MARTIN, Circuit Judge:
LabMD, Inc. is an Atlanta-based laboratory that performed cancer-detection testing services for doctors. After the Federal Trade Commission (FTC) discovered that LabMD patient information files were available on a peer-to-peer file-sharing network, it launched an investigation into LabMD's data-security practices. The investigation persisted for three years, leading LabMD's CEO, Michael Daugherty, to publicly criticize the FTC's actions. Shortly after Mr. Daugherty posted an online trailer for his book, "The Devil Inside the Beltway," which he says exposes corruption in the federal government, the FTC filed an administrative complaint against the company. The administrative proceeding is ongoing.
This appeal addresses the District Court's dismissal of LabMD's challenges to the FTC's ability to regulate and conduct enforcement proceedings in the area of healthcare data privacy. LabMD argues that the FTC's enforcement action violates the Administrative Procedure Act (APA), is ultra vires, and is unconstitutional.
Before we can reach the merits of LabMD's claims, we must first face the central question of whether the District Court has subject-matter jurisdiction to consider LabMD's challenges while the administrative proceeding is ongoing. Because we hold that the FTC's Order denying LabMD's motion to dismiss was not a "final agency action," as is required of claims made under the APA, those claims were properly dismissed. And because we conclude that LabMD's other claims — that the FTC's actions were ultra vires and unconstitutional — are intertwined with its APA claim for relief and may only be heard at the end of the administrative proceeding, we affirm the District Court's order dismissing the case for lack of subject-matter jurisdiction.
In 2008, internet-security company Tiversa, Inc. notified LabMD that it had obtained sensitive patient information from LabMD. Under circumstances that remain hotly disputed by the parties, the FTC learned about the possible breach of security involving patient information and began an investigation into LabMD's data-security practices in 2010. On July 19, 2013, Mr. Daugherty posted an online trailer to his book highlighting corruption in the federal government, including specific claims about the FTC. Three days after Mr. Daugherty posted the trailer online, the FTC gave notice of its intent to file a complaint against LabMD.
In August 2013, the FTC filed its administrative complaint, alleging that LabMD violated Section 5 of the FTC Act by engaging in an "unfair ... act[] or practice[]" by failing to prevent unauthorized access to its patient information. LabMD moved to dismiss the FTC Complaint, which the FTC denied in a January 2014 Order. LabMD next filed suit in the District Court for the District of Columbia, seeking an injunction to stay the administrative action from going forward on the grounds that it was an improper expansion of FTC jurisdiction, was retaliatory, and violated the Due Process Clause. LabMD v. FTC, No. 1:13-cv-1787 (D.D.C. Nov. 14, 2013). LabMD filed a similar action in this Court, making the same allegations. LabMD Inc. v. FTC, No. 13-15267-F (11th Cir. Feb. 18, 2014). We denied LabMD's claim, citing our lack of jurisdiction over a non-final agency action, but we declined to address whether the District Court could hear any of the claims. Id. LabMD voluntarily dismissed its District of Columbia suit.
On March 20, 2014, LabMD filed this suit in the Northern District of Georgia, alleging that: (1) the FTC's administrative
We review de novo a district court's grant of a motion to dismiss for lack of subject-matter jurisdiction. Cash v. Barnhart, 327 F.3d 1252, 1255 n. 4 (11th Cir. 2003) (per curiam). The District Court dismissed LabMD's APA claim for lack of subject-matter jurisdiction because the FTC's Order denying dismissal was not a final order. The District Court also dismissed the related constitutional and ultra vires claims as premature. We first turn to LabMD's challenge under the APA. LabMD argues that the Complaint and Order were sufficiently final to confer subject-matter jurisdiction over its APA claim. We cannot agree.
According to the APA, "final agency action for which there is no other adequate remedy in a court [is] subject to judicial review." 5 U.S.C. § 704. Absent a final action, the courts are to exercise restraint so that the administrative agency may correct any errors by conducting its own internal appeals and by applying its own institutional expertise. The Supreme Court has held that an action must satisfy two requirements to be final: "First, the action must mark the consummation of the agency's decisionmaking process — it must not be of a merely tentative or interlocutory nature. And second, the action must be one by which rights or obligations have been determined, or from which legal consequences will flow." Bennett v. Spear, 520 U.S. 154, 177-78, 117 S.Ct. 1154, 1168, 137 L.Ed.2d 281 (1997) (internal citations and quotation marks omitted).
Under the Bennett standard, the Order and Complaint LabMD seeks to have us review are not final. First, neither document is a consummation of the agency's decisionmaking process. LabMD suggests that these documents "effectively determined there would be legal consequences imposed on LabMD," because the filing of an FTC complaint almost certainly leads to a cease-and-desist order. But, high odds of a cease-and-desist order coming from the FTC do not advance our ability to review the FTC actions. It is the nature of the action we must consider, and the Complaint and Order do not finally decide these issues. By definition, the denial of a motion to dismiss ensures that the proceeding will continue to a later, final order. In the same way, a complaint is just an initial document.
Next, no "direct and appreciable legal consequences" flowed from either FTC action, and "no rights or obligations have been determined," because the agency proceeding is ongoing. See Bennett, 520 U.S. at 178, 117 S.Ct. at 1168-69. LabMD argues that, on two occasions, the FTC characterized its Order as final, and therefore we must accept it as such. First, the FTC described its Order here as a "definitive interpretation of the application of Section 5." Second, the FTC sought Chevron
Even though the Supreme Court has previously held that an FTC complaint is not final agency action, see FTC v. Standard Oil Co. of Cal., 449 U.S. 232, 239, 101 S.Ct. 488, 493, 66 L.Ed.2d 416 (1980), LabMD suggests that its challenge to the FTC's jurisdiction can be heard at this early stage in the administrative proceeding because it falls within an exception to Standard Oil. Later circuit court cases interpreting Standard Oil suggest that its holding does have limited exceptions which would allow district court review of administrative actions. See, e.g., Athlone Indus., Inc. v. Consumer Prod. Safety Comm'n, 707 F.2d 1485, 1489 & n. 30 (D.C.Cir.1983) (recognizing an exception to the exhaustion requirement and permitting district court review of an agency's authority to impose civil penalties); CSI Aviation Servs., Inc. v. U.S. Dep't of Transp., 637 F.3d 408, 412-13 (D.C.Cir.2011) (holding that a Department of Transportation warning letter and exemption order were sufficiently "final" because they (1) included a definitive statement that the plaintiff's business was violating the Federal Aviation Act; (2) presented a "purely legal" question with no factual disputes; and (3) imposed an immediate burden by effectively requiring the business to stop operating). Even if those exceptions applied in this Circuit, LabMD's challenge here does not fit within their terms. As set forth in our discussion above, the FTC Complaint and Order are not sufficiently definitive, cleanly legal, or immediately burdensome so as to require our review at this stage. The FTC is best suited to develop the factual record, continue to evaluate its position on the issues, and apply its expertise to complete the proceeding. All of this will allow for more robust appellate review by this Court when the action concludes.
LabMD next suggests that its constitutional and ultra vires claims can be heard even if we do not reach the APA claim. But under similar circumstances, the Supreme Court has declined to consider constitutional claims before the administrative process was completed. See Thunder Basin Coal Co. v. Reich, 510 U.S. 200, 215, 114 S.Ct. 771, 780, 127 L.Ed.2d 29 (1994) (holding that the district court did not have subject-matter jurisdiction to hear a pre-enforcement due process challenge). The Court in Thunder Basin emphasized that the claims "c[ould] be meaningfully addressed in the Court of Appeals" after final agency determination. Id. Our own Court's decision in Doe v. FAA, 432 F.3d 1259 (11th Cir. 2005), also clarifies that all constitutional claims must be funneled through the direct-appeal process after a final agency action if that is the scheme created by Congress. Id. at 1262-63. The FTC Act provides for appellate review by the Courts of Appeals after the agency action is complete, see 15 U.S.C. § 45(c), and similar to the challenger in Doe, LabMD's claims can be heard at that time.
LabMD suggests that its First Amendment retaliation claim — alleging that the FTC brought its Complaint to retaliate against LabMD for Mr. Daugherty's book — is less intertwined with the enforcement proceeding than its other constitutional claims. This, LabMD contends, is because the retaliatory conduct was complete at the moment the Complaint was filed. LabMD suggests that the District Court need only examine the filing of the FTC's Complaint to determine whether it was retaliatory in violation of the First Amendment. Any later developments in the administrative proceeding, LabMD reasons, have no bearing on whether the filing of the Complaint itself was retaliatory. Thus, LabMD concludes that the matters are not intertwined, and its retaliation claim should be heard even before the administrative proceeding ends.
Even if we were to accept LabMD's distinction as true, none of our cases suggest that First Amendment retaliation claims must be treated differently than other constitutional claims under Thunder Basin and Doe. We conclude that LabMD's First Amendment claim must join its other claims to await appellate review after the Commission's proceedings are final, as Congress contemplated in the FTC Act.
The District Court correctly held that it did not have jurisdiction over LabMD's claims. And until the administrative proceeding is complete, we too have no jurisdiction to evaluate the merits. We