In Re FACEBOOK INTERNET TRACKING LITIGATION
Filing
70
STATEMENT OF RECENT DECISION pursuant to Civil Local Rule 7-3.d PLAINTIFFS NOTICE OF STATEMENT OF RECENT DECISION RELEVANT TO MOTION TO DISMISS PLAINTIFFS CORRECTED FIRST AMENDED CONSOLIDATED CLASS ACTION COMPLAINT; REQUEST FOR LEAVE filed byPerrin Aikens Davis. (Related document(s) # 54 ) (Kiesel, Paul) (Filed on 10/11/2013)
1 Paul R. Kiesel, State Bar No. 119854
kiesel@kbla.com
2 KIESEL LAW LLP
8648 Wilshire Boulevard
3 Beverly Hills, CA 90211-2910
Tel.: 310-854-4444
4 Fax: 310-854-0812
Interim Liaison Counsel
5
Edward D. Robertson, Jr.
6 James P. Frickleton
Mary D. Winter
7 Edward D. Robertson III
chiprob@earthlink.net
8 BARTIMUS, FRICKLETON,
ROBERTSON & GORNY, P.C.
9 11150 Overbrook Road, Suite 200
Leawood, KS 66211
10 Tel.: 913-266-2300
Fax: 913-266-2366
11 Interim Co-Lead Counsel
Stephen G. Grygiel
sggrygiel@yahoo.com
88 E. Bergen Place
Red Bank, NJ 07701
Tel.: 732-268-7367
Fax: 732-268-7367
Interim Co-Lead Counsel
12
13
UNITED STATES DISTRICT COURT
14
NORTHERN DISTRICT OF CALIFORNIA, SAN JOSE DIVISION
15
16 IN RE: FACEBOOK, INC. INTERNET
TRACKING LITIGATION
17
Case No. 5:12-md-02314-EJD
PLAINTIFFS’ NOTICE OF STATEMENT
OF RECENT DECISION RELEVANT TO
MOTION TO DISMISS PLAINTIFFS’
CORRECTED FIRST AMENDED
CONSOLIDATED CLASS ACTION
COMPLAINT; REQUEST FOR LEAVE
18
19
20
21
Judge: Hon. Edward J. Davila
Crtrm.: 4
22
Trial Date:
None
23
24
25
26
27
28
1
5:12-md-02314-EJD
PLAINTIFFS’ REQUEST FOR LEAVE TO FILE
STATEMENT OF RECENT DECISION
1
On July 2, 2012, Defendant Facebook, Inc. (“Facebook”) filed a Motion to Dismiss Plaintiffs’
2 Corrected First Amended Consolidated Class Action Complaint (“Motion”). On October 5, 2012, this
3 Court heard argument on Facebook’s Motion and took the matter under submission.
4
On September 26, 2013, the United States District Court for the Northern District of California
5 issued a decision relevant to the issues raised in the pending Motion. Plaintiffs hereby seek leave to
6 provide that decision as supplemental authority for the Court’s consideration when deciding the ruling
7 on the Motion. The decision is attached as Exhibit A: In re Google Inc. Gmail Litig., No. 13-MD8 02430-LHK (N.D. Cal. Sept. 26, 2013).
9
10 DATED: October 11, 2013
Respectfully submitted,
11
KIESEL LAW LLP
12
/s/ Paul R. Kiesel
Paul R. Kiesel (SBN 119854)
kiesel@kbla.com
8648 Wilshire Boulevard
Beverly Hills, CA 90211
Tel.: 310-854-4444
Fax: 310-854-0812
Interim Liaison Counsel
13
14
15
16
17
Stephen G. Grygiel
sggrygiel@yahoo.com
88 E. Bergen Place
Red Bank, NJ 07701
Tel.: 732-268-7367
Fax: 732-268-7367
Interim Co-Lead Counsel
18
19
20
21
22
BARTIMUS, FRICKLETON,
ROBERTSON & GORNY, P.C.
23
24
/s/ James P. Frickleton
Edward D. Robertson, Jr.
James P. Frickleton
Mary D. Winter
Edward D. Robertson III
chiprob@earthlink.net
11150 Overbrook Road, Suite 200
Leawood, KS 66211
25
26
27
28
2
5:12-md-02314-EJD
PLAINTIFFS’ REQUEST FOR LEAVE TO FILE
STATEMENT OF RECENT DECISION
1
2
Tel.: 913-266-2300
Fax: 913-266-2366
Interim Co-Lead Counsel
3
STRAITE PLLC
4
/s/ David A. Straite
David A. Straite (admitted pro hac vice)
david@straite.com
295 Madison Avenue, 12th Floor
New York, NY 10017-6379
Tel.: 646-652-8502
Fax: 917-398-1458
Plaintiffs’ Steering Committee
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
3
5:12-md-02314-EJD
PLAINTIFFS’ REQUEST FOR LEAVE TO FILE
STATEMENT OF RECENT DECISION
EXHIBIT A
Case5:13-cv-01961-LHK Document13 Filed09/26/13 Page1 of 43
1
2
3
4
5
6
7
UNITED STATES DISTRICT COURT
9
United States District Court
For the Northern District of California
8
NORTHERN DISTRICT OF CALIFORNIA
10
SAN JOSE DIVISION
11
12
13
14
15
16
)
)
IN RE: GOOGLE INC. GMAIL LITIGATION )
_______________________________________ )
)
THIS DOCUMENT RELATES TO:
)
ALL ACTIONS
)
)
Case No.: 13-MD-02430-LHK
ORDER GRANTING IN PART AND
DENYING IN PART DEFENDANT’S
MOTION TO DISMISS
[REDACTED]
In this consolidated multi-district litigation, Plaintiffs Keith Dunbar, Brad Scott, Todd
17
Harrington, Matthew Knowles, A.K. (next of friend to Minor J.K.), Brent Matthew Scott, Kristen
18
Brinkman, Robert Fread, and Rafael Carrillo, individually and on behalf of those similarly situated
19
(collectively, “Plaintiffs”), allege that Defendant Google, Inc., has violated state and federal anti-
20
wiretapping laws in its operation of Gmail, an email service. See ECF No. 38-2. Before the Court
21
is Google’s Motion to Dismiss Plaintiffs’ Consolidated Complaint. See ECF No. 44. For the
22
reasons stated below, the Court DENIES in part and GRANTS in part Google’s Motion to Dismiss
23
with leave to amend.
24
25
26
27
28
1
Case No.: 13-MD-02430-LHK
ORDER GRANTING IN PART AND DENYING IN PART DEFENDANT’S MOTION TO DISMISS
Case5:13-cv-01961-LHK Document13 Filed09/26/13 Page2 of 43
Case5:13-cv-01961-LHK Document13 Filed09/26/13 Page3 of 43
1
profit interests that were unrelated to providing email services to particular users. Id. ¶¶ 97–98.
2
Accordingly, Plaintiffs allege that Google has, since 20
3
of providing advertisements and creating user profiles to advance Google’s profit interests.
4
2.
5
, intercepted emails for the dual purposes
Types of Gmail Services
Gmail implicates several different, but related, systems of email delivery, three of which are
at issue here. The first is a free service, which allows any user to register for an account with
7
Google to use Gmail. Id. ¶ 99. This system is supported by advertisements, though users can opt-
8
out of such advertising or access Gmail accounts in ways that do not generate advertising, such as
9
United States District Court
For the Northern District of California
6
accessing email on a smartphone. Id. ¶ 70.
10
The second is Google’s operation of email on behalf of Internet Service Providers (“ISPs”).
11
Id. ¶ 100. Google, through its Google Apps Partner program, enters into contracts with ISPs, such
12
as Cable One, to provide an email service branded by the ISP. Id. The ISP’s customers can
13
register for email addresses from their ISP (such as “@mycableone.com”), but their email is
14
nevertheless powered by Google through Gmail.
15
Third, Google operates Google Apps for Education, through which Google provides email
16
on behalf of educational organizations for students, faculty, staff, and alumni. Id. ¶ 101. These
17
users receive “@name.institution.edu” email addresses, but their accounts are also powered by
18
Google using Gmail. Id. Universities that are part of Google Apps for Education require their
19
students to use the Gmail-provided service. Id.
20
Google Apps users, whether through the educational program or the partner program, do
21
not receive content-based ads but can opt in to receiving such advertising. Google processes
22
emails sent and received from all Gmail users,1 including Google Apps users, in the same way
23
1
24
25
26
27
28
In this Order, the Court uses “Gmail users” to refer to individuals who send or receive emails
using the free Gmail service or Google apps. “Non-Gmail users” refers to email users who do not
themselves use Gmail (through the free service or Google Apps). “Google Apps users” refers to
the subset of Gmail users who access Gmail through either the Google Apps Partner Program or
Google Apps for Education.
3
Case No.: 13-MD-02430-LHK
ORDER GRANTING IN PART AND DENYING IN PART DEFENDANT’S MOTION TO DISMISS
Case5:13-cv-01961-LHK Document13 Filed09/26/13 Page4 of 43
1
except that emails of users who do not receive advertisements are not processed through Google’s
2
advertising infrastructure, which attaches targeted advertisements to emails. Id. ¶¶ 57, 72–73. This
3
means that users who do not receive advertisements would not have been subject to the pre-
4
20
interceptions, as during that period, interceptions were for the sole purpose of
attaching targeted advertisements to emails. After
6
of emails for targeted advertising from its interception of emails for creating user profiles. Id. ¶ 72.
7
As a result, after
8
nevertheless intercepted to create user profiles. Id. ¶¶ 73, 85. Accordingly, these post-
9
United States District Court
For the Northern District of California
5
20
20
20
, Google separated its interception
, emails to and from users who did not receive advertisements are
interceptions impacted all Gmail and Google Apps users, regardless of whether they received
10
advertisements.
11
3.
12
The operation of the Gmail service implicates several legal agreements. Gmail users were
13
required to agree to one of two sets of Terms of Service during the class periods. The first Terms
14
of Service was in effect from April 16, 2007, to March 1, 2012, and the second has been in effect
15
since March 1, 2012. Id. ¶ 102. The 2007 Terms of Service stated that:
16
17
18
19
Google’s Agreements with Users
Google reserves the right (but shall have no obligation) to pre-screen, review,
flag, filter, modify, refuse or remove any or all Content from any Service. For
some Services, Google may provide tools to filter out explicit sexual content.
These tools include the SafeSearch preference settings . . . . In addition, there are
commercially available services and software to limit access to material that you
may find objectionable.
20
Id. ¶ 104. A subsequent section of the 2007 Terms of Service provided that “[s]ome of the
21
Services are supported by advertising revenue and may display advertisements and promotions”
22
and that “[t]hese advertisements may be content-based to the content information stored on the
23
Services, queries made through the Service or other information.” Id. ¶¶ 107–08.
24
25
The 2012 Terms of Service deleted the above language and stated that users “give Google
(and those [Google] work[s] with) a worldwide license to use . . ., create derivative works (such as
26
27
28
4
Case No.: 13-MD-02430-LHK
ORDER GRANTING IN PART AND DENYING IN PART DEFENDANT’S MOTION TO DISMISS
Case5:13-cv-01961-LHK Document13 Filed09/26/13 Page5 of 43
1
those resulting from translations, adaptations or other changes we make so that your content works
2
better with our Services), . . . and distribute such content.” See ECF No. 46-6 at 3.
3
Both Terms of Service reference Google’s Privacy Policies, which have been amended
three times thus far during the putative class periods. See ECF Nos. 46-7, 46-8, 46-9, 46-10.
5
These Policies, which were largely similar, stated that Google could collect information that users
6
provided to Google, cookies, log information, user communications to Google, information that
7
users provide to affiliated sites, and the links that a user follows. See ECF No. 46-7. The Policies
8
listed Google’s provision of “services to users, including the display of customized content and
9
United States District Court
For the Northern District of California
4
advertising” as one of the reasons for the collection of this information. Id.
10
Google also had in place Legal Notices, which stated that “Google does not claim any
11
ownership in any of the content, including any text, data, information, images, photographs, music,
12
sound, video, or other material, that [users] upload, transmit or store in [their] Gmail account.”
13
ECF No. 38-2 ¶ 118. The Notices further stated that Google “will not use any of [users’] content
14
for any purpose except to provide [users] with the service.” Id. ¶ 121.
15
In addition, Google entered into contractual agreements with ISPs and educational
16
institutions as part of its Google Apps Partner and Google Apps for Education programs. These
17
agreements require Google to “protect against unauthorized access to or use of Customer data.” Id.
18
¶¶ 137, 161. In turn, “Customer data” is defined as “data, including email, provided, generated,
19
transmitted, or displayed via the Services by Customers or End Users.” Id. ¶¶ 138, 162. Further,
20
the Terms of Service applicable to Google Apps Cable One users states that “Google may access,
21
preserve, and disclose your account information and any Content associated with that account if
22
required to do so by law or in a good faith belief that such access preservation or disclosure is
23
reasonably necessary” to satisfy applicable law, enforce the Terms of Service, detect or prevent
24
fraud, or protect against imminent harm to the rights of Google, its users, or the public. ECF No.
25
46-2 at 2–3.
26
27
28
5
Case No.: 13-MD-02430-LHK
ORDER GRANTING IN PART AND DENYING IN PART DEFENDANT’S MOTION TO DISMISS
Case5:13-cv-01961-LHK Document13 Filed09/26/13 Page6 of 43
1
Importantly, Plaintiffs who are not Gmail or Google Apps users are not subject to any of
2
Google’s express agreements. Because non-Gmail users exchange emails with Gmail users,
3
however, their communications are nevertheless subject to the alleged interceptions at issue in this
4
case.
5
4.
Relief Sought and Class Allegations
6
Plaintiffs bring these cases alleging that Google, in the operation of its Gmail system,
violated federal and state anti-wiretapping laws. ECF No. 38-2 ¶ 216 (federal law), ¶ 288
8
(California law), ¶ 328 (Maryland law), ¶ 349 (Florida law), ¶ 370 (Pennsylvania law). Plaintiffs
9
United States District Court
For the Northern District of California
7
seek the certification of several classes, preliminary and permanent injunctive relief, declaratory
10
relief, statutory damages, punitive damages, and attorneys’ fees. Plaintiffs seek relief on behalf of
11
the following classes, all of which have a class period starting two years before the relevant
12
complaint was filed and running through the date of class certification, if any:
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
(1) all Cable One users who sent a message to a Gmail user and received a reply or received
an email;
(2) all Google Apps for Education users who have sent a message to a Gmail user and
received a reply or received an email;
(3) all U.S. citizen non-Gmail users (except California residents) who have sent a message
to a Gmail user and received a reply or received an email from a Gmail user;
(4) all U.S. citizen non-Gmail users who have sent a message to a Gmail user and received
a reply or received an email from a Gmail user;
(5) all Pennsylvania non-Gmail users who have sent a message to a Gmail user and
received a reply or received an email from a Gmail user;
(6) all Florida non-Gmail users who have sent a message to a Gmail user and received a
reply or received an email from a Gmail user;
(7) all Maryland non-Gmail users who have sent a message to a Gmail user and received a
reply or received an email from a Gmail user; and
6
Case No.: 13-MD-02430-LHK
ORDER GRANTING IN PART AND DENYING IN PART DEFENDANT’S MOTION TO DISMISS
Case5:13-cv-01961-LHK Document13 Filed09/26/13 Page7 of 43
1
(8) all Gmail users who were under the age of majority and who used Gmail to send an
2
email to or received an email from a non-Gmail user or a Gmail user under the age of majority. Id.
3
¶¶ 388–92.
4
B.
Procedural History
5
This case is a consolidated multi-district litigation involving seven individual and class
action lawsuits. See ECF No. 38-2. The first of these consolidated actions was filed on November
7
17, 2010, and transferred from the Eastern District of Texas to the Northern District of California
8
on June 27, 2012. See Dunbar v. Google, Inc., 12-CV-03305 (N.D. Cal.); ECF No. 179. Five
9
United States District Court
For the Northern District of California
6
other actions involving substantially similar allegations against Google followed in this District and
10
throughout the country. See Scott, et al. v. Google, Inc., No. 12-CV-03413 (N.D. Cal.); Scott v.
11
Google, Inc., No. 12-CV-00614 (N.D. Fla.); A.K. v. Google, Inc., No. 12-CV-01179 (S.D. Ill.);
12
Knowles v. Google, Inc., 12-CV-02022 (D. Md.); Brinkman v. Google, Inc., 12-CV-06699 (E.D.
13
Pa.). On April 1, 2013, the Judicial Panel on Multidistrict Litigation issued a Transfer Order,
14
centralizing these six actions in the Northern District of California before the undersigned judge.
15
See ECF No. 1. On May 6, 2013, this Court related a seventh action, Fread v. Google, Inc., 13-
16
CV-01961 (N.D. Cal.), as part of this multi-district litigation. See ECF No. 29.
17
Plaintiffs filed an Administrative Motion to file their Consolidated Complaint under seal on
18
May 16, 2013.2 See ECF No. 38. The Complaint contained five claims alleging violations of: (1)
19
the Wiretap Act, as amended by the Electronic Communications Privacy Act (“ECPA”), 18 U.S.C.
20
§§ 2510, et seq.; (2) the California Invasion of Privacy Act (“CIPA”), Cal. Penal Code §§ 630, et
21
seq.; (3) the Maryland Courts and Judicial Proceedings Code Ann. §§ 10-402, et seq.; (4) Florida
22
Statute §§ 934.03, et seq.; and (5) 18 Pa. Const. Stat. §§ 5701, et seq. See ECF No. 38-2.
23
24
Google filed a Motion to Dismiss the Consolidated Complaint on June 13, 2013. See ECF
No. 44. On the same day, Google filed two declarations and a request for judicial notice in support
25
2
26
27
28
The Court resolves this Administrative Motion through a separate order.
7
Case No.: 13-MD-02430-LHK
ORDER GRANTING IN PART AND DENYING IN PART DEFENDANT’S MOTION TO DISMISS
Case5:13-cv-01961-LHK Document13 Filed09/26/13 Page8 of 43
1
of its Motion. See ECF Nos. 45–47. Plaintiffs filed an opposition to Google’s request for judicial
2
notice and separate objections to Google’s declarations on July 11, 2013. See ECF Nos. 49–50.
3
Google filed a reply in support of its request for judicial notice and Motion to Strike Plaintiffs’
4
objections to Google’s declarations on July 29, 2013. ECF No. 58.
Plaintiffs filed their opposition to Google’s Motion to Dismiss on July 11, 2013. See ECF
6
No. 53. That same day, Plaintiffs filed a request for judicial notice in support of their opposition.
7
See ECF No. 51. Google filed a reply along with a declaration in support of the reply on July 29,
8
2013. See ECF No. 56–57. This Court held a hearing on the Motion to Dismiss on September 5,
9
United States District Court
For the Northern District of California
5
2013. See ECF No. 64.
10
II.
LEGAL STANDARDS
11
A.
Motion to Dismiss
12
Pursuant to Federal Rule of Civil Procedure 12(b)(6), a defendant may move to dismiss an
13
action for failure to allege “enough facts to state a claim to relief that is plausible on its face.” Bell
14
Atl. Corp. v. Twombly, 550 U.S. 544, 570 (2007). “A claim has facial plausibility when the
15
plaintiff pleads factual content that allows the court to draw the reasonable inference that the
16
defendant is liable for the misconduct alleged. The plausibility standard is not akin to a
17
‘probability requirement,’ but it asks for more than a sheer possibility that a defendant has acted
18
unlawfully.” Ashcroft v. Iqbal, 556 U.S. 662, 678 (2009) (internal citations omitted). For purposes
19
of ruling on a Rule 12(b)(6) motion, the Court “accept[s] factual allegations in the complaint as
20
true and construe[s] the pleadings in the light most favorable to the non-moving party.” Manzarek
21
v. St. Paul Fire & Marine Ins. Co., 519 F.3d 1025, 1031 (9th Cir. 2008).
22
However, a court need not accept as true allegations contradicted by judicially noticeable
23
facts, Shwarz v. United States, 234 F.3d 428, 435 (9th Cir. 2000), and a “court may look beyond
24
the plaintiff’s complaint to matters of public record” without converting the Rule 12(b)(6) motion
25
into a motion for summary judgment, Shaw v. Hahn, 56 F.3d 1128, 1129 n.1 (9th Cir. 1995). A
26
court is also not required to “‘assume the truth of legal conclusions merely because they are cast in
8
27
28
Case No.: 13-MD-02430-LHK
ORDER GRANTING IN PART AND DENYING IN PART DEFENDANT’S MOTION TO DISMISS
Case5:13-cv-01961-LHK Document13 Filed09/26/13 Page9 of 43
1
the form of factual allegations.’” Fayer v. Vaughn, 649 F.3d 1061, 1064 (9th Cir. 2011) (per
2
curiam) (quoting W. Min. Council v. Watt, 643 F.2d 618, 624 (9th Cir. 1981)). Mere “conclusory
3
allegations of law and unwarranted inferences are insufficient to defeat a motion to dismiss.”
4
Adams v. Johnson, 355 F.3d 1179, 1183 (9th Cir. 2004); accord Iqbal, 556 U.S. at 678.
5
Furthermore, “a plaintiff may plead herself out of court” if she “plead[s] facts which establish that
6
[s]he cannot prevail on h[er] . . . claim.” Weisbuch v. Cnty. of L.A., 119 F.3d 778, 783 n.1 (9th Cir.
7
1997) (internal quotation marks and citation omitted).
B.
9
United States District Court
For the Northern District of California
8
Request for Judicial Notice
The Court generally may not look beyond the four corners of a complaint in ruling on a
10
Rule 12(b)(6) motion, with the exception of documents incorporated into the complaint by
11
reference, and any relevant matters subject to judicial notice. See Swartz v. KPMG LLP, 476 F.3d
12
756, 763 (9th Cir. 2007); Lee v. City of Los Angeles, 250 F.3d 668, 688–89 (9th Cir. 2001). Under
13
the doctrine of incorporation by reference, the Court may consider on a Rule 12(b)(6) motion not
14
only documents attached to the complaint, but also documents whose contents are alleged in the
15
complaint, provided the complaint “necessarily relies” on the documents or contents thereof, the
16
document’s authenticity is uncontested, and the document’s relevance is uncontested. Coto
17
Settlement v. Eisenberg, 593 F.3d 1031, 1038 (9th Cir. 2010); see Lee, 250 F.3d at 688–89. The
18
purpose of this rule is to “prevent plaintiffs from surviving a Rule 12(b)(6) motion by deliberately
19
omitting documents upon which their claims are based.” Swartz, 476 F.3d at 763 (internal
20
quotation marks omitted).
21
The Court also may take judicial notice of matters that are either (1) generally known
22
within the trial court’s territorial jurisdiction or (2) capable of accurate and ready determination by
23
resort to sources whose accuracy cannot reasonably be questioned. Fed. R. Evid. 201(b). Proper
24
subjects of judicial notice when ruling on a motion to dismiss include legislative history reports,
25
see Anderson v. Holder, 673 F.3d 1089, 1094, n.1 (9th Cir. 2012); court documents already in the
26
public record and documents filed in other courts, see Holder v. Holder, 305 F.3d 854, 866 (9th
9
27
28
Case No.: 13-MD-02430-LHK
ORDER GRANTING IN PART AND DENYING IN PART DEFENDANT’S MOTION TO DISMISS
Case5:13-cv-01961-LHK Document13 Filed09/26/13 Page10 of 43
1
Cir. 2002); and publically accessible websites, see Caldwell v. Caldwell, 2006 WL 618511, at *4
2
(N.D. Cal. Mar. 13, 2006); Wible v. Aetna Life Ins. Co., 375 F. Supp. 2d 956, 965–66 (C.D. Cal.
3
2005).
C.
5
If the Court determines that the complaint should be dismissed, it must then decide whether
6
to grant leave to amend. Under Rule 15(a) of the Federal Rules of Civil Procedure, leave to amend
7
“shall be freely given when justice so requires,” bearing in mind “the underlying purpose of Rule
8
15 . . . [is] to facilitate decision on the merits, rather than on the pleadings or technicalities.” Lopez
9
United States District Court
For the Northern District of California
4
Leave to Amend
v. Smith, 203 F.3d 1122, 1127 (9th Cir. 2000) (en banc) (internal quotation marks and citation
10
omitted). Nonetheless, a court “may exercise its discretion to deny leave to amend due to ‘undue
11
delay, bad faith or dilatory motive on part of the movant, repeated failure to cure deficiencies by
12
amendments previously allowed, undue prejudice to the opposing party . . ., [and] futility of
13
amendment.’” Carvalho v. Equifax Info. Servs., LLC, 629 F.3d 876, 892–93 (9th Cir. 2010)
14
(quoting Foman v. Davis, 371 U.S. 178, 182 (1962)) (alterations in original).
15
III.
REQUESTS FOR JUDICIAL NOTICE
16
In support of their opposition to Google’s Motion to Dismiss, Plaintiffs request the Court
17
take judicial notice of (A) a declaration and a motion filed in Sheppard v. Google, Inc., et al, 12-
18
CV-4022 (W.D. Ark.); (B) an excerpt of a November 30, 1985 Senate Judiciary Committee hearing
19
regarding the ECPA; (C) an April 29, 1968 Senate Report; and (D) an order on Google’s motion to
20
dismiss in Marquis v. Google, Inc., No. 11-2808, in the Superior Court of Suffolk County,
21
Commonwealth of Massachusetts. See ECF No. 51. Plaintiffs’ Exhibits B and C are legislative
22
history reports, and Plaintiffs’ Exhibits A and D are documents filed in other courts, already part of
23
the public record. See Anderson, 673 F.3d at 1094, n.1; Holder, 305 F.3d at 866. Google does not
24
oppose any of these requests. The Court takes judicial notice of all four.
25
26
27
28
Google requests that the Court take judicial notice of (A) a copy of Google’s Terms of
Service applicable to Google Apps services provided through Cable One, Inc.; (B) a copy of the
10
Case No.: 13-MD-02430-LHK
ORDER GRANTING IN PART AND DENYING IN PART DEFENDANT’S MOTION TO DISMISS
Case5:13-cv-01961-LHK Document13 Filed09/26/13 Page11 of 43
Google Apps Education Edition Agreement between Google and the University of Hawaii; (C) a
2
copy of the Google Apps Education Edition Agreement between Google and the University of the
3
Pacific; (D) copies of Google’s Terms of Service dated April 16, 2007 and March 1, 2012; (E)
4
copies of Google’s Privacy Policies dated August 7, 2008, March 11, 2009, October 3, 2010, and
5
March 1, 2012; (F) a copy of the Yahoo! Mail Privacy Policy from June 2013; (G) an excerpt of an
6
October 17, 1986 Senate Report regarding the ECPA; (H) a copy of a May 9, 1995 California
7
Senate Judiciary Committee analysis; and (I) a copy of an April 13, 2010 California Senate Public
8
Safety Committee analysis. See ECF No. 47. Plaintiffs oppose the request for judicial notice with
9
United States District Court
For the Northern District of California
1
respect to items F, G, H, and I. See ECF No. 49.
10
The Court takes judicial notice of items A, B, C, D, and E as requested by Google and to
11
which Plaintiffs do not object because Plaintiffs rely upon and reference these documents in the
12
Complaint. See ECF No. 38-2 ¶¶ 102, 144, 185–86, 189, 227–28, 237–38; Coto, 593 F.3d at 1038.
13
The Court further takes judicial notice of items H and I because Plaintiffs “do[] not contest that
14
these are readily available public documents or challenge their authenticity.” Zephyr v. Saxon
15
Mortg. Servs., Inc., 873 F. Supp. 2d 1223, 1226 (E.D. Cal. 2012). The Court takes judicial notice
16
of item G because it is a legislative history report for the statute at the heart of Plaintiffs’ principal
17
claim. See id.; Anderson, 673 F.3d at 1094, n.1. Finally, the Court denies Google’s request for
18
judicial notice of item F, the Yahoo! Mail Privacy Policy. The Policy is not a document “on which
19
the Complaint necessarily relies nor . . . whose relevance and authenticity are uncontested” because
20
Plaintiffs contend that the effective dates of the Yahoo! Privacy Policy are unknown. See ECF No.
21
49 at 2–3; Fraley v. Facebook, Inc., 830 F. Supp. 2d 785, 795 (N.D. Cal. 2011).
22
Plaintiffs further raise objections to various paragraphs in the declarations supporting
23
Google’s Motion to Dismiss and to the requests for judicial notice with respect to some of the
24
exhibits attached to the declarations. See ECF No. 50. The Court strikes these objections pursuant
25
to Civil Local Rule 7-3(a). The Rule requires that any evidentiary objections to a motion be
26
contained within the opposition to the motion itself, but Plaintiffs filed their objections separately
11
27
28
Case No.: 13-MD-02430-LHK
ORDER GRANTING IN PART AND DENYING IN PART DEFENDANT’S MOTION TO DISMISS
Case5:13-cv-01961-LHK Document13 Filed09/26/13 Page12 of 43
1
from their opposition. See Apple, Inc. v. Samsung Elecs. Co., Ltd., 2011 WL 7036077, at *3 (N.D.
2
Cal. Dec. 2, 2011).
3
IV.
MOTION TO DISMISS
A.
5
The Wiretap Act, as amended by the ECPA, generally prohibits the interception of “wire,
6
oral, or electronic communications.” 18 U.S.C. § 2511(1); see also Joffe v. Google, Inc., No. 11-
7
17483, 2013 WL 4793247, at *3 (9th Cir. Sept. 10, 2013). More specifically, the Wiretap Act
8
provides a private right of action against any person who “intentionally intercepts, endeavors to
9
United States District Court
For the Northern District of California
4
The Wiretap Act
intercept, or procures any other person to intercept or endeavor to intercept, any wire, oral, or
10
electronic communication.” 18 U.S.C. § 2511(1)(a); see id. § 2520 (providing a private right of
11
action for violations of § 2511). The Act further defines “intercept” as “the aural or other
12
acquisition of the contents of any wire, electronic, or oral communication through the use of any
13
electronic, mechanical, or other device.” Id. § 2510(4).
14
Plaintiffs contend that Google violated the Wiretap Act in its operation of the Gmail system
15
by intentionally intercepting the content of emails that were in transit to create profiles of Gmail
16
users and to provide targeted advertising. Google contends that Plaintiffs have not stated a claim
17
with respect to the Wiretap Act for two reasons. First, Google contends that there was no
18
interception because there was no “device.” Specifically, Google argues that its reading of any
19
emails would fall within the “ordinary course of business” exception to the definition of device.
20
ECF No. 44 at 6–13. Under that exception, “any telephone or telegraph instrument, equipment or
21
facility, or any component thereof . . . being used by a provider of wire or electronic
22
communication service in the ordinary course of its business” is not a “device,” and the use of such
23
an instrument accordingly falls outside of the definition of “intercept.” 18 U.S.C. § 2510(5)(a)(ii).
24
Second, Google contends that all Plaintiffs have consented to any interception. ECF No. 44 at 13–
25
20. Under the statute, it is not unlawful “to intercept a wire, oral, or electronic communication . . .
26
27
28
12
Case No.: 13-MD-02430-LHK
ORDER GRANTING IN PART AND DENYING IN PART DEFENDANT’S MOTION TO DISMISS
Case5:13-cv-01961-LHK Document13 Filed09/26/13 Page13 of 43
1
where one of the parties to the communication has given prior consent to such interception.” 18
2
U.S.C. § 2511(2)(d).
3
4
1.
“Ordinary Course of Business” Exception
Google first contends that it did not engage in an interception because its reading of users’
emails occurred in the ordinary course of its business. ECF No. 44 at 6–13. Conversely, Plaintiffs
6
contend that the ordinary course of business exception is narrow and applies only when an
7
electronic communication service provider’s actions are “necessary for the routing, termination, or
8
management of the message.” See ECF No. 53 at 7. The Court finds that the ordinary course of
9
United States District Court
For the Northern District of California
5
business exception is narrow. The exception offers protection from liability only where an
10
electronic communication service provider’s interception facilitates the transmission of the
11
communication at issue or is incidental to the transmission of such communication. Specifically,
12
the exception would apply here only if the alleged interceptions were an instrumental part of the
13
transmission of email. Plaintiffs have alleged, however, that Google’s interception is not an
14
instrumental component of Google’s operation of a functioning email system. ECF No. 38-2 ¶ 97.
15
In fact, Google’s alleged interception of email content is primarily used to create user profiles and
16
to provide targeted advertising — neither of which is related to the transmission of emails. See id.
17
¶¶ 26–27, 33, 57, 65, 84, 95. The Court further finds that Plaintiffs’ allegations that Google
18
violated Google’s own agreements and internal policies with regard to privacy also preclude
19
application of the ordinary course of business exception.
20
21
22
23
24
25
The plain language of the Wiretap Act, 18 U.S.C. § 2510(5)(a), exempts from the definition
of “device”:
any telephone or telegraph instrument, equipment or facility, or any component
thereof,
(i) furnished to the subscriber or user by a provider of wire or electronic
communication service in the ordinary course of its business and being used by
the subscriber or user in the ordinary course of its business or furnished by such
subscriber or user for connection to the facilities of such service and used in the
ordinary course of its business; or
26
27
28
13
Case No.: 13-MD-02430-LHK
ORDER GRANTING IN PART AND DENYING IN PART DEFENDANT’S MOTION TO DISMISS
Case5:13-cv-01961-LHK Document13 Filed09/26/13 Page14 of 43
(ii) being used by a provider of wire or electronic communication service
in the ordinary course of its business, or by an investigative or law enforcement
officer in the ordinary course of his duties;
1
2
3
This section includes two “ordinary course of business” exceptions. The first, under subsection
4
(a)(i), is for users or subscribers of electronic communication services, while the second,
5
subsection (a)(ii), applies to the providers of electronic communication services themselves. This
6
case implicates the latter, as Google provides the electronic communication service at issue here,
7
Gmail.
8
United States District Court
For the Northern District of California
9
The Sixth Circuit has found that the text of “[t]he two exceptions [is] not altogether clear.”
Adams v. City of Battle Creek, 250 F.3d 980, 982 (6th Cir. 2001). There is no dispute that
10
Google’s interception of Plaintiffs’ emails and subsequent use of the information to create user
11
profiles or to provide targeted advertising advanced Google’s business interests. But this does not
12
end the inquiry. The Court must give effect to the word “ordinary,” which limits “course of
13
business” under both exceptions. The presence of the modifier “ordinary” must mean that not
14
everything Google does in the course of its business would fall within the exception. The task the
15
Court faces at this stage is to determine whether Plaintiffs have adequately alleged that the
16
purported interceptions were not an “ordinary” part of Google’s business.
17
In the context of section 2510(5)(a)(i), courts have held, consistent with the textual
18
limitation that “ordinary” imposes on “course of business,” that not everything that a company may
19
want to do falls within the “ordinary course of business” exception. See e.g., Watkins v. L.M. Berry
20
& Co., 704 F.2d 577, 582 (11th Cir. 1983) (“The phrase ‘in the ordinary course of business’ cannot
21
be expanded to mean anything that interests a company.”). Rather, the business reasons must be
22
“legitimate.” See Arias v. Mut. Cent. Alarm Serv., Inc., 202 F.3d 553, 559 (2d Cir. 2000); see also
23
Berry v. Funk, 146 F.3d 1003, 1009 (D.C. Cir. 1998) (finding that actions are in the ordinary
24
course of business if they are “justified by a valid business purpose” or “shown to be undertaken
25
normally”).
26
27
28
14
Case No.: 13-MD-02430-LHK
ORDER GRANTING IN PART AND DENYING IN PART DEFENDANT’S MOTION TO DISMISS
Case5:13-cv-01961-LHK Document13 Filed09/26/13 Page15 of 43
This limitation, applied to electronic communication service providers in the context of
2
section 2510(5)(a)(ii), means that the electronic communication service provider engaged in the
3
alleged interception must demonstrate the interception facilitated the communication service or
4
was incidental to the functioning of the provided communication service. For example, in Kirch v.
5
Embarq Management Co., 702 F.3d 1245 (10th Cir. 2012), which Google cites, ECF No. 44 at 9,
6
the Tenth Circuit affirmed a grant of summary judgment in favor of Embarq, an ISP, where
7
Embarq had intercepted only data incidental to its provision of the internet service. In that case,
8
Embarq had granted a third party, NebuAd, permission to conduct a technology test by acquiring
9
United States District Court
For the Northern District of California
1
information about Embarq’s users so that NebuAd could provide targeted advertising to those
10
users. 702 F.3d at 1247. The Tenth Circuit held that Embarq had not violated the ECPA because
11
the ISP could not be liable for NebuAd’s interceptions. Id. at 1249. Further, Embarq itself did not
12
review any of the raw data that NebuAd collected. Id. at 1250. Rather, Embarq had no more
13
access than it otherwise would have had as an ISP. Id. Embarq’s ordinary course of business as an
14
ISP necessarily required that it would have access to data that was transmitted over its equipment.
15
Id. at 1249. The relationship between Embarq and NebuAd’s technology test did not expand the
16
universe of data to which Embarq had access beyond the data Embarq could access in its provision
17
of internet services. Id. at 1250. Accordingly, Embarq’s actions fell within its ordinary course of
18
business. Unlike this case, the only information to which Embarq had access was collected by
19
Embarq’s devices that provided internet services. Id. In contrast, here, Plaintiffs allege that there
20
are separate devices — aside from the devices related to delivery of email — that intercept users’
21
emails. ECF No. 38-2 ¶ 259(e). Considered practically, Google is more akin to NebuAd, which
22
intercepted data for the purpose of providing targeted advertising — a purpose separate and apart
23
from Embarq’s provision of internet service. Cf. Kirch, 702 F.3d at 1248. However, because
24
NebuAd settled with the Plaintiffs in Kirch, the Tenth Circuit’s opinion does not deal with
25
NebuAd’s liability. Id. at 1248 n. 2, 1249 (“[W]e need not address whether NebuAd intercepted
26
any of the Kirches’ electronic communications.”). The Court therefore finds that Kirch’s
15
27
28
Case No.: 13-MD-02430-LHK
ORDER GRANTING IN PART AND DENYING IN PART DEFENDANT’S MOTION TO DISMISS
Case5:13-cv-01961-LHK Document13 Filed09/26/13 Page16 of 43
1
discussion of Embarq’s liability cuts in favor of a narrow reading of the section 2510(5)(a)(ii)
2
exception and that Kirch stands only for the narrow proposition that interceptions incidental to the
3
provision of the alleged interceptor’s internet service fall within the “ordinary course of business”
4
exception.
5
Hall v. Earthlink Network, Inc., 396 F.3d 500 (2d Cir. 2005), which also addresses the
section 2510(5)(a)(ii) exception, further suggests that this Court should narrowly read the “ordinary
7
course of business” exception. There, the Second Circuit affirmed a grant of summary judgment
8
and concluded that Earthlink did not violate the ECPA when Earthlink continued to receive and
9
United States District Court
For the Northern District of California
6
store emails sent to an address that had been closed. The Second Circuit found that the plaintiff in
10
that case did not present any evidence that Earthlink’s continued receipt of emails was outside its
11
ordinary course of business. Id. at 505. The Court noted that Earthlink presented testimony that
12
Earthlink routinely continued to receive and store emails after an account was canceled and more
13
critically that Earthlink “did not have the ability to bounce e-mail back to senders after the
14
termination of an account.” Id. Accordingly, in Hall, the email provider’s alleged interceptions
15
were a necessary part of its ability to provide email services. In the instant case, by contrast,
16
Plaintiffs have alleged that Google could operate its Gmail system without reading the emails for
17
the purposes of targeted advertising or the creation of user profiles. ECF No. 38-2 ¶ 97. Therefore,
18
unlike Earthlink, the alleged interception in the instant case is not incidental to the operation of the
19
service.3
20
3
21
22
23
24
25
26
27
28
The Court finds that In re Google, Inc. Privacy Policy Litigation, 2012 WL 6738343 (N.D. Cal.
Dec. 28, 2012), does not suggest a broader reading of the exception. Google relies on that case for
the proposition that as long as Google is using its own devices, Google cannot be intercepting
users’ information. ECF No. 44 at 9–10. Yet, the court in Privacy Policy explicitly noted that the
use of the device must be in the ordinary course of business. See In re Google, Inc. Privacy Policy
Litigation, 2012 WL 6738343 at *5–6. Further, unlike that case, the alleged interception in the
instant case occurred while the email was in transit, rather than when the material was already in
possession of the intended recipient. See id. at *6 (dismissing plaintiffs’ cause of action on the
basis that they “utterly fail . . . to cite any authority that supports either the notion that a provider
can intercept information already in its possession by violating limitations imposed by a privacy
policy or the inescapably plain language of the Wiretap Act that excludes from the definition of a
‘device’ a provider’s own equipment used in the ordinary course of business.”). The difference
16
Case No.: 13-MD-02430-LHK
ORDER GRANTING IN PART AND DENYING IN PART DEFENDANT’S MOTION TO DISMISS
Case5:13-cv-01961-LHK Document13 Filed09/26/13 Page17 of 43
1
In addition to the text and the case law, the statutory scheme and legislative history also
2
weigh in favor of a narrow reading of the section 2510(5)(a)(ii) exception. Specifically, a separate
3
exception to the Wiretap Act related to electronic service providers states that:
4
5
6
7
8
United States District Court
For the Northern District of California
9
It shall not be unlawful under this chapter for an operator of a switchboard, or an
officer, employee, or agent of a provider of wire or electronic communication
service, whose facilities are used in the transmission of a wire or electronic
communication, to intercept, disclose, or use that communication in the normal
course of his employment while engaged in any activity which is a necessary
incident to the rendition of his service or to the protection of the rights or property
of the provider of that service, except that a provider of wire communication
service to the public shall not utilize service observing or random monitoring
except for mechanical or service quality control checks.
18 U.S.C. § 2511(2)(a)(i) (emphasis added). The statute explicitly limits the use of service
10
observing or random monitoring by electronic communication service providers to mechanical and
11
service quality control checks. Id. Accordingly, the statutory scheme suggests that Congress did
12
not intend to allow electronic communication service providers unlimited leeway to engage in any
13
interception that would benefit their business models, as Google contends. In fact, this statutory
14
provision would be superfluous if the ordinary course of business exception were as broad as
15
Google suggests. See Duncan v. Walker, 533 U.S. 167, 174 (2001) (stating that in statutory
16
interpretation, courts should “give effect, if possible, to every clause and word of a statute”).
17
The legislative history of section 2511(2)(a)(i), which Google cites, ECF No. 44 at 7, also
18
supports reading the ordinary course of business exception to require that the interception be
19
instrumental to the provision of the service. A U.S. Senate Report regarding the ECPA states that
20
“[t]he provider of electronic communications services may have to monitor a stream of
21
transmissions in order to properly route, terminate, and otherwise manage the individual messages
22
they contain. These monitoring functions, which may be necessary to the provision of an
23
electronic communication service, do not involve humans listening in on voice conversations.
24
Accordingly, they are not prohibited.” ECF No. 45-2 at 20. This suggests that Congress intended
25
between communications stored in the recipient’s possession and those in transit is significant for
the purposes of the statutory scheme as discussed infra.
26
27
28
17
Case No.: 13-MD-02430-LHK
ORDER GRANTING IN PART AND DENYING IN PART DEFENDANT’S MOTION TO DISMISS
Case5:13-cv-01961-LHK Document13 Filed09/26/13 Page18 of 43
1
to protect electronic communication service providers from liability when the providers were
2
monitoring communications for the purposes of ensuring that the providers could appropriately
3
route, terminate, and manage messages. Accordingly, the Court concludes that the legislative
4
history supports a narrow reading of the section 2510(5)(a)(ii) exception, under which an electronic
5
communication service provider must show some link between the alleged interceptions at issue
6
and its ability to operate the communication system. Google’s broader reading of the exception
7
would conflict with Congressional intent.
8
United States District Court
For the Northern District of California
9
The case law applying the “ordinary course of business” exception in the 2510(5)(a)(i)
context also suggests that courts have narrowly construed that phrase. For example, in Arias v.
10
Mutual Central Alarm Service, Inc., the Second Circuit found that it was within an alarm
11
company’s ordinary course of business to record all incoming and outgoing calls because
12
maintaining records of the calls was instrumental “to ensure that [the alarm company’s] personnel
13
are not divulging sensitive customer information, that events are reported quickly to emergency
14
services, that customer claims regarding events are verifiable, and that the police and other
15
authorities may rely on these records in conducting any investigations.” 202 F.3d at 559 (internal
16
quotation marks and alterations omitted). Similarly, the Tenth Circuit found that an employer’s
17
installation of a telephone monitoring device on the phone lines in departments where employees
18
interacted with the public was within the employer’s ordinary course of business because of
19
“concern by management over abusive language used by irate customers when called upon to pay
20
their bills, coupled with the possible need to give further training and supervision to employees
21
dealing with the public.” James v. Newspaper Agency Corp., 591 F.2d 579, 581 (10th Cir. 1979).
22
The narrow construction of “ordinary course of business” is most evident in section
23
2510(5)(a)(i) cases where an employer has listened in on employees’ phone calls in the workplace.
24
See United States v. Murdock, 63 F.3d 1391, 1396 (6th Cir. 1995) (noting that “[a] substantial body
25
of law has developed on the subject of ordinary course of business in the employment field where
26
employees have sued their employers” and that “[t]hese cases have narrowly construed the phrase
18
27
28
Case No.: 13-MD-02430-LHK
ORDER GRANTING IN PART AND DENYING IN PART DEFENDANT’S MOTION TO DISMISS
Case5:13-cv-01961-LHK Document13 Filed09/26/13 Page19 of 43
‘ordinary course of business’”); Watkins, 704 F.2d at 582. These cases suggest that an employer’s
2
eavesdropping on an employee’s phone call is only permissible where the employer has given
3
notice to the employee. See Adams, 250 F.3d at 984 (finding that the exception generally requires
4
that the use be “(1) for a legitimate business purpose, (2) routine, and (3) with notice”). Further,
5
these cases have suggested that an employer may only listen to an employee’s phone call for the
6
narrow purpose of determining whether a call is for personal or business purposes. In Watkins, for
7
example, the court held that an employer “was obliged to cease listening as soon as she had
8
determined that the call was personal, regardless of the contents of the legitimately heard
9
United States District Court
For the Northern District of California
1
conversation.” 704 F.2d at 584. Watkins concerned a situation in which an employer listened in on
10
an employee’s personal phone call wherein the employee discussed a job interview. The Eleventh
11
Circuit reversed a grant of summary judgment in favor of the employer notwithstanding the fact
12
that the interception concerned a conversation that was “obviously of interest to the employer.” Id.
13
at 583–84.
14
These cases suggest a narrow reading of “ordinary course of business” under which there
15
must be some nexus between the need to engage in the alleged interception and the subscriber’s
16
ultimate business, that is, the ability to provide the underlying service or good. In the instant
17
matter, Plaintiffs explicitly allege that there is no comparable nexus between Google’s
18
interceptions and its ability to provide the electronic communication service at issue in this case,
19
email. Specifically, in their Complaint, Plaintiffs state that Google’s interceptions are “for
20
[Google’s] own benefit in other Google services unrelated to the service of email or the particular
21
user.” ECF No. 38-2 ¶ 97.
22
In light of the statutory text, case law, statutory scheme, and legislative history concerning
23
the ordinary course of business exception, the Court finds that the section 2510(5)(a)(ii) exception
24
is narrow and designed only to protect electronic communication service providers against a
25
finding of liability under the Wiretap Act where the interception facilitated or was incidental to
26
27
28
19
Case No.: 13-MD-02430-LHK
ORDER GRANTING IN PART AND DENYING IN PART DEFENDANT’S MOTION TO DISMISS
Case5:13-cv-01961-LHK Document13 Filed09/26/13 Page20 of 43
provision of the electronic communication service at issue.4 Plaintiffs have plausibly alleged that
2
Google’s reading of their emails was not within this narrow ordinary course of its business.
3
Specifically, Plaintiffs allege that Google intercepts emails for the purposes of creating user
4
profiles and delivering targeted advertising, which are not instrumental to Google’s ability to
5
transmit emails. The Consolidated Complaint alleges that “Google uses the content of the email
6
messages [Google intercepts] and the derivative data it creates for its own benefit in other Google
7
services unrelated to the service of email or the particular user.” ECF No. 38-2 ¶¶ 97, 259(g).
8
Plaintiffs support their assertion by suggesting that Google’s interceptions of emails for targeting
9
United States District Court
For the Northern District of California
1
advertising and creating user profiles occurred independently from the rest of the email-delivery
10
system. In fact, according to the Consolidated Complaint, the Gmail system has always had
11
separate processes for spam filtering, antivirus protections, spell checking, language detection, and
12
sorting than the devices that perform alleged interceptions that are challenged in this case. Id. ¶¶ 5,
13
200, 259(e). As such, the alleged interception of emails at issue here is both physically and
14
purposively unrelated to Google’s provision of email services. Id. ¶¶ 74, 259(g). Google’s alleged
15
interceptions are neither instrumental to the provision of email services, nor are they an incidental
16
effect of providing these services. The Court therefore finds that Plaintiffs have plausibly alleged
17
that the interceptions fall outside Google’s ordinary course of business.
18
Furthermore, the D.C. Circuit has held in a section 2510(5)(a)(i) case that a defendant’s
19
actions may fall outside the “ordinary course of business” exception when the defendant violates its
20
own internal policies. See Berry, 146 F.3d at 1010. In Berry, the court reversed a district court’s
21
grant of summary judgment in favor of the government on “ordinary course of business” grounds
22
in part because the interception violated internal policies. That case concerned a Wiretap Act claim
23
4
24
25
26
27
28
The Court does not find persuasive Google’s slippery slope contention that a narrow
interpretation of the ordinary course of business exception will make it impossible for electronic
communication service providers to provide basic features, such as email searches or spam control.
ECF No. 44 at 12–13. Some of these may fall within a narrow definition of “ordinary course of
business” because they are instrumental to the provision of email service. Further, a service
provider can seek consent to provide features beyond those linked to the provision of the service.
20
Case No.: 13-MD-02430-LHK
ORDER GRANTING IN PART AND DENYING IN PART DEFENDANT’S MOTION TO DISMISS
Case5:13-cv-01961-LHK Document13 Filed09/26/13 Page21 of 43
1
brought by a senior State Department officer against State Department Operations Center Watch
2
Officers for monitoring the officer’s phone call with another high-ranking officer. Id. at 1005. The
3
D.C. Circuit noted that the “Operations Center Manual in effect at the time of these conversations
4
cautioned that calls between Senior Department Officials . . . ‘should not be monitored unless they
5
so request.’” Id. at 1006. The court held that the “government’s position [that this monitoring was
6
within its ordinary course of business] is fatally undermined by the Operations Center guidelines
7
which clearly indicate the norm of behavior the Watch Officers were to follow and which must be
8
regarded as the ordinary course of business for the Center.” Id. at 1009–10.
United States District Court
For the Northern District of California
9
The Court finds that the reasoning of the D.C. Circuit applies equally in the section
10
2510(5)(a)(ii) context. Here, Plaintiffs allege that Google has violated its own policies and
11
therefore is acting outside the ordinary course of business. Specifically, Plaintiffs allege that
12
Google’s Privacy Policies explicitly limit the information that Google may collect to an
13
enumerated list of items, and that this list does not include content of emails. ECF No. 38-2 ¶¶
14
187–91. Plaintiffs point to the language of the Privacy Policy that states that Google “may collect
15
the following types of information” and then lists (1) information provided by the user (such as
16
personal information submitted on the sign-up page), (2) information derived from cookies, (3) log
17
information, (4) user communications to Google, (5) personal information provided by affiliated
18
Google services and sites, (6) information from third party applications, (7) location data, and (8)
19
unique application numbers from Google’s toolbar. Id. ¶ 187; ECF No. 46-7. Plaintiffs further
20
note that the updated Privacy Policy also stated that Google “collected information in two ways”:
21
“(1) information the user gives to Google—the user’s personal information; and, (2) information
22
Google obtains from the user’s use of Google services, wherein Google lists: (a) the user’s device
23
information; (b) the user’s log information; (c) the user’s location information; (d) the user’s
24
unique application number; (e) information stored locally on the user’s device; and, (e) [sic]
25
information derived from cookies placed on a user’s device.” ECF No. 38-2 ¶ 189; ECF No. 46-
26
10. Because content of emails between users or between users and non-users was not part of either
21
27
28
Case No.: 13-MD-02430-LHK
ORDER GRANTING IN PART AND DENYING IN PART DEFENDANT’S MOTION TO DISMISS
Case5:13-cv-01961-LHK Document13 Filed09/26/13 Page22 of 43
1
list, Plaintiffs allege that Google “violates the express limitations of its Privacy Policies.” Id. ¶¶
2
191, 195. The Court need not determine at this stage whether Plaintiffs will ultimately be able to
3
prove that the Privacy Policies were intended to comprehensively list the information Google may
4
collect. Rather, Plaintiffs’ plausible allegations that the Privacy Policies were exhaustive are
5
sufficient. Because Plaintiffs have alleged that Google exceeded the scope of its own Privacy
6
Policy, the section 2510(5)(a)(ii) exception cannot apply.
7
8
Accordingly, the Court DENIES Google’s Motion to Dismiss based on the section
2510(5)(a)(ii) exception.5
United States District Court
For the Northern District of California
9
2.
10
Consent
Google’s second contention with respect to Plaintiffs’ Wiretap Act claim is that all
11
Plaintiffs consented to any interception of emails in question in the instant case. Specifically,
12
Google contends that by agreeing to its Terms of Service and Privacy Policies, all Gmail users
13
have consented to Google reading their emails. ECF No. 44 at 14–16. Google further suggests that
14
even though non-Gmail users have not agreed to Google’s Terms of Service or Privacy Policies, all
15
non-Gmail users impliedly consent to Google’s interception when non-Gmail users send an email
16
to or receive an email from a Gmail user. Id. at 19–21.
17
If either party to a communication consents to its interception, then there is no violation of
18
the Wiretap Act. 18 U.S.C. § 2511(2)(d).6 Consent to an interception can be explicit or implied,
19
but any consent must be actual. See United States v. Van Poyck, 77 F.3d 285, 292 (9th Cir. 1996);
20
5
21
22
23
24
25
26
27
28
The Court notes that it is not the first court to reject Google’s ordinary course of business
exception theory on a motion to dismiss a challenge to the operation of Gmail. A federal district
court in Texas ruled that it could not decide the question of ordinary course of business at the
motion to dismiss phase. See Dunbar v. Google, Inc., No. 10-CV-00194-MHS, ECF No. 61 (E.D.
Tex. May 23, 2011). A state court in Massachusetts also rejected a similar claim under state law.
Marquis v. Google, Inc., No. 11-2808-BLSI (Mass Super. Ct. Jan. 17, 2012).
6
However, to establish a consent defense under the state laws at issue in this case, both parties —
the sender and the recipient of the communication — must consent to the alleged interception. See
Fla. Stat. § 934.03(2)(d); Md. Code, Cts. & Jud. Proc. § 10-402(c)(3); 18 Pa. Cons. Stat. § 5704(4).
Because the Court finds that no party has consented to any of the interceptions at issue in this case,
the difference between the federal law’s one-party consent regime and the state laws’ two-party
consent regimes is not relevant at this stage.
22
Case No.: 13-MD-02430-LHK
ORDER GRANTING IN PART AND DENYING IN PART DEFENDANT’S MOTION TO DISMISS
Case5:13-cv-01961-LHK Document13 Filed09/26/13 Page23 of 43
U.S. v. Amen, 831 F.2d 373, 378 (2d Cir. 1987); U.S. v. Corona-Chavez. 328 F.3d 974, 978 (8th
2
Cir. 2003). Courts have cautioned that implied consent applies only in a narrow set of cases. See
3
Watkins, 704 F.2d at 581 (holding that consent should not be “cavalierly implied”); In re
4
Pharmatak, 329 F.3d at 20. The critical question with respect to implied consent is whether the
5
parties whose communications were intercepted had adequate notice of the interception. Berry,
6
146 F.3d at 1011. That the person communicating knows that the interceptor has the capacity to
7
monitor the communication is insufficient to establish implied consent. Id. Moreover, consent is
8
not an all-or-nothing proposition. Rather, “[a] party may consent to the interception of only part of
9
United States District Court
For the Northern District of California
1
a communication or to the interception of only a subset of its communications.” In re
10
Pharmatrack, Inc., 329 F.3d at 19.
11
In its Motion to Dismiss, Google marshals both explicit and implied theories of consent.
12
Google contends that by agreeing to Google’s Terms of Service and Privacy Policies, Plaintiffs
13
who are Gmail users expressly consented to the interception of their emails. ECF No. 44 at 14–16.
14
Google further contends that because of the way that email operates, even non-Gmail users knew
15
that their emails would be intercepted, and accordingly that non-Gmail users impliedly consented
16
to the interception. Id. at 19–20. Therefore, Google argues that in all communications, both
17
parties — regardless of whether they are Gmail users — have consented to the reading of emails.
18
Id. at 13–14. The Court rejects Google’s contentions with respect to both explicit and implied
19
consent. Rather, the Court finds that it cannot conclude that any party — Gmail users or non-
20
Gmail users — has consented to Google’s reading of email for the purposes of creating user
21
profiles or providing targeted advertising.
22
Google points to its Terms of Service and Privacy Policies, to which all Gmail and Google
23
Apps users agreed, to contend that these users explicitly consented to the interceptions at issue.
24
The Court finds, however, that those policies did not explicitly notify Plaintiffs that Google would
25
intercept users’ emails for the purposes of creating user profiles or providing targeted advertising.
26
27
28
23
Case No.: 13-MD-02430-LHK
ORDER GRANTING IN PART AND DENYING IN PART DEFENDANT’S MOTION TO DISMISS
Case5:13-cv-01961-LHK Document13 Filed09/26/13 Page24 of 43
1
Section 8 of the Terms of Service that were in effect from April 16, 2007, to March 1, 2012,
2
stated that “Google reserves the right (but shall have no obligation) to pre-screen, review, flag,
3
filter, modify, refuse or remove any or all Content from any Service.”7 ECF No. 46-5 at 4. This
4
sentence was followed by a description of steps users could take to avoid sexual and objectionable
5
material. Id. (“For some of the Services, Google may provide tools to filter out explicit sexual
6
content.”). Later, section 17 of the Terms of Service stated that “advertisements may be targeted to
7
the content of information stored on the Services, queries made through the Services or other
8
information.” Id. at 8.
United States District Court
For the Northern District of California
9
The Court finds that Gmail users’ acceptance of these statements does not establish explicit
10
consent. Section 8 of the Terms of Service suggests that content may be intercepted under a
11
different set of circumstances for a different purpose — to exclude objectionable content, such as
12
sexual material. This does not suggest to the user that Google would intercept emails for the
13
purposes of creating user profiles or providing targeted advertising. Watkins, 704 F.2d at 582
14
(“[C]onsent within the meaning of section 2511(2)(d) is not necessarily an all or nothing
15
proposition; it can be limited. It is the task of the trier of fact to determine the scope of the consent
16
and to decide whether and to what extent the interception exceeded that consent.”); In re
17
Pharmatrack, Inc., 329 F.3d at 19 (“Thus, a reviewing court must inquire into the dimensions of
18
the consent and then ascertain whether the interception exceeded those boundaries.”) (internal
19
quotation marks omitted). Therefore, to the extent that section 8 of the Terms of Service
20
establishes consent, it does so only for the purpose of interceptions to eliminate objectionable
21
content. The Consolidated Complaint suggests, however, that Gmail’s interceptions for the
22
purposes of targeted advertising and creation of user profiles was separate from screening for any
23
objectionable content. See ECF No. 38-2 ¶¶ 5, 200. Because the two processes were allegedly
24
separate, consent to one does not equate to consent to the other.
25
7
26
27
28
It is undisputed that the term “Service” throughout Google’s Terms of Service includes Gmail.
24
Case No.: 13-MD-02430-LHK
ORDER GRANTING IN PART AND DENYING IN PART DEFENDANT’S MOTION TO DISMISS
Case5:13-cv-01961-LHK Document13 Filed09/26/13 Page25 of 43
1
Section 17 of the Terms of Service — which states that Google’s “advertisements may be
targeted to the content of information stored on the Services, queries made through the Services or
3
other information” — is defective in demonstrating consent for a different reason: it demonstrates
4
only that Google has the capacity to intercept communications, not that it will. Berry, 146 F.3d at
5
1011 (holding that knowledge of defendant’s capacity to monitor is insufficient to establish
6
consent). Moreover, the language suggests only that Google’s advertisements were based on
7
information “stored on the Services” or “queries made through the Services” — not information in
8
transit via email. Plaintiffs here allege that Google violates the Wiretap Act, which explicitly
9
United States District Court
For the Northern District of California
2
protects communications in transit, as distinguished from communications that are stored.
10
Furthermore, providing targeted advertising is only one of the alleged reasons for the interceptions
11
at issue in this case. Plaintiffs also allege that Google intercepted emails for the purposes of
12
creating user profiles. See ECF No. 38-2 ¶ 95. Section 17, to the extent that it suggests
13
interceptions, only does so for the purposes of providing advertising, not creating user profiles.
14
Accordingly, the Court finds that neither section of the Terms of Service establishes consent.
15
The Privacy Policies in effect from August 8, 2008, to October 3, 2010, to which all Gmail
16
users agreed and upon which Google now relies, do not clarify Google’s role in intercepting
17
communications between its users. The Policies stated that Google may collect “[i]nformation you
18
provide, [c]ookies[,] [l]og information[,] [u]ser communications to Google[,] [a]ffiliated sites,
19
[l]inks[,] [and] [o]ther sites.” See ECF No. 46-7 at 2–3. Google described that it used such
20
information for the purposes of “[p]roviding our services to users, including the display of
21
customized content and advertising.” Id. at 3. In 2010, Google later updated the Policy to state
22
that the collected information would be used to “[p]rovide, maintain, protect, and improve our
23
services (including advertising services) and develop new services.” See ECF No. 46-9 at 3.
24
Nothing in the Policies suggests that Google intercepts email communication in transit between
25
users, and in fact, the policies obscure Google’s intent to engage in such interceptions. The
26
Privacy Policies explicitly state that Google collects “user communications . . . to Google.” See
25
27
28
Case No.: 13-MD-02430-LHK
ORDER GRANTING IN PART AND DENYING IN PART DEFENDANT’S MOTION TO DISMISS
Case5:13-cv-01961-LHK Document13 Filed09/26/13 Page26 of 43
1
ECF No. 46-7 at 3 (emphasis added). This could mislead users into believing that user
2
communications to each other or to nonusers were not intercepted and used to target advertising or
3
create user profiles. As such, these Privacy Policies do not demonstrate explicit consent, and in
4
fact suggest the opposite.
5
After March 1, 2012, Google modified its Terms of Service and Privacy Policy. The new
policies are no clearer than their predecessors in establishing consent. The relevant part of the new
7
Terms of Service state that when users upload content to Google, they “give Google (and those
8
[Google] work[s] with) a worldwide license to use . . ., create derivative works (such as those
9
United States District Court
For the Northern District of California
6
resulting from translations, adaptations or other changes we make so that your content works better
10
with our Services), . . . and distribute such content.” See ECF No. 46-6 at 3. The Terms of Service
11
cite the new Privacy Policy, in which Google states to users that Google “may collect information
12
about the services that you use and how you use them, like when you visit a website that uses our
13
advertising services or you view and interact with our ads and content. This information includes:
14
[d]evice information[,] [l]og information[,] [l]ocation information[,] [u]nique application
15
numbers[,] [l]ocal storage[,] [c]ookies[,] and anonymous identifiers.” ECF No. 46-10 at 3. The
16
Privacy Policy further states that Google “use[s] the information [it] collect[s] from all [its]
17
services to provide, maintain, protect and improve them, to develop new ones, and to protect
18
Google and [its] users. [Google] also use[s] this information to offer you tailored content — like
19
giving you more relevant search results and ads.” See ECF No. 46-10 at 3. These new policies do
20
not specifically mention the content of users’ emails to each other or to or from non-users; these
21
new policies are not broad enough to encompass such interceptions. Furthermore, the policies do
22
not put users on notice that their emails are intercepted to create user profiles. The Court therefore
23
finds that a reasonable Gmail user who read the Privacy Policies would not have necessarily
24
understood that her emails were being intercepted to create user profiles or to provide targeted
25
advertisements. Accordingly, the Court finds that it cannot conclude at this phase that the new
26
policies demonstrate that Gmail user Plaintiffs consented to the interceptions.
26
27
28
Case No.: 13-MD-02430-LHK
ORDER GRANTING IN PART AND DENYING IN PART DEFENDANT’S MOTION TO DISMISS
Case5:13-cv-01961-LHK Document13 Filed09/26/13 Page27 of 43
1
Finally, Google contends that non-Gmail users — email users who do not have a Gmail
account and who did not accept Gmail’s Terms of Service or Privacy Policies — nevertheless
3
impliedly consented to Google’s interception of their emails to and from Gmail users, and to
4
Google’s use of such emails to create user profiles and to provide targeted advertising. ECF No.
5
44 at 19–20. Google’s theory is that all email users understand and accept the fact that email is
6
automatically processed. Id. However, the cases Google cites for this far-reaching proposition
7
hold only that the sender of an email consents to the intended recipients’ recording of the email —
8
not, as has been alleged here, interception by a third-party service provider. See State v. Townsend,
9
United States District Court
For the Northern District of California
2
57 P.3d 255, 260 (Wash. 2002) (finding consent and therefore no violation of Washington’s
10
privacy act when email and instant message communications sent to an undercover police officer
11
were used against criminal defendant); State v. Lott, 879 A.2d 1167, 1172 (N.H. 2005) (same under
12
New Hampshire law); Commonwealth v. Proetto, 771 A.2d 823, 829 (Pa. Super. Ct. 2001) (holding
13
that the Pennsylvania anti-wiretapping law was not violated when the recipient forwarded emails
14
and chat messages to the police). Google has cited no case that stands for the proposition that users
15
who send emails impliedly consent to interceptions and use of their communications by third
16
parties other than the intended recipient of the email. Nor has Google cited anything that suggests
17
that by doing nothing more than receiving emails from a Gmail user, non-Gmail users have
18
consented to the interception of those communications. Accepting Google’s theory of implied
19
consent — that by merely sending emails to or receiving emails from a Gmail user, a non-Gmail
20
user has consented to Google’s interception of such emails for any purposes — would eviscerate
21
the rule against interception. See Watkins, 704 F.2d at 581 (“It would thwart th[e] policy [of
22
protecting privacy] if consent could routinely be implied from circumstances.”).8 The Court does
23
8
24
25
26
27
28
In their briefs, the parties dispute whether members of the putative class of Gmail users who are
minors consented to the interceptions. Google contends that minors are bound by the Terms of
Service and Privacy Policies. ECF No. 44 at 16–17. Google argues that the Children’s Online
Privacy Protection Act, 15 U.S.C. §§ 6501–08, preempts any state law that would have rendered
the minors’ consent ineffective. The Court need not reach the issue of whether minors are bound
by the Terms of Service or the Privacy Policies because the Court concludes that even if the minors
27
Case No.: 13-MD-02430-LHK
ORDER GRANTING IN PART AND DENYING IN PART DEFENDANT’S MOTION TO DISMISS
Case5:13-cv-01961-LHK Document13 Filed09/26/13 Page28 of 43
1
not find that non-Gmail users who are not subject to Google’s Privacy Policies or Terms of Service
2
have impliedly consented to Google’s interception of their emails to Gmail users.
3
Because Plaintiffs have adequately alleged that they have not explicitly or implicitly
4
consented to Google’s interceptions, the Court DENIES Google’s Motion to Dismiss on the basis
5
of consent.9
6
B.
CIPA
7
CIPA, Cal. Penal Code § 630, et seq., California’s anti-wiretapping and anti-eavesdropping
statute, prohibits unauthorized interceptions of communications in order “to protect the right of
9
United States District Court
For the Northern District of California
8
privacy.” Cal. Penal Code § 630. The California Legislature enacted CIPA in 1967 in response to
10
“advances in science and technology [that] have led to the development of new devices and
11
techniques for the purpose of eavesdropping upon private communications.” Id.
12
Section 631 prohibits wiretapping or “any other unauthorized connection” with a “wire,
13
line, cable, or instrument.” See Cal. Penal Code § 631(a). The California Supreme Court has held
14
that section 631 protects against three distinct types of harms: “intentional wiretapping, willfully
15
attempting to learn the contents or meaning of a communication in transit over a wire, and
16
attempting to use or communicate information obtained as a result of engaging in either of the
17
previous two activities.” Tavernetti v. Superior Court, 583 P.2d 737, 741 (Cal. 1978). Section
18
632 prohibits unauthorized electronic eavesdropping on confidential conversations. See Cal. Penal
19
Code § 632(a). To state a claim under section 632, a plaintiff must allege an electronic recording
20
21
22
23
24
25
26
27
28
are subject to these agreements, the agreements did not establish consent. Similarly, Google
contends that Google Apps users are also bound by the Terms of Service and Privacy Policies even
though they were required by their educational institutions or ISPs to use Gmail. ECF No. 44 at
17–18. Again, because the Court concludes that the agreements did not establish consent, the
Court need not reach the issue of whether Google Apps users are bound by the agreements.
9
Other courts have also rejected Google’s consent defense against state and federal antiwiretapping challenges to the operation of Gmail. See Dunbar v. Google, Inc., No. 10-cv-00194MHS, ECF No. 61 (E.D. Tex. May 23, 2011); Marquis v. Google, Inc., No. 11-2808-BLSI (Mass
Super. Ct. Jan. 17, 2012).
28
Case No.: 13-MD-02430-LHK
ORDER GRANTING IN PART AND DENYING IN PART DEFENDANT’S MOTION TO DISMISS
Case5:13-cv-01961-LHK Document13 Filed09/26/13 Page29 of 43
1
of or eavesdropping on a confidential communication, and that not all parties consented to the
2
eavesdropping. Flanagan v. Flanagan, 41 P.3d 575, 577 (Cal. 2002).
3
CIPA also contains a public utility exemption, which applies to claims under both sections
4
631 and 632. Cal. Penal Code §§ 631(b), 632(e). Neither section applies “to any public utility
5
engaged in the business of providing communications services and facilities, or to the officers,
6
employees, or agents thereof, where the acts otherwise prohibited by this section are for the
7
purpose of construction, maintenance, conduct or operation of the services and facilities of the
8
public utility.” Cal. Penal Code §§ 631(b), 632(e).
United States District Court
For the Northern District of California
9
Plaintiffs allege violations of both section 631 and section 632. See ECF No. 38-2 ¶ 321.
10
Google moves to dismiss on five bases. See ECF No. 44 at 23–24, 27–28. Google contends that
11
Plaintiffs lack standing to allege such violations and that the California law should not apply due to
12
choice of law principles. See id. Google also moves to dismiss Plaintiffs’ claims on substantive
13
bases, contending that neither section 631 nor section 632 applies to email and that the public
14
utility exemption applies. See ECF No. 44 at 21–23, ECF No. 56 at 14–15. Finally, Google moves
15
to dismiss Plaintiffs’ section 632 claim because the communications at issue in this case were not
16
confidential as defined by that section and because that section is preempted by the ECPA. See
17
ECF No. 44 at 25–27.
18
19
1.
Standing
Google first contends that Plaintiffs lack standing under Article III to assert a CIPA claim.
20
A federal court must ask whether a plaintiff has suffered sufficient injury to satisfy the “case or
21
controversy” requirement of Article III of the U.S. Constitution. ECF No. 44 at 23–24. To satisfy
22
Article III standing, a plaintiff must allege: (1) injury-in-fact that is concrete and particularized, as
23
well as actual or imminent; (2) wherein injury is fairly traceable to the challenged action of the
24
defendant; and (3) it is likely (not merely speculative) that injury will be redressed by a favorable
25
decision. Friends of the Earth, Inc. v. Laidlaw Envtl. Servs. (TOC), Inc., 528 U.S. 167, 180–81
26
(2000); Lujan v. Defenders of Wildlife, 504 U.S. 555, 560–61 (1992). A suit brought by a plaintiff
29
27
28
Case No.: 13-MD-02430-LHK
ORDER GRANTING IN PART AND DENYING IN PART DEFENDANT’S MOTION TO DISMISS
Case5:13-cv-01961-LHK Document13 Filed09/26/13 Page30 of 43
1
without Article III standing is not a “case or controversy,” and an Article III federal court therefore
2
lacks subject matter jurisdiction over the suit.
3
Google’s contention is that Plaintiffs have not suffered the “injury” required by Article III
to confer standing. ECF No. 44 at 24. Under Ninth Circuit precedent, the injury required by
5
Article III may exist by virtue of “statutes creating legal rights, the invasion of which creates
6
standing.” See Edwards v. First Am. Fin. Corp., 610 F.3d 514, 517 (9th Cir. 2010) (quoting Warth
7
v. Seldin, 422 U.S. 490, 500 (1975)). In such cases, the “standing question . . . is whether the
8
constitutional or statutory provision on which the claim rests properly can be understood as
9
United States District Court
For the Northern District of California
4
granting persons in the plaintiff’s position a right to judicial relief.” Id. (quoting Warth, 422 U.S.
10
at 500). In Edwards, the Ninth Circuit has held that the Real Estate Settlement Procedures Act
11
(“RESPA”) conferred standing to a homeowner who sought to challenge the kickback relationship
12
between the title insurer and title agency despite the fact that the homeowner suffered no
13
independent injury, through, for example, overpayment. Id. The court there held that the structure
14
of RESPA was such that independent injury was not needed; a plaintiff’s showing that the
15
defendant’s conduct violated the statute was sufficient to confer standing. Id. 10
Applying the Ninth Circuit’s decision in Edwards, courts in this district have found that
16
17
allegations of a Wiretap Act violation are sufficient to establish standing. In In re Facebook
18
Privacy Litigation, 791 F. Supp. 2d 705, 712 (N.D. Cal. 2011), for example, the court held that the
19
“Wiretap Act provides that any person whose electronic communication is ‘intercepted, disclosed,
20
or intentionally used’ in violation of the Act may in a civil action recover from the entity which
21
engaged in that violation.” Accordingly, the court found that where the plaintiffs had alleged that
22
10
23
24
25
26
27
28
The United States Supreme Court granted a petition for a writ of certiorari in Edwards on the
question of whether statutory injury alone could confer standing under Article III even though the
Courts of Appeal that had considered the question had unanimously concluded that allegations of
RESPA violations alone sufficed for standing. See First Am. Fin. Corp. v. Edwards, 131 S. Ct.
3022 (2011). After oral argument, however, the Supreme Court dismissed the writ as
improvidently granted. See First Am. Fin. Corp. v. Edwards, 132 S. Ct. 2536 (2012). This left in
place the Ninth Circuit’s decision in Edwards, which remains binding authority that this Court
must apply, as it does here.
30
Case No.: 13-MD-02430-LHK
ORDER GRANTING IN PART AND DENYING IN PART DEFENDANT’S MOTION TO DISMISS
Case5:13-cv-01961-LHK Document13 Filed09/26/13 Page31 of 43
1
their communications had been intercepted, they “alleged facts sufficient to establish that they have
2
suffered the injury required for standing under Article III.” Id. at 712; see also In re iPhone
3
Application Litig., 844 F. Supp. 2d 1040, 1055 (N.D. Cal. 2012) (“[A] violation of the Wiretap Act
4
. . . may serve as a concrete injury for the purposes of Article III injury analysis.”); In re Google,
5
Inc. Privacy Policy Litig., 2012 WL 6738343 (N.D. Cal. Dec. 28, 2012) (“[If viable], Plaintiffs’
6
Wiretap Act claim might help [show standing], [because] a violation of the rights provided under
7
the statute may be sufficient by itself to confer standing.”)
8
United States District Court
For the Northern District of California
9
The reasoning of these cases that find standing when there is an allegation of a Wiretap Act
violation applies equally to CIPA. Like the Wiretap Act, CIPA creates a private right of action
10
when a defendant engages in wiretapping or eavesdropping. Compare 18 U.S.C. § 2520(a)
11
(“[A]ny person whose wire, oral, or electronic communication is intercepted, disclosed, or
12
intentionally used in violation of this chapter may in a civil action recover from the person or
13
entity, other than the United States, which engaged in that violation), with Cal. Penal Code
14
§ 637.2(a) (“Any person who has been injured by a violation of this chapter may bring an action
15
against the person who committed the violation.”). Further, like the Wiretap Act, CIPA authorizes
16
an award of statutory damages any time a defendant violates the provisions of the statute without
17
any need to show actual damages. Compare 18 U.S.C. § 2520(c) (authorizing statutory damages),
18
with Cal. Penal Code § 637.2(a)(1) (same) and Cal. Penal Code § 637.2(c) (“It is not a necessary
19
prerequisite to an action pursuant to this section that the plaintiff has suffered, or be threatened
20
with, actual damages.”). Therefore, the Court finds that the allegation of a violation of CIPA, like
21
an allegation of the violation of the Wiretap Act, is sufficient to confer standing without any
22
independent allegation of injury. Like both RESPA and the Wiretap Act, therefore, CIPA creates a
23
statutory right the violation of which confers standing on a plaintiff.
24
Google relies exclusively on the differences in statutory text between CIPA and the Wiretap
25
Act to contend that CIPA requires an independent allegation of injury even where the Wiretap Act
26
does not. Specifically, Google notes that the provision of CIPA that creates a cause of action states
31
27
28
Case No.: 13-MD-02430-LHK
ORDER GRANTING IN PART AND DENYING IN PART DEFENDANT’S MOTION TO DISMISS
Case5:13-cv-01961-LHK Document13 Filed09/26/13 Page32 of 43
that, “[a]ny person who has been injured by a violation of this chapter may bring an action against
2
the person who committed the violation.” Cal. Penal Code § 637.2(a) (emphasis added). Google’s
3
contention is that the word “injured” means that Plaintiffs must show some injury independent of
4
the invasion of their statutory rights under CIPA. Google cites no authority for the proposition that
5
section 637.2 requires independent injury or the proposition that the word “injured” triggers an
6
obligation to demonstrate independent injury for the purposes of Article III standing. The
7
California case law on CIPA cuts against Google’s contention that “injured” requires independent
8
injury. As the California Court of Appeals has stated, “Section 637.2 is fairly read as establishing
9
United States District Court
For the Northern District of California
1
that no violation of the Privacy Act [CIPA] is to go unpunished. Any invasion of privacy involves
10
an affront to human dignity which the Legislature could conclude is worth at least $3,000. The
11
right to recover this statutory minimum accrued at the moment the Privacy Act [CIPA] was
12
violated.” Friddle v. Epstein, 21 Cal. Rptr. 85, 92 (Cal Ct. App. 1993); see also id. (“Plaintiff
13
invaded defendants’ privacy and violated the Privacy Act [CIPA] at the moment he began making
14
his secret recording. No subsequent action or inaction is of consequence to this conclusion.”);
15
accord Ribas v. Clark, 38 Cal. 3d 355, 365 (Cal. 1985) (“In view of the manifest legislative
16
purpose to accord every citizen’s privacy the utmost sanctity, section 637.2 was intended to
17
provide those who suffer an infringement of this aspect of their personal liberty a means of
18
vindicating their right.”).
19
Accordingly, the Court finds that CIPA and the Wiretap Act are not distinguishable for the
20
purposes of standing. Because courts have, under existing Ninth Circuit authority, consistently
21
held that the invasion of rights under the Wiretap Act is sufficient for Article III standing, this
22
Court concludes that the same is true of CIPA. All Plaintiffs need allege is an invasion of statutory
23
CIPA rights to survive a motion to dismiss on standing grounds. There is no dispute that they have
24
done so here. The Court therefore DENIES Google’s Motion to Dismiss the CIPA claims on
25
standing grounds.
26
27
28
32
Case No.: 13-MD-02430-LHK
ORDER GRANTING IN PART AND DENYING IN PART DEFENDANT’S MOTION TO DISMISS
Case5:13-cv-01961-LHK Document13 Filed09/26/13 Page33 of 43
1
2
2.
Choice of Law
Google contends that under choice of law principles, California law should not apply and
3
that the Court should accordingly dismiss Plaintiffs’ California claims. ECF No. 44 at 27–30.
4
Plaintiffs contend that the choice of law analysis should wait for later stages of the proceedings.
5
ECF No. 53 at 28. As set forth below, the choice of law inquiry raises complicated, fact-intensive
6
questions better answered at later stages of the litigation. Therefore, the Court DENIES the Motion
7
to Dismiss on choice of law grounds.
8
To determine which state’s law should apply, “[a] federal court . . . must look to the forum
United States District Court
For the Northern District of California
9
state’s choice of law rules to determine the controlling substantive law.” Mazza v. American
10
Honda Motor Co., Inc., 666 F.3d 581, 589 (9th Cir. 2012) (internal quotation marks omitted).
11
Under California law, class action plaintiffs have the burden to “show that California has sufficient
12
contact or sufficient aggregation of contacts to the claims of each class member.” Id. at 589–90
13
(internal quotation marks omitted). If this showing is made, “the burden shifts to the other side to
14
demonstrate that foreign law, rather than California law, should apply to class claims.” Id. at 590.
15
“California courts apply the so-called governmental interest analysis” to determine whether
16
California law should be applied on a class-wide basis.” Kearney v. Salomon Smith Barney, Inc.,
17
137 P.3d 914, 917 (Cal. 2006). Under this three-part test: “[1] the court determines whether the
18
relevant law of each of the potentially affected jurisdictions with regard to the particular issue in
19
question is the same or different . . .[; 2] if there is a difference, the court examines each
20
jurisdiction’s interest in the application of its own law under the circumstances of the particular
21
case to determine whether a true conflict exists . . . [; and 3] if the court finds there is a true
22
conflict, it carefully evaluates and compares the nature and strength of the interest of each
23
jurisdiction in the application of its own law . . . and then ultimately applies the law of the state
24
whose interest would be more impaired if its law were not applied.” Mazza, 666 F.3d at 590
25
(quoting McCann v. Foster Wheeler, LLC, 225 P.3d 517, 527 (Cal. 2010)).
26
27
28
33
Case No.: 13-MD-02430-LHK
ORDER GRANTING IN PART AND DENYING IN PART DEFENDANT’S MOTION TO DISMISS
Case5:13-cv-01961-LHK Document13 Filed09/26/13 Page34 of 43
1
The Court finds that Plaintiffs have established that their claims are sufficiently related to
California to trigger application of the three-part test. The Ninth Circuit has held that sufficient
3
aggregate contacts with California are established in a class action when a defendant’s corporate
4
headquarters is located in the state, advertising materials pertaining to representations the company
5
made to class members are created in the state, and one fifth of the class is located in California.
6
Mazza, 666 F.3d at 590. In this case, as Plaintiffs allege, Google is located in California, it
7
developed and implemented the practices at issue in this action in California, and one or more of
8
the physical interceptions at the heart of Plaintiffs’ claims occurred in California. ECF No. 38-2 ¶
9
United States District Court
For the Northern District of California
2
290 (“Google’s acts in violation of CIPA occurred in the State of California . . . . Google’s
10
implementation of its business decisions, practices, and standard ongoing policies which violate
11
CIPA took place in the State of California. Google profited in the State of California”); ECF No.
12
53 at 29. In short, California is the epicenter of the practices at issue in this case for all Plaintiffs.
13
Therefore, the Court finds that Plaintiffs have shown that “California has a constitutionally
14
sufficient aggregation of contacts to the claims of each putative class member.” Mazza, 666 F.3d
15
at 590.
16
Because the Court finds sufficient aggregate contacts, it turns to the first of the three-part
17
inquiry to determine whether California law or the law of another state should apply to the class
18
claims. The Court must determine whether there is a material conflict between the laws of
19
California and those of the Plaintiffs’ home states. Google contends that there is a conflict because
20
Alabama and Maryland law are narrower with respect to scope of liability, enforcement
21
mechanisms, and available remedies. ECF No. 44 at 28.
22
The Court cannot, at this stage, determine whether there are differences with respect to the
23
scope of liability. Google correctly contends that under Alabama and Maryland’s law, one party’s
24
consent is sufficient to negate an interception, while under California law, both parties must
25
consent. Id. Yet, it is not clear whether this difference in the scope of liability is material, that is
26
whether, it “make[s] a difference in this litigation.” Mazza, 666 F.3d at 590. This is because
34
27
28
Case No.: 13-MD-02430-LHK
ORDER GRANTING IN PART AND DENYING IN PART DEFENDANT’S MOTION TO DISMISS
Case5:13-cv-01961-LHK Document13 Filed09/26/13 Page35 of 43
1
Plaintiffs contend that neither party has consented, while Google contends that all parties have
2
consented. ECF No. 38-2 ¶ 102–97, ECF No. 44 at 13–14. Accordingly, on either party’s theory
3
of liability, the difference in state law with respect to the consent standard would not be a material
4
difference.
5
Therefore, the Court finds that it cannot conduct a meaningful choice of law analysis, such
as that contemplated by Mazza, at this early stage of the litigation where the issues of contention
7
are still in flux.11 As other courts have noted, the rigorous choice of law analysis required by
8
Mazza cannot be conducted at the motion to dismiss stage. See Clancy v. The Bromley Tea Co.,
9
United States District Court
For the Northern District of California
6
2013 WL 4081632 (N.D. Cal. Aug. 9, 2013) (“Such a detailed choice-of-law analysis is not
10
appropriate at [the motion for judgment on the pleadings] stage of the litigation. Rather, such a
11
fact-heavy inquiry should occur during the class certification stage, after discovery.”); In re Clorox
12
Consumer Litig., 894 F. Supp. 2d 1224, 1237 (N.D. Cal. 2012) (“Significantly, Mazza was decided
13
on a motion for class certification, not a motion to strike. At [the motion to dismiss] stage of the
14
instant litigation, a detailed choice-of-law analysis would be inappropriate. Since the parties have
15
yet to develop a factual record, it is unclear whether applying different state consumer protection
16
statutes could have a material impact on the viability of Plaintiffs’ claims.”) (citation omitted);
17
Donohue v. Apple, Inc., 871 F. Supp. 2d 913, 923 (N.D. Cal. 2012) (“Although Mazza may
18
influence the decision whether to certify the proposed class and subclass, such a determination is
19
premature. At [the motion to dismiss] stage in the litigation—before the parties have submitted
20
briefing regarding either choice-of-law or class certification—plaintiff is permitted to assert claims
21
under the laws of different states in the alternative.”); In re Sony Grand Wega KDF-E A10/A20
22
Series Rear Projection HDTV Television Litig., 758 F. Supp. 2d 1077, 1096 (S.D. Cal. 2010) (“In a
23
11
24
25
26
27
28
The Court recognizes that additional conflicts may arise out of California’s acknowledgement of
a private right of action and/or the remedies California allows under CIPA. However, under
California choice of law analysis, differences in remedies alone are not dispositive. The Court may
resolve the conflict between California and foreign law by “apply[ing] California law in a
restrained manner” with regard to monetary damages. Kearney, 39 Cal. 4th at 100–01. In any
case, the Court will resolve all conflict of law questions at the class certification stage.
35
Case No.: 13-MD-02430-LHK
ORDER GRANTING IN PART AND DENYING IN PART DEFENDANT’S MOTION TO DISMISS
Case5:13-cv-01961-LHK Document13 Filed09/26/13 Page36 of 43
1
putative class action, the Court will not conduct a detailed choice-of-law analysis during the
2
pleading stage.”).
3
Accordingly, the Court defers resolution of the choice of law issues until the class
4
certification phase and DENIES Google’s Motion to Dismiss on the basis of choice of law without
5
prejudice to Google raising this argument at a later stage.
6
3.
7
Section 631
Google contends that even if Plaintiffs’ section 631 challenge is not procedurally barred, it
is substantively deficient because that section does not apply to emails. ECF No. 44 at 21–23.
9
United States District Court
For the Northern District of California
8
Further, in its reply brief, Google contends that the public utility exemption applies. ECF No. 56 at
10
14–15.
11
a.
12
Application to Email
The Court finds that there is no binding authority with respect to whether section 631
13
applies to email.12 The only authority from the California courts is a Superior Court ruling. See
14
Diamond v. Google, Inc., CIV-1202715 (Cal. Super. Ct., Marin Cnty. Aug. 14, 2013) (finding,
15
without providing analysis, that allegations of interception of email communication are sufficient
16
to state a claim under Cal. Penal Code § 631). While two federal courts have been confronted with
17
the application of CIPA to Internet browsing history and emails, those matters were resolved on
18
other grounds before reaching the question of CIPA’s application to digital technologies generally
19
or email specifically. Valentine v. NebuAd, Inc., 804 F. Supp. 2d 1022 (N.D. Cal. 2011); Bradley
20
v. Google, 2006 WL 3798134, at *5–6 (N.D. Cal. Dec. 22, 2006).
21
In the absence of binding authority, this Court must predict what the California Supreme
22
Court would do if confronted with this issue. See Valentine, 804 F. Supp. 2d at 1027. The Court
23
begins by looking to the text. Section 631 establishes liability for:
24
12
25
26
27
28
California courts have, however, applied section 632 to internet communication technologies.
See People v. Nakai, 183 Cal. App. 4th 499 (2010); People v. Cho, 2010 WL 4380113 (Cal. Ct.
App. Nov. 5, 2010); People v. Griffitt, 2010 WL 5006815 (Cal. Ct. App. Dec. 9, 2010).
36
Case No.: 13-MD-02430-LHK
ORDER GRANTING IN PART AND DENYING IN PART DEFENDANT’S MOTION TO DISMISS
Case5:13-cv-01961-LHK Document13 Filed09/26/13 Page37 of 43
5
[a]ny person who, by means of any machine, instrument, or contrivance, or in any
other manner, intentionally taps, or makes any unauthorized connection, whether
physically, electrically, acoustically, inductively, or otherwise, with any
telegraphic or telephone wire, line cable, or instrument, including the wire, line,
cable, or instrument of any internal telephonic communication system, or who
willfully or without the consent of all parties to the communication, or in any
unauthorized manner, reads or attempts to read, or to learn the contents or
meaning of any message, report, or communication while the same is in transit or
passing over any wire, line or cable, or is being sent from, or received at any place
within this state.
6
Cal. Penal Code § 631. Google contends that the language “reads or attempts to read, or to learn
7
the contents or meaning of any message, report, or communication while the same is in transit or
8
passing over any wire, line or cable” applies only to interception of content on telephone and
9
telegraphic wires, lines, or cables, as the first clause of the statute describes. ECF No. 44 at 21. As
1
2
3
United States District Court
For the Northern District of California
4
10
a result, Google contends that the second clause, upon which Plaintiffs rely, cannot apply to email
11
since emails are not messages, reports or communications that pass over telephone or telegraphic
12
wires. Id.
13
The Court rejects Google’s reading of the statute. As a threshold matter, the second clause
14
of the statute, which creates liability for individuals who “read[] or attempt[] to read, or to learn the
15
contents or meaning of any message, report, or communication while the same is in transit or
16
passing over any wire, line or cable, or is being sent from, or received at any place within this
17
state[,]” is not limited to communications passing over “telegraphic or telephone” wires, lines, or
18
cables. See Cal. Penal Code § 631 (emphasis added). Furthermore, the Court finds no reason to
19
conclude that the limitation of “telegraphic or telephone” on “wire, line, cable, or instrument” in
20
the first clause of the statute should be imported to the second clause of the statute. The second
21
clause applies only to “wire[s], line[s], or cable[s]” — not “instrument[s,]” which are included in
22
the first clause. The Court finds that this difference in coverage between the first and second
23
clauses suggests that the Legislature intended the two clauses to apply to different types of
24
communications. Accordingly, the Court rejects Google’s contention that the limitations in the
25
first clause must also apply to the second clause. The Court therefore finds that the plain language
26
of the statute is broad enough to encompass email.
37
27
28
Case No.: 13-MD-02430-LHK
ORDER GRANTING IN PART AND DENYING IN PART DEFENDANT’S MOTION TO DISMISS
Case5:13-cv-01961-LHK Document13 Filed09/26/13 Page38 of 43
Further, the California Supreme Court’s repeated finding that the California legislature
2
intended for CIPA to establish broad privacy protections supports an expansive reading of the
3
statute. See Flanagan, 41 P.3d at 581 (“In enacting [CIPA], the Legislature declared in broad
4
terms its intent to protect the right of privacy of the people of this state from what it perceived as a
5
serious threat to the free exercise of personal liberties. This philosophy appears to lie at the heart
6
of virtually all the decisions construing [CIPA].”) (internal quotation marks and citations omitted);
7
Ribas v. Clark, 696 P.2d 637, 641 (Cal. 1985) (finding it is “probable” that the legislature designed
8
Section 631 as a catch all to “proscrib[e] attempts to circumvent other aspects of the Privacy Act,
9
United States District Court
For the Northern District of California
1
e.g., by requesting a secretary to secretly transcribe a conversation over an extension, rather than
10
tape recording it in violation of section 632”); Tavernetti v. Superior Court, 583 P.2d 737, 742
11
(Cal. 1978) (“Th[e] forceful expression of the constitutional stature of privacy rights [in California]
12
reflects a concern previously evinced by the Legislature in enacting the invasion of privacy
13
provisions of the Penal Code.”).
14
Moreover, the California Supreme Court regularly reads statutes to apply to new
15
technologies where such a reading would not conflict with the statutory scheme. For example, in a
16
previous evolution in communications technology, the California Supreme Court interpreted
17
“telegraph” functionally, based on the type of communication it enabled. In Davis v. Pacific
18
Telephone & Telegraph, the Supreme Court held that “telegraph lines” in a criminal law
19
proscribing the cutting of lines included telephone lines because “[t]he idea conveyed by each term
20
is the sending of intelligence to a distance . . . [thus] the term ‘telegraph’ means any apparatus for
21
transmitting messages by means of electric currents and signals.” Davis v. Pacific Telephone &
22
Telegraph Co., 59 P. 698, 699 (Cal. 1899); see also Apple v. Superior Court, 292 P.2d 883, 887
23
(Cal. 2013) (“Fidelity to legislative intent does not make it impossible to apply a legal text to
24
technologies that did not exist when the text was created.” (internal quotation marks omitted)).
25
26
27
28
In line with the plain language of the statute, the California Supreme Court’s
pronouncements regarding the broad legislative intent underlying CIPA to protect privacy, and the
38
Case No.: 13-MD-02430-LHK
ORDER GRANTING IN PART AND DENYING IN PART DEFENDANT’S MOTION TO DISMISS
Case5:13-cv-01961-LHK Document13 Filed09/26/13 Page39 of 43
1
California courts’ approach to updating obsolete statutes in light of emerging technologies, the
2
Court finds that section 631 of CIPA applies to emails.
3
4
b.
Public Utility Exemption
Google contends that even if CIPA applies to emails, it is a “public utility” that is exempt
from the statute. ECF No. 56 at 14–15. The Court declines to reach this conclusion. California’s
6
Constitution defines “public utilities” as “[p]rivate corporations and persons that own, operate,
7
control, or manage a line, plant, or system for . . . the transmission of telephone and telegraph
8
messages . . . directly or indirectly to or for the public.” Cal. Const., art. XII, § 3. The California
9
United States District Court
For the Northern District of California
5
Public Utility Code further defines this definition of “public utility” as “every common carrier
10
. . . , telephone corporation [or] telegraph corporation . . ., where the service is performed for, or the
11
commodity is delivered to, the public or any portion thereof.” Cal. Pub. Util. Code § 216(a). The
12
Public Utility Code further specifies that a “telegraph corporation” is “every corporation or person
13
owning, controlling, operating, or managing any telegraph line for compensation within this
14
State.” Id. § 236 (emphasis added). “Telegraph line” is defined as “all conduits, ducts, poles,
15
wires, cables, instruments, and appliances, and all other real estate, fixtures, and personal property
16
owned, controlled, operated, or managed in connection with or to facilitate communication by
17
telegraph, whether such communication is had with or without the use of transmission wires.” Id.
18
§ 235. The code uses analogous definitions for “telephone corporations” and “telephone lines.” Id.
19
§§ 233, 234.
20
In short, in California, a “public utility” is a precisely defined entity subject to an expansive
21
and exacting regulatory regime. Under the plain language of the statutes, merely operating a
22
service over a telephone or telegraph line does not render a company a public utility. Rather, the
23
critical question is whether the company owns, controls, operates or manages a telephone or
24
telegraph line. Cal. Pub. Util. Code § 236. Nothing in the record suggests that Google owns,
25
controls, operates, or manages a telephone or telegraph lines in California. Accordingly, the Court
26
finds that Google is not a “public utility” and thus does not qualify for the public utility exemption
39
27
28
Case No.: 13-MD-02430-LHK
ORDER GRANTING IN PART AND DENYING IN PART DEFENDANT’S MOTION TO DISMISS
Case5:13-cv-01961-LHK Document13 Filed09/26/13 Page40 of 43
1
of Cal. Penal Code §§ 631(b). The Court therefore DENIES Google’s Motion to Dismiss
2
Plaintiffs’ section 631 claims.
3
4.
4
Section 632
To state a claim under California Penal Code § 632, a plaintiff must prove (1) an electronic
recording of or eavesdropping on (2) a “confidential communication” (3) to which all parties did
6
not consent. Flanagan, 41 P.3d at 577. As set forth below, Plaintiffs have not established that the
7
communications at issue are confidential pursuant to section 632. Accordingly, the Court
8
GRANTS without prejudice Google’s Motion to Dismiss Plaintiffs’ section 632 claim. Because
9
United States District Court
For the Northern District of California
5
this second element of a section 632 claim is not met, the Court need not address whether email
10
constitutes an electronic recording under the statute nor need it address whether there was consent
11
under California law.13
12
A conversation is “confidential” under section 632 “if a party to that conversation has an
13
objectively reasonable expectation that the conversation is not being overheard or recorded . . . .
14
The standard of confidentiality is an objective one defined in terms of reasonableness.” Faulkner
15
v. ADT Sec. Servs., Inc., 706 F.3d 1017, 1019 (9th Cir. 2013). “To prevail against a 12(b)(6)
16
motion, then, [the plaintiff] would have to allege facts that would lead to the plausible inference
17
that his was a confidential communication — that is, a communication that he had an objectively
18
reasonable expectation was not being recorded.” Id. at 1020.
19
There is no authority from the California courts addressing whether emails can be
20
confidential communication. Some decisions from the California appellate courts, however,
21
suggest that internet-based communication cannot be confidential. These courts rely on the theory
22
that individuals cannot have a reasonable expectation that their online communications will not be
23
recorded. In People v. Nakai, 107 Cal. Rptr. 3d 402 (Cal. Ct. App. 2010), for example, the
24
California Court of Appeals found that section 632 did not protect instant message communications
25
13
26
27
28
The Court also need not address whether the ECPA preempts section 632 of CIPA, as Google
contends. See ECF No. 44 at 26–27.
40
Case No.: 13-MD-02430-LHK
ORDER GRANTING IN PART AND DENYING IN PART DEFENDANT’S MOTION TO DISMISS
Case5:13-cv-01961-LHK Document13 Filed09/26/13 Page41 of 43
of a criminal defendant charged with attempting to send harmful matter to a minor with intent to
2
arouse and seduce. There, the defendant, an adult man, had sent sexually explicit material via
3
instant message to a 35-year-old decoy, who was posing as a 12-year-old girl. Id. at 405–07. The
4
appellate court found that while the defendant intended that the communication be kept
5
confidential between himself and the recipient, he could not reasonably expect that the
6
communications would not be recorded. Id. at 418. Specifically, the court found that the fact that
7
the intended recipient could easily forward the information to others militated against finding that
8
there was a reasonable expectation that the instant message would be kept confidential. Id. As the
9
United States District Court
For the Northern District of California
1
court stated, “it was not reasonable for defendant to expect the communications to be confidential
10
because the circumstances reflect that the communications could have easily been shared or viewed
11
by . . . any computer user with whom [the intended recipient] wanted to share the communication.”
12
Id.; see also People v. Cho, 2010 WL 4380113 (Cal. Ct. App. Nov. 5, 2010) (holding chat
13
conversations are not confidential under section 632); People v. Griffitt, 2010 WL 5006815 (Cal.
14
Ct. App. Dec. 9, 2010) (“Everyone who uses a computer knows that the recipient of e-mails and
15
participants in chat rooms can print the e-mails and chat logs and share them with whoever they
16
please, forward them or otherwise send them to others.”).
17
The Court finds that Plaintiffs have not alleged facts that lead to the plausible inference that
18
the communication was not being recorded because email by its very nature is more similar to
19
internet chats. Unlike phone conversations, email services are by their very nature recorded on the
20
computer of at least the recipient, who may then easily transmit the communication to anyone else
21
who has access to the internet or print the communications. Thus, Plaintiffs have not plausibly
22
alleged that they had an objectively reasonable expectation that their email communications were
23
“confidential” under the terms of section 632.14
24
14
25
26
27
28
The Court’s holding that the emails are not “confidential” under section 632 is consistent with
the conclusion that Plaintiffs have nevertheless not consented to Google’s interceptions under the
Wiretap Act and state analogues. See supra section III.A.2. Determining whether a
communication is confidential under section 632 requires the Court to look to whether the intended
41
Case No.: 13-MD-02430-LHK
ORDER GRANTING IN PART AND DENYING IN PART DEFENDANT’S MOTION TO DISMISS
Case5:13-cv-01961-LHK Document13 Filed09/26/13 Page42 of 43
1
Therefore, the Court GRANTS Google’s Motion to Dismiss Plaintiffs’ section 632 claims.
2
In a case concerning whether a communication was confidential under section 632, the Ninth
3
Circuit affirmed a district court’s grant of a defendant’s motion to dismiss, but “[i]n an abundance
4
— perhaps an overabundance — of caution” remanded “to the district court for it to consider
5
allowing the plaintiff to amend his complaint in a manner that would satisfy federal pleading
6
standards.” Faulkner, 706 F.3d at 1021. Here too this Court in “an abundance of caution” grants
7
Plaintiffs’ leave to amend their Consolidated Complaint. Id.; Fed. R. Civ. Proc. 15(a).
C.
9
United States District Court
For the Northern District of California
8
Other State Law Claims
Plaintiffs also allege that Google violated Pennsylvania, Maryland, and Florida law. With
10
respect to Maryland and Florida law, Google’s sole contention in its Motion to Dismiss is that
11
these claims are derivative of Plaintiffs’ federal causes of action. See ECF No. 44 at 5. Google
12
expressly acknowledges that the Maryland and Florida anti-wiretapping statutes mirror the ECPA.
13
See id. Therefore, Google’s Motion to Dismiss these claims is based on its Motion to Dismiss
14
Plaintiffs’ federal claims. Because the Court denies Google’s Motion to Dismiss Plaintiffs’ federal
15
causes of action, the Court also DENIES Google’s Motion to Dismiss Plaintiffs’ Maryland and
16
Florida claims.
17
Google offers an independent basis for dismissing part of Plaintiff’s Pennsylvania law
18
cause of action. Specifically, Google contends that Pennsylvania law protects only the sender of
19
communication from wiretapping, not the recipient of that communication. See ECF No. 44 at 13.
20
As a result, Google moves to dismiss Plaintiffs’ Pennsylvania law claim brought by those who
21
received emails from Gmail addresses. Id.
22
23
24
25
26
27
28
recipient of the communication is likely to share the communication. In contrast, the question of
consent turns on whether Plaintiffs have authorized the third-party interceptor’s interference in the
communication. In the instant matter, the Court concludes that emails are not likely to be kept
confidential by the intended recipients under section 632. Nevertheless, individuals do not consent
to third parties’ interception of their emails.
42
Case No.: 13-MD-02430-LHK
ORDER GRANTING IN PART AND DENYING IN PART DEFENDANT’S MOTION TO DISMISS
Case5:13-cv-01961-LHK Document13 Filed09/26/13 Page43 of 43
1
Google relies on Klump v. Nazareth Area Sch. Dist., 425 F. Supp. 2d 622, 633 (E.D. Pa.
2006), where the court held that “[a] claimant must demonstrate ‘that he engaged in [a]
3
communication’. The intended recipient of an intercepted communication, therefore, has no
4
standing to raise claim [sic] under section 5725.” See ECF No. 44 at 13. Plaintiffs do not contest
5
that Klump limits the scope of their Pennsylvania cause of action to those who sent emails to Gmail
6
recipients and eliminates their cause of action against those who received emails from Gmail
7
senders. Rather, Plaintiffs contend only that this Court should not follow Klump because that case
8
was wrongly decided. See ECF No. 53 at 11. However, Plaintiffs do not point to any authority
9
United States District Court
For the Northern District of California
2
from the state or federal courts in Pennsylvania that is contrary to the court’s holding in Klump. In
10
the absence of contrary authority, this Court will follow the decision in Klump. Accordingly, the
11
Court GRANTS Google’s Motion to Dismiss with respect to the claims under Pennsylvania law
12
raised by Plaintiffs who received emails from Gmail users. In an abundance of caution, however,
13
the Court grants Plaintiffs leave to amend the Consolidated Complaint.
14
V.
15
CONCLUSION
For the foregoing reasons, the Court hereby GRANTS Google’s Motion to Dismiss with
16
leave to amend with respect to Plaintiffs’ CIPA section 632 claims and Plaintiffs’ Pennsylvania law
17
claim as it relates those who received emails from Gmail users. The Court DENIES Google’s
18
Motion to Dismiss with respect to all other claims. Plaintiffs shall file any amended complaint
19
within 21 days of this order. Plaintiffs may not add new causes of action or parties without a
20
stipulation or order of the Court under Rule 15 of the Federal Rules of Civil Procedure. Failure to
21
cure deficiencies will result in dismissal with prejudice.
22
IT IS SO ORDERED.
23
24
Dated: September 26, 2013
_________________________________
LUCY H. KOH
United States District Judge
25
26
27
28
43
Case No.: 13-MD-02430-LHK
ORDER GRANTING IN PART AND DENYING IN PART DEFENDANT’S MOTION TO DISMISS
1
2
CERTIFICATE OF SERVICE
I hereby certify that on October 11, 2013, I caused the foregoing to be electronically filed with
3 the Clerk of the Court using the CM/ECF system which will send notification of such filing to the
4 e-mail addresses denoted on the Electronic Mail Notice List, and I hereby certify that I caused the
5 foregoing document or paper to be mailed via the United States Postal Service to the non-CM/ECF
6 participants indicated on the Manual Notice List.
7
I certify under penalty of perjury under the laws of the United States of America that the
8 foregoing is true and correct. Executed on October 11, 2013.
9
10
DATED: October 11, 2013
Respectfully Submitted,
11
12
13
14
15
16
17
KIESEL LAW LLP
By:
/s/ Paul R. Kiesel
Paul R. Kiesel
kiesel@kbla.com
8648 Wilshire Boulevard
Beverly Hills, California 90211
Tel.: 310-854-4444
Fax: 310-854-0812
18
19
20
21
22
23
24
25
26
27
28
5:12-md-02314-EJD
PLAINTIFFS’ REQUEST FOR LEAVE TO FILE
STATEMENT OF RECENT DECISION
Disclaimer: Justia Dockets & Filings provides public litigation records from the federal appellate and district courts. These filings and docket sheets should not be considered findings of fact or liability, nor do they necessarily reflect the view of Justia.
Why Is My Information Online?