF CLAIMS
1
2
1. Wiretap Act
3
4
The Wiretap Act, as amended by the Electronic Communication Privacy Act (“ECPA”),
generally prohibits the intentional interception of “wire, oral, or electronic communications.” 81 The
5
6
7
purpose of the Wiretap Act is to protect the privacy of communications. 82 The Wiretap Act
provides a private right of action against any person who “intentionally intercepts, endeavors to
8
intercept, or procures any other person to intercept or endeavor to intercept, any wire, oral, or
9
electronic communication.” 83
United States District Court
For the Northern District of California
10
11
The Act defines “intercept” as “the aural or other acquisition of the contents of any wire,
electronic, or oral communication through the use of any electronic, mechanical, or other device.” 84
12
However, the definition of “electronic, mechanical, or other device” excludes:
13
any telephone or telegraph instrument, equipment or facility, or any component
thereof,
(i) furnished to the subscriber or user by a provider of wire or electronic
communication service in the ordinary course of its business and being used by
the subscriber or user in the ordinary course of its business or furnished by such
subscriber or user for connection to the facilities of such service and used in the
ordinary course of its business; or
(ii) being used by a provider of wire or electronic communication service in the
ordinary course of its business, or by an investigative or law enforcement
officer in the ordinary course of his duties. 85
14
15
16
17
18
19
20
21
22
23
24
81
18 U.S.C. § 2511(1); see also Joffe v. Google, Inc., Case No. 11-7483, 2013 WL 4793247, at *3
(9th Cir. Sept. 10, 2013).
82
25
See Gelbrand v. United States, 408 U.S. 41, 48 (1972).
83
26
18 U.S.C. § 2511(1)(a); see id. § 2520 (providing a private right of action for violations of
§ 2511).
27
84
28
85
Id. § 2510(4).
Id. § 2510(5)(a) .
ORDER GRANTING MOTION TO DISMISS -18Case No. 5:12-cv-01382-PSG
1
Thus, as a provider of electronic communication services, Google is immune from claims alleging
2
interception by a “device” based on equipment used “by a provider of wire and electronic
3
communication service in the ordinary course of business.” 86
4
5
6
7
8
9
The amended complaint fails to allege any interception by Google that falls outside the
scope of this broad immunity. While Plaintiffs point to their allegations that Google’s use of the
accused devices to intercept Gmail communications and co-mingle the contents and distribute those
contents without consent was not necessary to the delivery of Gmail, 87 this narrow read of the
exemption, as being limited to only action taken to deliver the electronic communication, does not
United States District Court
For the Northern District of California
10
square with the plain meaning of the statutory text at issue. The text exempts from the definition of
11
“intercept” any use of a device by a provider “in the ordinary course of its business.” Rather than
12
narrowing the exemption to only the provision of electronic communications services itself, or some
13
such narrower scope, Congress specifically chose the broader term “business” that covers more far-
14
ranging activity. For good measure, Congress also teamed the term “business” with the terms
15
16
17
“ordinary course,” suggesting an interest in protecting a provider’s customary and routine business
practices.
Courts generally defer to the results of such a textual analysis. The “first step in interpreting
18
19
a statute is to determine whether the language at issue has a plain and unambiguous meaning.” 88 In
20
so doing, the court “must begin with … the assumption that the ordinary meaning of that language
21
accurately express the legislative purpose.” 89 “If the statutory language is unambiguous and the
22
23
24
25
86
Similarly, each Google agent enjoys broad immunity in his handling of communications “in the
normal course of his employment while engaged in any activity which is a necessary incident to the
rendition of his service or to the protection of the rights or property of the provider of that service.”
18 U.S.C. § 2511(2)(a)(i).
87
See Docket No. 50 ¶ 185.
88
Wilson v. C.I.R., 705 F.3d 980, 987-88 (9th Cir. 2013) (citation omitted).
26
27
89
28
de Osorio v. Mayorkas, 695 F.3d 1003, 1019 (9th Cir. 2012) (citing Gross v. FBL Fin. Servs. Inc.,
557 U.S. 167, 175 (2009)).
ORDER GRANTING MOTION TO DISMISS -19Case No. 5:12-cv-01382-PSG
1
statutory scheme is coherent and consistent, judicial inquiry must cease.” 90 Plaintiffs’ own
2
allegations make clear that the activities at issue here, concerning Google’s core targeted
3
advertising, is within its business’ ordinary course.
4
5
6
Although the Ninth Circuit has yet to rule on the subject, other appellate courts that have
agreed that the “ordinary course of business” exception is not limited to actions necessary to
providing the electronic communication services (“ECS”) at issue. For example, in Hall v.
7
8
9
Earthlink, the Second Circuit relied on the “ordinary course of its business” exception to affirm the
dismissal of a claim brought against an ISP where the plaintiff alleged that the ISP continued
United States District Court
For the Northern District of California
10
processing his emails after he terminated his account. 91 Nothing in processing a closed account’s
11
emails facilitates was necessary to the provision of ECS, suggesting that the processing was
12
performed for other business reasons, and still the Second Circuit held that such processing was not
13
an “interception.” 92
14
In Kirch v. Embarq Management Co., 93 the Tenth Circuit held that the defendant was
15
16
protected by the exception when it conducted a test using third-party advertising technology and its
17
customers’ communications, because the defendant had “no more of its users’ electronic
18
communications than it had in the ordinary course of its business as an ISP.” The trial court’s
19
decision affirmed by Kirch noted that the “ordinary course of its business” defense “appears to have
20
merit, as plaintiffs have admitted that Embarq conducted the NebuAd test to further legitimate
21
22
business purposes and that behavioral advertising is a widespread business and is commonplace on
the Internet.” 94 Kirch thus supports the application of Section 2510(5)(a)(ii) where the provider is
23
24
25
90
Services Emps. Int’l Union v. Nat’l Union of Healthcare Workers, 718 F.3d 1036, 1045 (9th Cir.
2013) (quoting Miranda v. Anchondo, 684 F.3d 844, 849 (9th Cir. 2012)).
91
396 F.3d 500, 505 (2nd Cir. 2005).
92
Id.
93
702 F.3d 1245, 1250 (10th Cir. 2012).
26
27
28
94
Kirch, 2011 WL 3651359, at *9 n.42 (D. Kan. Aug. 19, 2011) (emphasis added).
ORDER GRANTING MOTION TO DISMISS -20Case No. 5:12-cv-01382-PSG
1
2
furthering its “legitimate business purposes”—including advertising—and is not limited to only
those acts that are technically necessary to processing email.
The more fundamental problem with Plaintiffs’ narrow construction of Section
3
4
2510(5)(a)(ii) is that in defining “ordinary course of business” as “necessary” it begs the question of
5
what exactly its means for a given action to be “necessary” to the delivery of Gmail. For example,
6
in delivering Gmail is it really “necessary” do more than just the comply with email protocols such
7
8
9
United States District Court
For the Northern District of California
10
as POP, IMAP and MAPI? What about spam-filtering or indexing? None of these activities have
anything specifically to do with transmitting email. And yet not even Plaintiffs suggest that these
activities are unnecessary and thus lie outside of the “ordinary course business.”
11
12
13
Plaintiffs separately argue that the “ordinary course of business” exception cannot apply
because of their allegations that Google exceeded the scope of the consent secured by their
agreements with Plaintiffs. But the two cases Plaintiffs cite for this proposition, George v.
14
Carusone and United States v. Harpel, are inapposite. Both George and Harpel addressed the
15
16
surreptitious recording of telephone calls. Here, Plaintiffs claim is not that Google did anything in
17
secret, but rather that it publicly announced a new practice in conflict with it prior representations.
18
In fact, in a case cited by George, United States v. Sababu, 95 the Seventh Circuit specifically held
19
that an interception was excepted as being in the “ordinary course of business” because the practice
20
at issue was announced to the prisoners affected.
21
The undersigned is mindful that only recently, in In re Google Inc. Gmail Litigation, this
22
court held that the “ordinary course of business” exception applies “only where an electronic
23
24
communication service provider’s interception facilitates the transmission of the communication at
25
issue or is incidental to the transmission of such communication,” and only if the alleged
26
interceptions were an instrumental part of the transmission of email.” Id. But among other things,
27
the court’s thorough analysis addressed allegations that Google’s practices violated its own internal
28
95
891 F.2d 1308, 1329 (7th Cir. 1989).
ORDER GRANTING MOTION TO DISMISS -21Case No. 5:12-cv-01382-PSG
1
policies, further establishing that its actions are outside the course of its business. In this case,
2
Plaintiffs allege no such violation of any internal policy, rendering Plaintiffs claim insufficiently
3
stated to overcome the hurdle that Rule 12(b)(6) imposes.
4
C. Stored Communications Act
5
“The SCA was enacted because the advent of the Internet presented a host of potential
6
7
privacy breaches that the Fourth Amendment does not address.” 96 Despite this purpose, the SCA has
8
a narrow scope: “[t]he SCA is not a catch-all statute designed to protect the privacy of stored
9
Internet communications.” 97
United States District Court
For the Northern District of California
10
11
12
13
14
Plaintiffs claim that Google violated the SCA in two ways. First, they claim that in
aggregating users’ information between Google services without their consent, Google exceeded the
scope of Google’s authorized access in violation of 18 U.S.C. § 2701(a). 98 This claim borders on
frivolous, considering the plain language of subsection (c) of Section 2701(a) that exempts conduct
15
authorized “by the person or entity providing a wire or electronic communications service.” 99
16
Whatever the propriety of Google’s actions, it plainly authorized actions that it took itself.
17
18
Second, Plaintiffs claim that Google shared stored communications with third parties in
violation of Section 2702(a). 100 Section 2702(a) prohibits providers of electronic communication
19
services from “knowingly divulg[ing] to any person or entity the contents of a communication . . . .”
20
21
22
23
24
25
26
Plaintiffs’ only allegation supporting its second theory is that:
96
Quon v. Arch Wireless Operating Company, Inc., 529 F.3d 892, 900 (9th Cir. 2008), rev’d on
other grounds by City of Ontario v. Quon, 130 S. Ct. 2619, 177 L. Ed. 2d 216 (2010).
97
Orin S. Kerr, A User’s Guide to the Stored Communications Act, and a Legislator’s Guide to
Amending It, 72 GEO. WASH. L. REV. 1208, 1214 (2004).
98
It is an offense under 18 U.S.C. § 2701(a) to “intentionally exceed[] an authorization to access” a
facility through which an electronic communication service is provided.
27
99
28
100
18 U.S.C. § 2701(c).
See Docket No. 57 at 21.
ORDER GRANTING MOTION TO DISMISS -22Case No. 5:12-cv-01382-PSG
insofar as Google engages independent, unidentified third-party entities to
process and distribute user information across its product platforms,
including the contents of Plaintiffs’ Gmail communications, Google
intentionally discloses the contents of those communications outside of
Google. 101
1
2
3
4
But “insofar” is not a concrete allegation; it is theoretical and does not support a claim. Even if this
5
were a concrete allegation, it is too conclusory to support a claim. 102 Plaintiffs simply fail to state
6
any claim under the SCA.
7
D. Misappropriation of Likeness
8
California Civil Code Section 3344 prohibits the use of another’s name or likeness without
10
United States District Court
For the Northern District of California
9
the person’s consent. The cause of action requires a plaintiff to prove: “(1) the defendant’s use of
11
the plaintiff’s identity; (2) the appropriation of plaintiff’s name or likeness to defendant’s advantage,
12
commercially or otherwise; (3) lack of consent; [] (4) resulting injury;” (5) “a knowing use by the
13
defendant;” and (6) “a direct connection between the alleged use and the commercial purpose. 103
14
Here, Plaintiffs fail to adequately allege lack of consent.
15
In Fraley, consent also was at issue. 104 Facebook argued that the terms of use that all users
16
17
agreed to when signing up for Facebook constituted consent. 105 Although these terms were
18
relatively clear, 106 the plaintiffs alleged that Facebook fraudulently obtained the consent, in part
19
20
101
Docket 50 at ¶ 183.
21
102
See Bruns v. Nat’l Credit Union Admin., 122 F.3d 1251, 1257 (9th Cir. 1997).
22
103
23
24
A statutory claim under Section 3344 requires that the plaintiff make all the allegations required
for a common law misappropriation claim, and two additional allegations: “1) knowing use; and 2) a
“direct connection ... between the use and the commercial purpose.” Abdul-Jabbar v. Gen. Motors
Corp., 85 F.3d 407, 414 (9th Cir. 1996).
104
See Fraley, 830 F. Supp. 2d at 805-06.
105
See id.
25
26
27
28
106
Facebook’s Terms of Use included the agreement that “You give us permission to use your name
and [Facebook] profile picture in connection with [commercial, sponsored, or related content (such
as a brand you like) served or enhanced by us], subject to the limits you place.” Id.
ORDER GRANTING MOTION TO DISMISS -23Case No. 5:12-cv-01382-PSG
1
2
because all of the plaintiffs agreed to the terms before Facebook launched the feature and Facebook
never asked them to review or renew the terms as part of the rollout. 107
Plaintiffs in this case only make a threadbare allegation that Google did not obtain their
3
4
consent to use their name or likeness in advertisements associated with its “+1” feature, 108 and the
5
claim is not supported by other allegations. 109 To the contrary, the complaint alleges that Ms. Marti
6
voluntarily clicked on the “+1” feature, that Google clearly disclosed how the feature worked as part
7
8
9
of the feature’s launch, and that the feature worked as Google said it would when Marti used it. In
particular, the amended complaint quotes Google as: describing the “+1” feature as “the digital
United States District Court
For the Northern District of California
10
shorthand for ‘this is pretty cool’” and a way “to share recommendations with the world;” 110
11
explaining that to “[t]o recommend something, all you have to do is click +1 on a webpage or ad
12
you find useful;” 111 and giving the example of a person planning a winter trip to Tahoe, California
13
14
who, when doing a search, “may now see a +1 from [his] slalom-skiing aunt next to the result for a
lodge in the area.” 112
15
Without some contradictory allegations, 113 this is a clear disclosure of how the feature
16
17
worked such that the voluntary use of it constituted consent. 114 Plaintiffs therefore have not stated
18
any claim for statutory or common law misappropriation of likeness.
19
107
See id.
108
See Docket No. 50 ¶ 248.
20
21
109
22
See Ashcroft v. Iqbal, 556 U.S. 662, 678 (2009) (“Threadbare recitals of the elements of a cause
of action, supported by mere conclusory statements, do not suffice.”).
23
110
Docket No. 50 ¶ 107.
24
111
Id. at ¶ 108.
112
Id.
25
26
27
28
113
For example, Plaintiffs might have a claim if they could allege that the feature did not work as
Google explained, that Google did not adequately disclose how the feature worked, a theory of how
clicking on the “+1” feature did not demonstrate consent, or an allegation that his name or likeness
was associated with brands, products, or websites he did not “+1.”
ORDER GRANTING MOTION TO DISMISS -24Case No. 5:12-cv-01382-PSG
E. Breach of Contract
1
“Under California law, the elements of a breach of contract claim are: (1) the existence of a
2
3
contract, (2) plaintiff's performance or excuse for nonperformance, (3) defendant's breach, and (4)
4
resulting damage to plaintiff.” 115 Here, Google does not appear to contest the first or second
5
elements, and instead focuses on the third and fourth arguments. Google argues that it has not
6
breached its contact with Plaintiffs because the original contract included provisions for it to make
7
the types of very changes that Plaintiffs allege breached the contract. Plaintiffs have a different
8
9
United States District Court
For the Northern District of California
10
interpretation of the provisions in question and urge the court not to engage in contract
interpretation at this time.
The Ninth Circuit has explicitly noted that the court need not accept as true allegations that
11
12
are plainly contradicted by the documents at hand on a motion to dismiss.116 The policy plainly
13
includes a provision for the commingling of PII across Google products. That provision states: “We
14
15
may combine the information you submit under your account with information from other
services.” 117 In light of this express provision, it is not plausible to say that Google could be
16
17
considered to have breached the contract. Plaintiffs again have failed to state a claim.
18
F. California’s Unfair Competition Law (“UCL”)
19
20
California’s UCL provides a private cause of action for users who are harmed by unfair,
unlawful, or fraudulent business practices. 118 Plaintiffs here plead their UCL claim under all three
21
22
23
24
prongs. To sustain a claim under the unlawful prong, Plaintiffs must allege facts that, if proven,
114
See Iqbal, 556 U.S. at 678 (“To survive a motion to dismiss, a complaint must contain sufficient
factual matter, accepted as true, to ‘state a claim to relief that is plausible on its face.’”).
115
25
EPIS, Inc. v. Fid. & Guar. Life Ins. Co., 156 F. Supp. 2d 1116, 1124 (N.D.Cal.2001) (modifying
punctuation) (citing Reichert v. General Ins. Co., 68 Cal.2d 822, 830 (1968)).
26
116
See Manzarek v. St. Paul Fire & Marine Ins. Co., 519 F.3d 1025, 1031 (9th Cir. 2008).
27
117
See Docket No. 54, Ex. B, at 2.
28
118
See Lozano v. AT & T Wireless Servs., Inc., 504 F.3d 718, 731 (9th Cir. 2007).
ORDER GRANTING MOTION TO DISMISS -25Case No. 5:12-cv-01382-PSG
1
would demonstrate that Defendant’s conduct violated another, underlying law. 119 If the unlawful
2
conduct is part of a uniform course of fraudulent conduct, it must meet Fed R. Civ. Pro. 9(b)’s
3
heightened pleading standards, but if it does not, then the ordinary pleading standards will
4
suffice. 120 Under the fraudulent prong, Plaintiffs must allege specific facts to show that the
5
members of the public are likely to be deceived by the actions of the defendant. 121 The Ninth
6
7
8
9
Circuit has established that this prong is subject to Fed. Rule Civ. P. 9(b)’s heightened pleading
requirements. 122 With respect to Plaintiffs’ final claim under the UCL’s unfair prong, “[t]he
standard for determining what business acts or practices are “unfair” in user actions under the UCL
United States District Court
For the Northern District of California
10
is currently unsettled.” 123 Generally speaking, “[a]n unfair business practice under the UCL is “one
11
that either offends an established public policy or is immoral, unethical, oppressive, unscrupulous,
12
or substantially injurious to users.” 124 To determine whether a business practice is unfair, a court
13
should consider “the impact of the practice or act on its victim, balanced against the reasons,
14
15
119
16
See Trazo v. Nestle USA, Inc., Case No. 5:12-CV-2272-PSG, 2013 WL 4083218, at *9 (N.D.
Cal. Aug. 9, 2013).
17
120
18
See Kearns v. Ford Motor Co., 567 F.3d 1120, 1125 (9th Cir. 2009); Vess v. Ciba-Geigy Corp.
USA, 317 F.3d 1097, 1106 (9th Cir. 2003).
121
20
See Finuliar v. BAC Home Loans Servicing, L.P., Case No. 3:11-cv-02629-JCS, 2011 WL
4405659 (N.D. Cal. Sept. 21, 2011) (“ ‘Fraudulent,’ as used in the statute, does not refer to the
common law tort of fraud but only requires a showing members of the public ‘are likely to be
deceived.’”).
21
122
22
123
19
See Kearns v. Ford Motor Co., 567 F.3d 1120, 1125 (9th Cir. 2009).
27
Yanting Zhang v. Superior Court, 57 Cal.4th 364, 380 n. 9 (2013). One test holds that “an
‘unfair’ business practice occurs when it offends an established public policy or when the practice is
immoral, unethical, oppressive, unscrupulous or substantially injurious to users.” People v. Casa
Blanca Convalescent Homes, Inc., 159 Cal.App.3d 509, 530 (Cal.Ct.App.1984). Another test
requires that a plaintiff prove “that the defendant's “conduct is tethered to an ... underlying
constitutional, statutory or regulatory provision, or that it threatens an incipient violation of an
antitrust law, or violates the policy or spirit of an antitrust law.” Byars v. SCME Mortgage Bankers,
Inc., 109 Cal.App. 4th 1134, 1147 (Cal.Ct.App.2003). A third test requires that “(1) the user injury
must be substantial; (2) the injury must not be outweighed by any countervailing benefits to users or
competition; and (3) it must be an injury that users themselves could not reasonably have avoided.”
Drum v. San Fernando Valley Bar Ass'n, 182 Cal.App. 4th 247, 257, (Cal.Ct.App.2010).
28
124
23
24
25
26
McDonald v. Coldwell Banker, 543 F.3d 498, 506 (9th Cir.2008).
ORDER GRANTING MOTION TO DISMISS -26Case No. 5:12-cv-01382-PSG
1
2
justifications and motives of the alleged wrongdoer;” this prong of the UCL should be used to
enjoin deceptive or sharp practices.” 125
To support their claim under the UCL’s unlawful prong, Plaintiffs allege that Google’s
3
4
conduct violates California’s Right of Publicity law, the common law principles of commercial
5
misappropriation, the California CLRA, the Federal Wiretap Act, and the Stored Electronic
6
Communications Act. 126 As discussed in other sections, Plaintiffs have failed to set forth sufficient
7
8
9
factual allegations to support these underlying charges, and without having plead any underlying
unlawful conduct, Plaintiffs unlawful conduct claim under the UCL must be dismissed.
United States District Court
For the Northern District of California
10
With respect to their claim under the fraudulent prong, Plaintiffs allege that when Google
11
collected their PII before March 1, 2012, it assured them that it would not use the information for
12
any purpose other than delivering the service for which the users provided it. 127 Subsequently,
13
14
without seeking the consent of individual users (including Plaintiffs), Google compiled all the
information it had collected about Plaintiffs from each and every one of its products, and made that
15
16
information available for use in all products. But even though Plaintiffs provide details to support
17
their allegations under Rule 9(b), as the court has already stated, the documents submitted for
18
judicial notice undermine any notion that Google failed to disclose its data commingling practices
19
before March 1, 2012.
20
21
Finally, Plaintiffs seek to support their claim of unfair conduct by alleging that Google lead
them to believe that they could opt out of endorsements, profiting from the use of the plaintiff’s
22
information, and “encouraging Plaintiffs and the Class to make Google products indispensable to
23
24
their lives,” before making it incredibly difficult for them to effectively “opt out” of programs
25
26
125
Wilson v. Hynek, 207 Cal.App. 4th 999, 1008 (Cal.Ct.App.2012).
27
126
See Docket No. 50 ¶¶ 263-267.
28
127
See id. ¶¶ 82-85.
ORDER GRANTING MOTION TO DISMISS -27Case No. 5:12-cv-01382-PSG
1
making use of their data. 128 These facts, as alleged, do not rise to the level of “unscrupulous” or
2
“unethical.” Even if its earlier policies were not transparent, Google provided notice to its users
3
when it changed its privacy policy, which undercuts any unethical or immoral allegations; this was
4
not a change made in the dark, but rather one broadcast to all those affected. In addition, the overall
5
benefit to users in receiving free, “indispensable” services offsets much of the harm they may suffer
6
through the change. As it stands, Plaintiffs have not set forth sufficient allegations to support an
7
8
unfairness prong claim.
G. Common Law Intrusion Upon Seclusion
9
In order to put forth a claim for intrusion upon seclusion, a plaintiff must plead facts to
United States District Court
For the Northern District of California
10
11
support two elements: “1) intrusion into a private place, conversation or matter, and 2) in a manner
12
highly offensive to a reasonable person. . . . To show intrusion, a plaintiff must have ‘an objectively
13
reasonable expectation of seclusion or solitude in the place, conversation or data source,’ and the
14
defendant must have ‘penetrated some zone of physical or sensory privacy surrounding, or obtained
15
16
unwanted access to data about, the plaintiff.’” 129
The California Supreme Court has clarified that
17
in this context, “the concept of ‘seclusion’ is relative. The mere fact that a person [or their
18
information] can be seen by someone does not automatically mean that he or she can legally be
19
forced to be subject to being seen by everyone.” 130 Courts have recognized facts sufficient to
20
support these elements in the context of repeated phone calls, 131 eavesdropping on workplace
21
conversations, 132 and unauthorized review of email. 133
22
23
24
25
128
See Docket No. 50 ¶¶ 271-72.
129
Thompson v. Chase Bank N.A., Case No. 4:09-cv-2153-DMS, 2010 WL 1329061 (S.D. Cal. Mar.
30, 2010) (citing Shulman v. Group W Productions, 18 Cal.4th 200, 232 (1998)).
130
Joseph v. J.J. Mac Intyre Companies, L.L.C., 281 F. Supp. 2d 1156, 1165 (N.D. Cal. 2003).
131
See Panahiasl v. Gurney, Case No. 5:04-04479-JF, 2007 WL 738642 (N.D. Cal. Mar. 8, 2007).
132
See Sanders v. Am. Broad. Companies, Inc., 20 Cal. 4th 907, 916 (1999).
26
27
28
133
See Yee v. Lin, Case No. 5:12-cv-02474 -WHA, 2012 WL 4343778 (N.D. Cal. Sept. 20, 2012).
ORDER GRANTING MOTION TO DISMISS -28Case No. 5:12-cv-01382-PSG
Plaintiffs here allege that Google’s PII commingling intruded upon their email, contact lists,
1
2
web histories, and other secluded and private spaces. According to Plaintiffs, this expectation was
3
reasonable in light of the previous privacy policies, which assured Plaintiffs of the isolated use of
4
their data.
5
Google’s earlier disclosure that it would commingle PII across products to support its advertising
6
But once again, the court does not find any expectation to be plausible in light of
model. Without a plausible expectation, Plaintiffs seclusion on intrusion claim cannot stand.
7
H. California’s User Legal Remedies Act (“CLRA”)
8
Plaintiffs’ sixth cause of action seeks recovery under Sections (a) (9), (14), and (16) of the
9
United States District Court
For the Northern District of California
10
CLRA, which ban advertising goods with intent not to sell them in the manner advertised,
11
representing that a transaction conveys rights which it does not, and representing that the subject of
12
a transaction has been conveyed in accordance with terms of a previous transaction, when it has not.
13
14
In order to recover, Plaintiffs must also allege facts to establish that they relied on the
misrepresentations in question, and that in so relying, they suffered damage. 134 These allegations
15
16
are subject to Rule 9(b)’s heightened pleading standards. 135
17
Plaintiffs’ claims are insufficiently plead because they fail to allege that Google intended to
18
use the PII in a manner other was advertised at the time that the plaintiffs purchased the goods and
19
registered for the services in question. Under the CLRA, the intent to deceive or misuse information
20
must be present at the time of sale in order for a plaintiff to recover. 136 Yet even if its commingling
21
practices were not disclosed in 2010, Plaintiffs offer no factual allegations indicating that Google
22
planned to change its policies as far back as 2010, such that the existing policies were aimed to
23
24
134
25
Marolda v. Symantec Corp., 672 F. Supp. 2d 992, 1003 (N.D. Cal. 2009).
135
26
See Kearns v. Ford Motor Co., 567 F.3d 1120, 1125 (9th Cir. 2009) (citing Vess v. Ciba-Geigy
Corp. USA, 317 F.3d 1097, 1102 (9th Cir. 2003)).
27
136
See Wilson v. Hewlett-Packard Co., 668 F.3d 1136, 1145 (9th Cir. 2012).
28
ORDER GRANTING MOTION TO DISMISS -29Case No. 5:12-cv-01382-PSG
1
deceive at the time the business relationship began. They have not put forth any allegations
2
suggesting that Google did not intend to honor its existing privacy policies, at the time they became
3
customers. They certainly do not provide the requisite level of detail under Rule 9(b) to support
4
allegations of intent to deceive.
5
IV. CONCLUSION
6
7
Google’s motion to dismiss is GRANTED. Plaintiffs must file any further amended
8
complaint by January 16, 2014. Having dismissed two complaints already, Plaintiffs are on notice
9
that any further dismissal will likely be with prejudice.
United States District Court
For the Northern District of California
10
11
12
Dated: December 3, 2013
_________________________________
Paul S. Grewal
United States Magistrate Judge
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
ORDER GRANTING MOTION TO DISMISS -30Case No. 5:12-cv-01382-PSG
Disclaimer: Justia Dockets & Filings provides public litigation records from the federal appellate and district courts. These filings and docket sheets should not be considered findings of fact or liability, nor do they necessarily reflect the view of Justia.
Why Is My Information Online?