Summary
holding that while, “[t]he Android ID is a randomly generated number that is unique to each user and device [i]t is not, however, akin to a name. Without more, an Android ID does not identify a specific person . . . is not personally identifiable information.”
Summary of this case from Rancourt v. Meredith Corp.Opinion
CIVIL ACTION FILE NO. 1:14-CV-484-TWT
10-08-2014
MARK ELLIS individually and on behalf of all others similarly situated, Plaintiff, v. THE CARTOON NETWORK, INC. a Delaware corporation, Defendant.
OPINION AND ORDER
This case arises under the Video Privacy Protection Act ("VPPA"). It is before the Court on the Defendant's Motions to Dismiss [Docs. 20, 26]. For the reasons stated below, the Defendant's Motion to Dismiss Plaintiff's Class Action Complaint [Doc. 20] is DENIED as moot. The Defendant's Motion to Dismiss Plaintiff's Amended Class Action Complaint [Doc. 26] is GRANTED.
I. Background
The Defendant The Cartoon Network, Inc., is a Delaware corporation, with its principal place of business in Atlanta, Georgia. It produces mostly animated television programs. It also offers video content to consumers through its mobile software application, the Cartoon Network App (the "CN App"). The CN App runs on mobile devices, including smartphones with Android operating systems. To use the CN App, users must visit the Google Play Store, download the CN App, and then install it.
Amended Class Action Compl. ¶ 6.
Id. ¶ 1.
Id.
Id.
Id. ¶ 10.
The Plaintiff Mark Ellis is a North Carolina citizen. In early 2013, Ellis downloaded the CN App and began using it to watch video clips on his Android device. Ellis never consented to have any information released to third parties. Non-party Bango is a data analytics company based in the United Kingdom. Bango specializes in tracking individual user behaviors across websites and mobile applications.
Id. ¶ 5.
Id. ¶ 32.
Id. ¶ 33.
Id. ¶ 12 n.3.
Id.
Each time a consumer, like the Plaintiff, accesses the CN App, a complete record of the user's video history, along with the user's Android ID, is transmitted to Bango. Bango additionally collects a wide variety of information about consumers from other sources. Once Bango received the Android IDs through the CN App, it was able to reverse engineer the consumers' identities using the information previously collected from other sources. The Plaintiff now brings this putative class action on behalf of himself and others whose Android IDs were disclosed to Bango. He alleges that the Android IDs constitute personally identifiable information under the VPPA. He alleges that disclosure of his Android ID was a violation of that statute entitling him and the putative class to an injunction and monetary compensation.
Id. ¶¶ 12, 35.
Id. ¶ 24.
Id. ¶ 25.
Id. ¶ 36.
II. Legal Standard
A complaint should be dismissed under Rule 12(b)(6) only where it appears that the facts alleged fail to state a "plausible" claim for relief. A complaint may survive a motion to dismiss for failure to state a claim, however, even if it is "improbable" that a plaintiff would be able to prove those facts; even if the possibility of recovery is extremely "remote and unlikely." In ruling on a motion to dismiss, the court must accept the facts pleaded in the complaint as true and construe them in the light most favorable to the plaintiff. Generally, notice pleading is all that is required for a valid complaint. Under notice pleading, the plaintiff need only give the defendant fair notice of the plaintiff's claim and the grounds upon which it rests.
Ashcroft v. Iqbal, 129 S. Ct. 1937, 1949 (2009); FED. R. CIV. P. 12(b)(6).
Bell Atlantic v. Twombly, 550 U.S. 544, 556 (2007).
See Quality Foods de Centro America, S.A. v. Latin American Agribusiness Dev. Corp., S.A., 711 F.2d 989, 994-95 (11th Cir. 1983); see also Sanjuan v. American Bd. of Psychiatry & Neurology, Inc., 40 F.3d 247, 251 (7th Cir. 1994) (noting that at the pleading stage, the plaintiff "receives the benefit of imagination").
See Lombard's, Inc. v. Prince Mfg., Inc., 753 F.2d 974, 975 (11th Cir. 1985), cert. denied, 474 U.S. 1082 (1986).
See Erickson v. Pardus, 551 U.S. 89, 93 (2007) (citing Twombly, 550 U.S. at 555).
III. Discussion
A. Standing
The Defendant asserts that the Plaintiff has not suffered an injury in fact and therefore lacks standing to sue. Standing is the threshold question in every federal case. It requires the plaintiff to show an injury, that the injury was caused by the defendant's conduct, and that a favorable decision from the court will be likely to redress the injury. Here, the Defendant has challenged only the first requirement - the injury. The Supreme Court has stated that "[t]he actual or threatened injury required by Art. III may exist solely by virtue of 'statutes creating legal rights, the invasion of which creates standing. . . .'" Invasion of such statutorily created rights creates standing, even if no injury would have existed without the statute.
Warth v. Seldin, 422 U.S. 490, 498 (1975).
Lujan v. Defenders of Wildlife, 504 U.S. 555, 560-61 (1992).
Warth, 422 U.S. at 500.
Linda R.S. v. Richard D., 410 U.S. 614, 617 n.3 (1973).
The Plaintiff here alleges a violation of the VPPA, which expressly grants a right to relief. Specifically, the VPPA states: "Any person aggrieved by any act of a person in violation of this section may bring a civil action in a United States district court." Congress's use of the word "aggrieved" indicates its intent to allow for broad standing. Here, therefore, because the Plaintiff is alleging a violation of the VPPA, he alleges an injury. This Court will therefore consider whether the Plaintiff states a claim for a substantive violation of the VPPA.
See Federal Election Comm'n v. Akins, 524 U.S. 11, 19 (1998) ("History associates the word 'aggrieved' with a congressional intent to cast the standing net broadly-beyond the common-law interests and substantive statutory rights upon which 'prudential' standing traditionally rested." (internal citations omitted)).
B. The VPPA Claim
1. The Plaintiff is a "Subscriber" and Therefore a "Consumer"
The Defendant argues that the Plaintiff is not a "subscriber" to any of the Cartoon Network's services, so is therefore not a "consumer" under the VPPA and cannot state a claim for violation of the VPPA. The VPPA only applies if the plaintiff is a "consumer," which it defines as "any renter, purchaser, or subscriber of goods or services from a video tape service provider." One other district court has held that where a plaintiff pleads more than simply visiting a website, that plaintiff is a subscriber to a service. That court further held that "subscriber" does not include only paid customers. Additionally, individuals do not have to log in or register to be considered subscribers. Here, the Plaintiff is arguably a subscriber. He downloaded the CN App and used it to watch video clips. His Android ID and viewing history were transmitted to Bango. These facts suffice to qualify the Plaintiff as a "subscriber," and as such, a "consumer." Because the Plaintiff qualifies as a consumer under the VPPA, this Court must now consider whether the Android ID qualifies as personally identifiable information.
In re Hulu Privacy Litigation, No. C 11-03764 LB, 2012 WL 3282960, at *8 (N.D. Cal. Aug. 10, 2012).
Id.
Id.
Amended Class Action Compl. ¶ 32.
Id. ¶ 35.
2. An Android ID is Not "Personally Identifiable Information"
The VPPA prohibits "video tape service providers" from knowingly disclosing "personally identifiable information" regarding their consumers. At issue here is whether the Android ID that the Defendant disclosed to Bango qualifies as "personally identifiable information" under the statute. This Court finds that it does not.
"Personally identifiable information" under the VPPA "includes information which identifies a person as having requested or obtained specific video materials or services from a video tape service provider." Where a plaintiff does not allege the disclosure of personally identifiable information to a third party, that plaintiff's claim must be dismissed. Several other district courts have examined what qualifies as personally identifiable information under the VPPA. They have held that "personally identifiable information" is that which, in its own right, without more, "link[s] an actual person to actual video materials." What the VPPA requires is identifying both "the viewers and their video choices."
Id. § 2710(a)(3).
In re Nickelodeon Consumer Privacy Litigation, MDL No. 2443, 2014 WL 3012873, at *13 (D.N.J. July 2, 2014).
Id. at *10.
In re Hulu Privacy Litigation, No. C 11-03764 LB, 2014 WL 1724344, at *12 (N.D. Cal. Apr. 28, 2014).
"The emphasis is on disclosure, not comprehension by the receiving person." At issue, therefore, is whether the information disclosed by the video tape service provider could identify specific people and their video viewing habits. For example, where an anonymous ID was disclosed to a third party but that third party had to take further steps to match that ID to a specific person, no VPPA violation occurred. Additionally, the Tenth Circuit held (under the similar Cable Act) that disclosure of cable box codes, which could not identify consumers without the corresponding billing records, does not qualify as the disclosure of personally identifiable information. On the other hand, disclosure of a Facebook ID, which can identify a specific person without any additional steps, does qualify as personally identifiable information.
Id. at *14.
See id. at *15-16 (noting that where comScore had "to tie information together in non-obvious ways," there was no violation).
Pruitt v. Comcast Cable Holdings, LLC, 100 Fed. App'x 713, 716 (10th Cir. 2004).
In re Hulu, 2014 WL 1724344, at *14.
The Plaintiff claims that the Defendant disclosed his Android ID and the titles of the videos he watched to non-party Bango. The Android ID is a randomly generated number that is unique to each user and device. It is not, however, akin to a name. Without more, an Android ID does not identify a specific person. As the Plaintiff admits, to connect Android IDs with names, Bango had to use information "collected from a variety of other sources." Like the disclosure in In re Hulu that did not violate the VPPA because the third party had to take extra steps to connect the disclosure to an identity, the disclosure by the Defendant here required Bango to collect information from other sources. From the information disclosed by the Defendant alone, Bango could not identify the Plaintiff or any other members of the putative class. The Android ID, without more, is not personally identifiable information. Because the Plaintiff has not alleged the disclosure of personally identifiable information, he fails to state a claim under the VPPA.
Amended Class Action Compl. ¶ 35.
Id. ¶¶ 12 n.4, 16, 17. Although the Defendant questions whether Android IDs change with each user, this Court takes the Plaintiff's allegations as true for the purposes of a motion to dismiss.
Id. ¶ 25.
Typically, upon granting a motion to dismiss, this Court would allow the plaintiff to amend its complaint in order to allege facts sufficient to survive the motion. The Plaintiff here, however, has already amended his complaint once. Any additional amendments would be futile because this Court finds that the disclosure of an Android ID alone, as happened here, does not qualify as personally identifiable information under the VPPA.
IV. Conclusion
For the reasons stated above, the Defendant's Motion to Dismiss Plaintiff's Class Action Complaint [Doc. 20] is DENIED as moot. The Defendant's Motion to Dismiss Plaintiff's Amended Class Action Complaint [Doc. 26] is GRANTED.
SO ORDERED, this 8 day of October, 2014.
/s/Thomas W. Thrash
THOMAS W. THRASH, JR.
United States District Judge