JACQUELINE SCOTT CORLEY, Magistrate Judge.
This lawsuit arises out of Defendant Trans Union, LLC's identification of Plaintiff Sergio Ramirez as potentially being a person on the United States government's list of terrorists, drug traffickers, and others with whom Americans are prohibited from doing business. The Court previously certified a class action alleging three causes of action under the Fair Credit Reporting Act, and three under its state counterpart, the California Consumer Credit Reporting Agencies Act. See Ramirez v. Trans Union, LLC, 301 F.R.D. 408 (N.D. Cal. 2014). Following the United States Supreme Court's decision in Spokeo, Inc. v. Robins, 136 S.Ct. 1540 (2016), Defendant filed the now pending motion to decertify the class. (Dkt. No. 198.) Upon consideration of the parties' submissions and oral argument on October 6, 2016, the motion is DENIED. Plaintiff suffered a concrete injury and therefore has standing to pursue all of his claims. Under binding Ninth Circuit precedent his standing is adequate for purposes of the class, and, in any event, in light of the specific circumstances alleged here the absent class members also suffered a concrete injury.
The Court discussed the factual background of this action at length in its class certification order and only briefly summarizes the relevant facts here. (Dkt. No. 140.)
The United States Treasury Department's Office of Foreign Assets Control ("OFAC") publishes a list of individuals, such as terrorists and narcotics traffickers, who people in the United States are generally prohibited from doing business with, including the extension of credit ("the OFAC List"). (Dkt. No. 140 at 2.) Trans Union, a consumer credit reporting agency, offers a product known as "OFAC Advisor," "OFAC Alert," or "OFAC Name Screen" as an add-on to traditional credit reports. (Id.)
In February 2011, Plaintiff Sergio Ramirez and his wife visited a Nissan dealership to purchase a car on credit. They completed a credit application with each's name, address, social security number, and date of birth, among other identifying information. (Dkt. No. 140 at 3.) The dealer used the information to obtain a Trans Union consumer credit report for Plaintiff and his wife. Plaintiff's report advised the dealer: "OFAC ADVISOR ALERT — INPUT NAME MATCHES NAME ON THE OFAC DATABASE." (Dkt. No. 110-10.) As a result of this OFAC alert, Plaintiff was unable to obtain credit to purchase the car jointly with his wife; instead, his wife obtained the loan and purchased the car solely in her name. (Dkt. No. 128-14 at 22:13-24.) When Plaintiff telephoned Trans Union the next day about the OFAC Alert, an employee told Plaintiff that he did not have an OFAC Alert on his credit report.
At that time, Trans Union's OFAC Alert service used only the consumer's first and last name to search the OFAC List data, even if Trans Union possessed additional identifying information, such as birth date or address. (Dkt. No. 140 at 2.) When the computerized search logic returns a name match, Trans Union automatically places an OFAC Alert on the consumer report provided to the customer without any further investigation or confirmation. (Id. at 3.)
Nearly a year after he learned of the OFAC Alert, Plaintiff filed this class action against Trans Union, bringing claims under the Fair Credit Reporting Act ("FCRA"), 15 U.S.C. § 1681 et seq., and its state counterpart, the California Consumer Credit Reporting Agencies Act ("CCRAA"), Cal. Civ. Code § 1785.1 et seq. (Dkt. No. 1.) These claims are divisible into two categories. The first are Plaintiff's "disclosure claims," which are brought pursuant to the FCRA, 15 U.S.C. § 1681g(a) & (c) and the CCRAA, § 1785.10. Section 1681g(a) requires a credit reporting agency to "clearly and accurately" disclose to a consumer "[a]ll information in the consumer's file" upon a consumer's request, and 1681g(c) requires a summary of consumer rights to be provided with each consumer file disclosure. CCRAA § 1785.10 and § 1785.15(f) are analogous state statutes. The second category involves Plaintiff's "reasonable procedures" claims under the FCRA, 15 U.S.C. § 1681e(b) and CCRAA § 1785.14(b). Section 1681e(b) requires a consumer reporting agency to "follow reasonable procedures to assure maximum possible accuracy of the information concerning the individual about whom the report relates," while its California counterpart, section 1785.14(b), includes similar language.
In July 2014, the Court certified Plaintiff's FCRA claims for a class of "all natural persons in the United States and its Territories to whom Trans Union sent a letter similar in form to the March 1, 2011 letter Trans Union sent to Plaintiff regarding `OFAC (Office of Foreign Assets Control) Database' from January 1, 2011 — July 26, 2011." (Dkt. No. 140.) The Court also certified a California sub-class on Plaintiff's CCRAA reasonable procedure claim for injunctive relief, but declined to certify a CCRAA subclass for damages.
A year later, the Court granted Defendant's motion to stay the case, pending the outcome of the Supreme Court's review of the Ninth Circuit's decision in Robins v. Spokeo, Inc., 742 F.3d 409 (9th Cir. 2014) upon which this Court relied in granting class certification of the FCRA class. (Dkt. No. 184.) The Supreme Court decided Spokeo on May 16, 2016. Spokeo, Inc. v. Robins, 136 S.Ct. 1540 (2016). In light of that decision, this Court lifted the stay and issued an amended scheduling order. (Dkt. Nos. 195, 196.) Defendant then filed the now pending motion to decertify the class contending primarily that Plaintiff lacks Article III standing. (Dkt. No. 198.)
An order certifying a class "may be altered or amended before final judgment." Fed. R. Civ. P. 23(c)(1). "In considering the appropriateness of decertification, the standard of review is the same as a motion for class certification: whether the Rule 23 requirements are met." Ridgeway v. Wal-Mart Stores, Inc., 2016 WL 4529430, at *12 (N.D. Cal. Aug. 30, 2016). Parties should be able to rely on a certification order and "in the normal course of events it will not be altered except for good cause," such as "discovery of new facts or changes in the parties or in the substantive or procedural law." O'Connor v. Boeing N. Am., Inc., 197 F.R.D. 404, 409-10 (C.D. Cal. 2000). "The party seeking decertification bears the burden of demonstrating that the elements of Rule 23 have not been established." In re: Autozone, Inc., No. 3:10-MD-02159-CRB, 2016 WL 4208200, at *9 (N.D. Cal. Aug. 10, 2016) (internal citation omitted).
Defendant argues for decertification on two related grounds. First, in light of the Supreme Court's Spokeo decision, Plaintiff did not suffer a concrete injury and thus does not have standing; therefore the action must be dismissed for lack of subject matter jurisdiction. Second, and again in light of Spokeo, Defendant insists that each class member must have suffered a "concrete injury" and that such inquiry is an individual question that renders certification is improper for a variety of reasons.
Article III standing consists of three "irreducible constitutional minimum" requirements: "[t]he plaintiff must have (1) suffered an injury in fact, (2) that is fairly traceable to the challenged conduct of the defendant, and (3) that is likely to be redressed by a favorable judicial decision." Spokeo, 136 S. Ct. at 1547. "To establish injury in fact, a plaintiff must show that he or she suffered `an invasion of a legally protected interest' that is `concrete and particularized' and `actual or imminent, not conjectural or hypothetical.'" Id. at 1548 (citing Lujan v. Defs. of Wildlife, 504 U.S. 555, 560 (1992).
In Spokeo, the plaintiff filed a class action complaint against a consumer reporting agency for alleged violations of Section 1681 of the FCRA. Spokeo, 136 S. Ct. at 1545-46. Specifically, the plaintiff alleged that Spokeo violated the FCRA by providing inaccurate information about him in a generated credit report, including that he is married, has children, has a job, is in his 50s, and is relatively affluent with a graduate degree. Id. at 1546. The district court dismissed the complaint for lack of standing, but the Ninth Circuit reversed, finding that the plaintiff had adequately alleged an injury in fact for the statutory violation. Id. On review, the Supreme Court vacated the decision because the Ninth Circuit's "standing analysis was incomplete"; although the Ninth Circuit found that the plaintiff had adequately alleged a "particularized" injury—i.e., violation of his statutory rights under the FCRA—the Ninth Circuit failed to consider whether that injury satisfied the "concreteness" requirement for an injury in fact. Id. at 1548 ("We have made it clear time and time again that an injury in fact must be both concrete and particularized."). To be "particularized," an injury "must affect the plaintiff in a personal and individual way," while "concreteness" requires an injury to be "`de facto'; that is, it must actually exist." Id. at 1548 (citation omitted). The Supreme Court noted, however, that "concrete" is "not . . . necessarily synonymous with `tangible,'" and "intangible injuries can . . . be concrete." Id. at 1549. The Court remanded the case to the Ninth Circuit to consider "whether the particular procedural violations alleged in [the] case entail a degree of risk sufficient to meet the concreteness requirement." Id. at 1550.
Under FCRA Section 1681g(a) a credit reporting agency must "clearly and accurately" disclose to a consumer "[a]ll information in the consumer's file" upon a consumer's request, and provide a summary of consumer rights to be provided with each consumer file disclosure. See § 1681g(c). Plaintiff contends that Trans Union violated Section 1681g of the FCRA by not identifying the OFAC Alert in his disclosed consumer file, but instead notifying him of the OFAC Alert in a separate letter, and again by not explicitly stating in that separate letter how a consumer could dispute any inaccurate information. Defendant urges that Plaintiff does not have standing to make these claims. Given that Plaintiff was alerted to the OFAC information in the separate letter, that he in fact contacted Defendant to dispute the information, and that the OFAC Alert was removed from his file, he did not suffer a concrete injury. Defendant thus labels the disclosure claims as purely procedural violations akin to the incorrect zip code violation discussed in Spokeo. See Spokeo, 136 S. Ct. at 1550 (noting that "not all inaccuracies cause harm or present any material risk of harm" as with "an incorrect zip code."). The Court disagrees.
Plaintiff did not receive any OFAC information when he requested a complete copy of his file; he thus was inaccurately notified that Defendant had not identified him as matching a name on the OFAC list. The omission was material: the OFAC Alert—being identified as a potential terrorist or drug trafficker—is not even close to the innocuous zip code mentioned in Spokeo. And when Plaintiff did receive the OFAC information in a separate letter, it stated it was being provided "as a courtesy" and not that it was an amendment to the incomplete disclosure of his consumer file. Finally, the "courtesy" letter also did not include a disclosure as to how to dispute inaccurate information. These alleged violations created a risk that Plaintiff would be harmed in precisely the way Congress was attempting to prevent when it mandated what disclosures consumer credit reporting agencies must make to consumers: a risk that the consumer is not made aware of material inaccurate information in the consumer's file, nor aware of how to dispute the inclusion of the harmful information. Thus, these omissions entailed a degree of risk sufficient to satisfy Article III's concrete injury requirement. See Spokeo, 136 S. Ct. at 1550.
Defendant insists that because Plaintiff contacted Trans Union about the OFAC Alert notwithstanding the alleged disclosure violations he could not have suffered a concrete injury. What Defendant means, then, is that an FCRA case can never even get through the front door— that is, get past standing—unless and until a plaintiff suffers some tangible injury from nondisclosure of required information. Of course, at some point the plaintiff has to become aware of the omitted information, otherwise the plaintiff will never know that he has a claim. But, according to Defendant, if the consumer is able to avert the risk created by the nondisclosure once made aware of the consumer reporting agency's error such that the consumer does not suffer a tangible injury, the consumer reporting agency is insulated from suit. Spokeo suggests no such thing. See Spokeo, 136 S. Ct. at 1549 (holding that "concrete" is not synonymous with tangible).
The recent post-Spokeo decision in Larson v. Trans Union LLC, No. 12-cv-05726-WHO, 2016 WL 4367253 (N.D. Cal. Aug. 11, 2016), is instructive. There the court considered whether a plaintiff had standing to bring a Section 1681g disclosure claim very similar to the claims brought here. The plaintiff argued that an OFAC disclosure indicating that the plaintiff was a "possible OFAC match" made in a separate letter from the credit report left the plaintiff uncertain and confused as to whether he had a right to dispute the OFAC match. Id. at *2. The court concluded that the plaintiff had standing to pursue an "informational injury" such as this under section 1681g(a). Id. at *3. In so concluding, the court noted that Spokeo implicitly recognized "informational injury" as sufficient to establish concrete injury. Id. (holding that the plaintiff's "claim is based on the sort of `informational' injury that the Spokeo Court implicitly recognized. . . and that a number of other cases, from both before Spokeo and after, have found sufficient to support Article III standing.") (internal citations omitted). The court thus reasoned that the plaintiff's Section 1681g claim was based on "something more than a `bare procedural violation'—such as the `dissemination of an incorrect zip code'—that cannot `cause harm or present any material risk of harm.'" Id. (citing Spokeo, 136 S. Ct. at 1549-50). The same reasoning applies here.
"[T]he violation of a procedural right granted by statute can be sufficient in some circumstances to constitute injury in fact. In other words, a plaintiff in such a case need not allege any additional harm beyond the one Congress has identified." Spokeo, 136 S. Ct. at 1549. The circumstances of the nondisclosure violations alleged here created a material risk of real harm and thus constitute an injury sufficient for constitutional standing purposes. Plaintiff therefore has standing to pursue his disclosure claims.
Defendant's standing argument with respect to the accuracy claims is meritless. The evidence supports a finding that Defendant's OFAC Alert on Plaintiff's credit file prevented him from receiving credit to purchase a car. Further, he testified that upon discovering that he had an OFAC alert on his file he was "concerned" and "scared" because he "was on the terrorist list." (Dkt. No. 128-14 at 21:24-22:2; 25:1-3.) If these facts do not constitute concrete injury the Court does not know what does. Further, an inaccurate OFAC Alert creates a material risk of real harm, such as the emotional distress a consumer may suffer upon learning that he or she has been identified as a potential match, or harm to employment or credit prospects. See Larson, 2016 WL 4367253 at *3. The concrete injury requirement is easily satisfied for the accuracy claims.
Defendant next argues that each class member must have suffered a concrete injury and that such an inquiry presents individual questions which render certification inappropriate. The premise of Defendant's argument—that each class member must have suffered a concrete injury— is wrong. "In a class action, standing is satisfied if at least one named plaintiff meets the requirements." Bates v. United Parcel Serv., Inc., 511 F.3d 974, 985 (9th Cir. 2007) (en banc); see also Lewis v. Casey, 518 U.S. 343, 395 (1996) ("[Unnamed plaintiffs] need not make any individual showing of standing [in order to obtain relief], because the standing issue focuses on whether the plaintiff is properly before the court, not whether represented parties or absent class members are properly before the court.") (internal quotation marks and citation omitted); Larson, 2016 WL 4367253, at *4 ("Larson's showing of standing for himself is sufficient to establish standing for the class as a whole."). Remarkably, Defendant's briefs do not cite the Ninth Circuit's en banc Bates decision; instead, it argues that Plaintiff's standing is inadequate because under Mazza v. Am. Honda Motor Co., 666 F.3d 581, 594 (9th Cir. 2012), "[n]o class may be certified that contains members lacking Article III standing." (Dkt. Nos. 198 at 24; 202 at 14.) At oral argument Defendant suggested that because Mazza post-dates Bates, it overruled Bates. Not so.
"Only the en banc court can overturn a prior panel precedent." United States v. Parker, 651 F.3d 1180, 1184 (9th Cir. 2011), abrogated on other grounds by United States v. Apel, 134 S.Ct. 1144 (2014). While a three judge panel "may reexamine normally controlling circuit precedent" where "the reasoning or theory of prior circuit authority is clearly irreconcilable with the reasoning or theory of intervening higher authority," Miller v. Gammie, 335 F.3d 889, 892-93 (9th Cir. 2003), Mazza does not identify any "clearly irreconcilable" intervening higher authority; indeed, Mazza does not even cite Bates, let alone provide analysis as to why Bates had been overruled. Moreover, even after Mazza the Ninth Circuit has continued to cite Bates' holding as good law. See Ollier v. Sweetwater Union High Sch. Dist., 768 F.3d 843, 865 (9th Cir. 2014); see also Torres v. Mercer Canyons Inc., No. 15-35615, 2016 WL 4537378, at *8 n.6 (9th Cir. Aug. 31, 2016) (commenting that Mazza only signifies "that it must be possible that class members have suffered injury, not that they did suffer injury, or that they must prove such injury at the certification phase" and citing to Bates).
Spokeo did not alter the well-settled legal principle set forth in Bates; it nowhere addresses the question. Nor did the Supreme Court's decision in Tyson Foods, Inc. v. Bouaphakeo, 136 S.Ct. 1036 (2016). Tyson did not involve Article III standing requirements in class actions. Indeed, the Tyson Court expressly stated that it was not considering "whether a class may be certified if it contains members who were not injured and have no legal right to any damages." Tyson, 136 S. Ct. at 1049 (internal quotation marks omitted). The Court did not consider it because the petitioner conceded that the class could be certified even if class members were not injured. Id.
Finally, even if each class member was required to show concrete injury, it is satisfied here. Each class member was incorrectly identified as a potential OFAC match and each received the same allegedly inaccurate disclosures as did Plaintiff. Thus, regardless of whether the inaccurate credit report was disseminated to a third party, the procedural violations alleged as to each class member "entail a degree of risk sufficient to meet the concreteness requirement." Spokeo, 136 S. Ct. at 1550.
Plaintiff has suffered a concrete and particularized injury with respect to his disclosure and accuracy claims and therefore has constitutional standing. Because under long-standing and binding Ninth Circuit precedent class action standing is satisfied if at least one named plaintiff meets standing requirements, the motion to decertify the class on the grounds that the standing inquiry creates individual questions as to each class member fails. Further, under the particular circumstances of the alleged violations here, each class member has suffered a concrete injury and thus has standing. The Court therefore DENIES Defendant's Motion to Decertify the Class.
This Order disposes of Docket Number 198.