Saeedy et al v. Microsoft Corporation, No. 2:2023cv01104 - Document 44 (W.D. Wash. 2023)

Court Description: ORDER granting Defendant's 36 Motion to Dismiss for Failure to State a Claim. Plaintiffs may file a motion for leave to amend their Complaint within 30 days of the date of this Order. Signed by Judge Barbara J. Rothstein. (SB)

Download PDF
1 The Honorable Barbara J. Rothstein 2 3 4 5 UNITED STATES DISTRICT COURT WESTERN DISTRICT OF WASHINGTON AT SEATTLE 6 7 8 NO. 23-cv-1104 NOAH SAEEDY, et al., individually, and on behalf of all others similarly situated, 9 ORDER GRANTING DEFENDANT’S MOTION TO DISMISS Plaintiffs, 10 v. 11 MICROSOFT CORPORATION, 12 Defendant. 13 I. INTRODUCTION 14 Plaintiffs sued Microsoft Corporation on July 21, 2023 in this putative class action, alleging 15 that the Microsoft Edge browser intercepts and collects users’ internet browsing activities and 16 private data for Microsoft’s use, which results in numerous violations of both federal and state laws. 17 Currently pending before the Court is Microsoft’s Motion to Dismiss Under Rules 12(b)(1) and 18 12(b)(6),1 ECF No. 36, which Plaintiffs have opposed. Having reviewed the parties’ filings2 and 19 the relevant legal authorities, the Court GRANTS Microsoft’s motion to dismiss under Rule 20 12(b)(1) for lack of standing. The reasoning for the Court’s decision follows. 21 22 1 23 Referring to Federal Rules of Civil Procedure. Mot., ECF No. 36; Opp’n, ECF No. 39 (corrected version); Reply, ECF No. 40, and the Complaint, ECF No. 1, together with the exhibits accompanying the motion and reply. 24 ORDER GRANTING DEFENDANT’S MOTION TO DISMISS 2 25 -1 1 II. BACKGROUND3 2 Plaintiffs4 allege that certain Microsoft Edge internet browser versions “surreptitiously 3 intercept, collect and send to Defendant a wide range of private data relating to users’ internet 4 browsing activities, internet searches, and online shopping behavior, including while in ‘private’ 5 browsing mode.” Compl. ¶¶ 1-2, ECF No. 1. This allegedly private data is collected and associated 6 with unique user identifiers and sent to Microsoft-controlled servers, which allows Microsoft to 7 determine an individual users’ internet browsing activities and habits. Id. ¶¶ 2-4. Plaintiffs allege 8 that this is done without the users’ consent. Id. ¶ 5. 9 Plaintiffs used Edge for both personal and work purposes and allege that they would not 10 have used the Edge browser if they had known that Microsoft was collecting their data and using it 11 to improve its software and services, provide targeted advertising, and develop artificial 12 intelligence. Id. ¶¶ 7-10; 176-79. Plaintiffs claim economic injury because of Microsoft’s unlawful 13 and unauthorized interceptions and recordings. Id. Plaintiffs have sued Microsoft, on behalf of a 14 nationwide class and subclasses, for violations of the Electronic Communications Privacy Act, 18 15 U.S.C. § 2510, et seq., the Computer Fraud and Abuse Act, 18 U.S.C. § 1030, and various California 16 and Washington state law claims. In total, they assert 13 causes of action: 17 18 19 • First Cause of Action – Violation of the Electronic Communications Privacy Act, 18 U.S.C. § 2510, et seq. (All Plaintiffs, Classes, and Subclasses) • Second Cause of Action – Violation of the Computer Fraud and Abuse Act, 18 U.S.C. § 1030 (All Plaintiffs, Classes, and Subclasses) 20 21 23 The facts recited below are taken from Plaintiffs’ Complaint (“Compl.,” ECF No. 1). For the purposes of the present motion, the Court takes the factual allegations in the Complaint as true. 4 There are four named Plaintiffs: Noah Saeedy, Vishal Shah, M.S., a minor, by and through his natural parent and legal guardian Crystal Arterberry, (collectively, the “California Plaintiffs”), and Tina Wilkinson (“Washington Plaintiff”). 24 ORDER GRANTING DEFENDANT’S MOTION TO DISMISS 3 22 25 -2 1 2 • Third Cause of Action – Intrusion Upon Seclusion (California Plaintiffs, California Class, and California Subclasses) • Fourth Cause of Action – Violation of the Right to Privacy – California Constitution (California Plaintiffs, California Class, and California Subclasses) • Fifth Cause of Action – Violation of California Invasion of Privacy Act, California Penal Code §§ 630, et seq. (California Plaintiffs, California Class, and California Subclasses) • Sixth Cause of Action – Statutory Larceny, Cal. Penal Code §§ 484 and 496 (California Plaintiffs, California Class, and California Subclasses) • Seventh Cause of Action – Conversion (California Plaintiffs, California Class, and California Subclasses) • Eighth Cause of Action – Violation of the California Unfair Competition Law, Bus. & Prof. Code §§ 17200, et seq. (California Plaintiffs, California Class, and California Subclasses) • Ninth Cause of Action – Intrusion Upon Seclusion (Washington Plaintiff, Washington Class, Washington Subclasses) • Tenth Cause of Action – Conversion (Washington Plaintiff, Washington Class, Washington Subclasses) • Eleventh Cause of Action – Violation of the Washington Privacy Act, Wash. Rev. Code ch. 9.73 (Washington Plaintiff, Washington Class, Washington Subclasses) • Twelfth Cause of Action – Violation of the Washington Consumer Protection Act, Wash. Rev. Code ch. 19.86 (Washington Plaintiff, Washington Class, Washington Subclasses) • Thirteenth Cause of Action – Restitution / Unjust Enrichment (All Plaintiffs, Classes, and Subclasses) 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 Microsoft seeks to dismiss Plaintiffs’ complaint for lack of subject matter jurisdiction 19 20 21 22 under Federal Rule of Civil Procedure 12(b)(1), arguing that Plaintiffs lack standing under Article III of the Constitution. Microsoft also argues that Plaintiffs’ claims should be dismissed under Federal Rule of Civil Procedure 12(b)(6) for failure to state a claim on which relief may be granted. 23 24 25 ORDER GRANTING DEFENDANT’S MOTION TO DISMISS -3 1 III. LEGAL STANDARD 2 A. 12(b)(1) Standard 3 Federal Rule of Civil Procedure 12(b)(1) allows litigants to seek the dismissal of an action 4 for lack of subject matter jurisdiction. A motion to dismiss for lack of subject matter jurisdiction 5 can either attack the sufficiency of the pleadings on their face (a “facial attack”) or present affidavits 6 or other evidence that contest the truth of the allegations in the pleadings (a “factual attack”). 7 Sullivan v. Ferguson, 636 F. Supp. 3d 1276, 1283 (W.D. Wash. 2022) (citing Wolfe v. Strankman, 8 392 F.3d 358, 362 (9th Cir. 2004)). 9 When the movant does not offer affidavits or other evidence challenging the truth of the 10 allegations in the complaint, the Court construes the motion as a facial attack on subject matter 11 jurisdiction. See id. And the Court resolves a facial jurisdictional challenge “as it would a motion 12 to dismiss under Rule 12(b)(6): Accepting the plaintiff’s allegations as true and drawing all 13 reasonable inferences in the plaintiff’s favor, the court determines whether the allegations are 14 sufficient as a legal matter to invoke the court’s jurisdiction.” Leite v. Crane Co., 749 F.3d 1117, 15 1121 (9th Cir. 2014). The Court presumes that a case lies outside of its “limited jurisdiction” unless 16 the plaintiffs establish otherwise. Kokkonen v. Guardian Life Ins. Co., 511 U.S. 375, 377 (1994). If 17 at any time the court determines that it lacks subject matter jurisdiction, it must dismiss the action. 18 Fed. R. Civ. P. 12(h)(3). 19 B. 12(b)(6) Standard 20 A motion to dismiss for failure to state a claim under Rule 12(b)(6) is properly granted if 21 the complaint does not “contain sufficient factual matter, accepted as true, to ‘state a claim to relief 22 that is plausible on its face.’” Ashcroft v. Iqbal, 556 U.S. 662, 678 (2009) (quoting Bell Atl. Corp. 23 v. Twombly, 550 U.S. 544, 570 (2007)). The plaintiff must plead “factual content that allows the 24 ORDER GRANTING DEFENDANT’S MOTION TO DISMISS 25 -4 1 court to draw the reasonable inference that the defendant is liable for the misconduct alleged.” Id. 2 “A complaint may fail to show a right to relief either by lacking a cognizable legal theory or by 3 lacking sufficient facts alleged under a cognizable legal theory.” Woods v. U.S. Bank N.A., 831 4 F.3d 1159, 1162 (9th Cir. 2016). When considering a motion to dismiss under Rule 12(b)(6), courts 5 must accept the factual allegations in the complaint as true and construe such allegations in the 6 light most favorable to the plaintiff. Interpipe Contracting, Inc. v. Becerra, 898 F.3d 879, 886-87 7 (9th Cir. 2018). 8 IV. DISCUSSION 9 “Under Article III, the Federal Judiciary is vested with the ‘Power’ to resolve not questions 10 and issues but ‘Cases’ or ‘Controversies.’” Ariz. Christian Sch. Tuition Org. v. Winn, 563 U.S. 125, 11 132 (2011). Among other things, that limitation requires a plaintiff to have standing.” Fed. Election 12 Comm’n v. Cruz, 596 U.S. 289, 295–96 (2022). Whether Plaintiffs have Article III standing to 13 proceed with this lawsuit implicates the Court’s subject matter jurisdiction. See Warth v. Seldin, 14 422 U.S. 490, 498 (1975) (stating that standing is jurisdictional). Therefore, the Court will begin 15 by considering Microsoft’s standing arguments. 16 The three elements of standing “are well established: A plaintiff must show (1) an injury in 17 fact, (2) fairly traceable to the challenged conduct of the defendant, (3) that is likely to be redressed 18 by the requested relief.” Id. at 296 (citing Lujan v. Defenders of Wildlife, 504 U.S. 555, 560–61 19 (1992)). Plaintiffs bear the burden of establishing each of these elements “with the manner and 20 degree of evidence required at the successive stages of the litigation.” Lujan, 504 U.S. at 561. “At 21 the pleading stage, general factual allegations of injury resulting from the defendant’s conduct may 22 suffice[.]” Id.; accord Tingley v. Ferguson, 47 F.4th 1055, 1066 (9th Cir. 2022); see also Spokeo, 23 24 25 ORDER GRANTING DEFENDANT’S MOTION TO DISMISS -5 1 Inc. v. Robins, 578 U.S. 330, 338 (2016) as revised (May 24, 2016) (“[T]he plaintiff must clearly 2 allege facts demonstrating each element.” (citation omitted)). 3 “[S]tanding is not dispensed in gross; rather, plaintiffs must demonstrate standing for each 4 claim that they press and for each form of relief that they seek.” TransUnion LLC v. Ramirez, 594 5 U.S. ----, 141 S. Ct. 2190, 2208 (2021) (citations omitted). Further, for each of the state claims 6 asserted, at least one plaintiff must demonstrate standing. See, e.g., Fenerjian v. Nongshim Co., 7 Ltd., 72 F. Supp. 3d 1058, 1082–83 (N.D. Cal. 2014) (finding that named plaintiffs “lack standing 8 to assert claims based on” states’ laws where they neither resided nor suffered an injury); Hamilton 9 v. NuWest Grp. Holdings LLC, C22-1117-JCC, 2023 WL 130485, at *3 (W.D. Wash. Jan. 9, 2023) 10 (“[C]ourts dismissed state law claims where no named plaintiff has alleged injury, residence, or 11 other pertinent connection (i.e., standing).”). Even in a class action, “standing is the threshold issue 12 . . . . If the individual plaintiff lacks standing, the court need never reach the class action issue.” 13 Lierboe v. State Farm Mut. Auto. Ins. Co., 350 F.3d 1018, 1022 (9th Cir. 2003). 14 At issue here is the “[f]irst and foremost” of standing’s three requirements—“a harm 15 suffered by the plaintiff that is concrete and actual or imminent, not conjectural or hypothetical.” 16 Steel Co. v. Citizens for a Better Env’t, 523 U.S. 83, 103 (1998) (citations omitted). To establish an 17 injury in fact, plaintiffs must show that they suffered “an invasion of a legally protected interest.” 18 Lujan, 504 U.S. at 560 (citations omitted). Injury is particularized if it affects a plaintiff “in a 19 personal and individual way.” Id. at 560 n.1. And it is concrete if it “actually exist[s],” meaning 20 that it is “real, and not abstract.” Spokeo, 578 U.S. at 340 (citations omitted). 21 Here, the Complaint contains thirteen causes of action that include both California and 22 Washington statutes. The Complaint identifies two general theories of harm—invasion of privacy- 23 related claims (Counts 1, 3, 4, 5, 9, 11, 12), and property-related claims (Counts 2, 6, 7, 8, 10). The 24 ORDER GRANTING DEFENDANT’S MOTION TO DISMISS 25 -6 1 Court will first analyze whether plaintiffs have standing for the privacy-related claims then turn to 2 the property-related claims. 3 A. Privacy-related claims 4 In 2021, the Supreme Court clarified that it is not enough that “a statute grants a person a 5 statutory right and purports to authorize that person to sue to vindicate that right.” TransUnion, 141 6 S. Ct. at 2204–05 (noting that intangible injuries, such as “reputational harms, disclosure of private 7 information, and intrusion into seclusion,” may qualify as “concrete” where there is “a close 8 relationship to harms traditionally recognized as providing a basis for lawsuits in American 9 courts”). The Court acknowledged that “the concrete-harm requirement can be difficult to apply in 10 some cases.” TransUnion, 141 S. Ct. at 2207. 11 Microsoft contends that the data described in the Complaint is not of the type that courts 12 have historically recognized as private. Mot. 7. That is, Plaintiffs have no recognized reasonable 13 expectation of privacy in their browsing data. The Court agrees. The interception of the type of 14 information contained in Plaintiffs’ browsing data does not bear a close relationship to a harm 15 traditionally recognized as a basis for lawsuits. The nature of the information that is allegedly 16 intercepted must be private, “personal information, personally identifiable information, or 17 information over which a party has a reasonable expectation of privacy.” Cook v. GameStop, Inc., 18 --- F. Supp. 3d ----, 2:22-CV-1292, 2023 WL 5529772, at *4 (W.D. Pa. Aug. 28, 2023); accord 19 Popa v. PSP Grp., LLC, C23-0294JLR, 2023 WL 7001456, at *3 (W.D. Wash. Oct. 24, 2023). Data 20 and information that has been found insufficiently personal includes mouse movements, clicks, 21 keystrokes, keywords, URLs of web pages visited, product preferences, interactions on a website, 22 search words typed into a search bar, user/device identifiers, anonymized data, product selections 23 added to a shopping cart, and website browsing activities. See Popa, 2023 WL 7001456, at *3–4 24 ORDER GRANTING DEFENDANT’S MOTION TO DISMISS 25 -7 1 (collecting cases); Ji v. Naver Corp., 21-CV-05143-HSG, 2022 WL 4624898, at *7–8 (N.D. Cal. 2 Sept. 30, 2022) (finding that collection of “user and device identifiers” are not the type of 3 information that could give rise to a privacy injury, although collection and storage of biometric 4 information was sufficient to support standing); Lightoller v. Jetblue Airways Corp., 23-CV-00361- 5 H-KSC, 2023 WL 3963823, at *4 (S.D. Cal. June 12, 2023) (“These allegations are insufficient to 6 allege a concrete harm that bears a close relationship to the substantive right of privacy (i.e., an 7 individual’s right to control information concerning his or her person).”); Massie v. Gen. Motors 8 LLC, CV 21-787-RGA, 2022 WL 534468, at *3–5 (D. Del. Feb. 17, 2022) (distinguishing cases 9 involving the collection and disclosure of personal information). Further, a California court 10 concluded in a data breach case that “basic contact information, including one’s email address, 11 phone number, or Facebook or Zynga username, is [not] private information. All this information 12 is designed to be exchanged to facilitate communication and is thus available through ordinary 13 inquiry and observation,” and the disclosure of such information would not be “highly offensive to 14 a reasonable person.” I.C. v. Zynga, Inc., 600 F. Supp. 3d 1034, 1049 (N.D. Cal. 2022).5 15 According to Plaintiffs, Microsoft intercepted and collected “users’ internet browsing 16 activities, internet searches, and online shopping behavior,” Compl. ¶ 2, “keyword search terms, 17 URLs, and unique user identifiers and cookies,” ¶ 5, and the collection of this information was an 18 intrusion into their privacy. Plaintiffs have not alleged that they provided any personal or sensitive 19 information to Microsoft that implicates a protectable privacy interest.6 20 21 5 23 The Zynga court noted that the collected data did not include financial information that would allow criminals to commit identity theft. 600 F. Supp. 3d at 1052–53. 6 Plaintiffs allege that the data collected can be associated with their names but they allege that this association can be made when the user is logged into a Microsoft account. Compl. ¶¶ 36, 49, 69. None of the Plaintiffs allege that they logged into a Microsoft account either before or during their browsing activities. 24 ORDER GRANTING DEFENDANT’S MOTION TO DISMISS 22 25 -8 1 In support of their argument that browser activity such as they have described is sufficient 2 for standing, Plaintiffs cite cases that pre-date TransUnion, and are otherwise distinguishable. See 3 Opp’n 8–9. For example, in In re: Google Inc. Cookie Placement Consumer Privacy Litig. (“Google 4 Cookie”), 934 F.3d 316, 321, 325 (3d Cir. 2019), the plaintiffs claimed that Google bypassed their 5 cookie blockers and placed tracking cookies on their web browsers, thereby collecting private data 6 that contained personal information. The Third Circuit relied on its earlier decision in In re 7 Nickelodeon Consumer Privacy Litigation, 827 F.3d 262, (3d Cir. 2016), which reasoned that the 8 injury was concrete because Congress so provided. See 827 F.3d at 273–74 (“[A]n injury-in-fact 9 may exist solely by virtue of statutes creating legal rights, the invasion of which creates standing.” 10 (citation omitted)). In neither of these decisions was there an analysis of a historical or common- 11 law analogue for the asserted injury apart from the statute. See Cook, 2023 WL 5529772, at *5. In 12 TransUnion, the Supreme Court emphasized that the asserted harm must have “a ‘close 13 relationship’ to a harm traditionally recognized as providing a basis for a lawsuit in American 14 courts.” 141 S. Ct. at 2200. 15 Moreover, in both Google Cookie and Nickelodeon, a third party had tracked the internet 16 browsing information in violation of its own promise not to do so. 934 F.3d at 325. And in In re 17 Facebook, Inc. Internet Tracking Litig. (“Facebook Tracking”), 956 F.3d 589 (9th Cir. 2020), cited 18 by Plaintiffs, the Ninth Circuit emphasized the comprehensive nature of Facebook’s unauthorized 19 tracking (Facebook had promised not to collect users’ data after they logged out but did so anyway), 20 and the unauthorized correlation of the collected data with the user’s personal profiles that it then 21 sold to advertisers to generate revenue—conduct that extends far beyond Plaintiffs’ allegations 22 23 24 25 ORDER GRANTING DEFENDANT’S MOTION TO DISMISS -9 1 regarding Microsoft’s conduct. Plaintiffs do not allege that their data was either disclosed or sold 2 to a third party, or that Microsoft broke its privacy promises.7 3 Absent from Plaintiffs citations are the host of cases decided subsequent to TransUnion. 4 For example, in Phillips v. United States Customs & Border Protection, the Ninth Circuit held that 5 a group of immigration activists lacked standing to sue over the government’s retention of records 6 that several federal law enforcement agencies had compiled about them as part of a covert 7 surveillance operation. 74 F.4th 986 (9th Cir. 2023). The Ninth Circuit reasoned that the unlawful 8 collection and retention of records, without more, does not give rise to a concrete harm of the sort 9 the Supreme Court has recognized. Id. at 993–96. The records “— names, birthdays, social security 10 numbers, occupations, addresses, social media profiles, and political views and associations—” 11 were collected from both open sources available to the public and preexisting databases that were 12 not publicly available. Id. at 996, 989. The Circuit went on to hold that this type of information did 13 not give rise to privacy interests and was not “generally considered ‘private.’” Id. at 996 (citation 14 omitted). “This identifying information is also a far cry from the types of information that we have 15 held are so sensitive that another’s retention of the information is analogous to tortious conduct.” 16 Id. The district court in Cook reached a similar conclusion, stating that the information allegedly 17 18 19 23 Microsoft’s Privacy Statement outlines the data that Microsoft may collect. Burnside Suppl. Decl. Ex. A, ECF No. 41. Although Plaintiffs argue that the Privacy Statement was not conspicuous, they do not allege that they did not see it, were unable to locate it, or that Microsoft collected any data not impliedly consented to by virtue of the acceptance of terms. The named Plaintiffs each allege that they did not know or consent to the collection of their private data and that they had a reasonable expectation of privacy. The Court need not “assume the truth of legal conclusions merely because they are cast in the form of factual allegations.” Fayer v. Vaughn, 649 F.3d 1061, 1064 (9th Cir. 2011) (per curiam) (quoting W. Mining Council v. Watt, 643 F.2d 618, 624 (9th Cir. 1981)). However, the Court concludes that Plaintiffs lack standing without analyzing the issue of consent, which may more properly be a merits issue. See In re Facebook, Inc., Consumer Privacy User Profile Litig., 402 F. Supp. 3d 767, 788–89 (N.D. Cal. 2019) (assuming for purposes of the standing inquiry that the plaintiffs did not consent). 24 ORDER GRANTING DEFENDANT’S MOTION TO DISMISS 20 21 22 25 7 - 10 1 intercepted must clear the threshold of information sufficiently personal or private within the 2 common law understanding of a privacy right. 2023 WL 5529772, at *4. 3 In sum, the collected browser information of which Plaintiffs complain is not a legally 4 protected privacy interest in which they had a reasonable expectation of privacy. Therefore, they 5 have not alleged a sufficiently concrete privacy injury to provide a basis for Article III standing. 6 B. Property-related claims 7 Plaintiffs have alleged violations of the Computer Fraud and Abuse Act, California Unfair 8 Competition Law and Statutory Larceny under California law, and conversion under California and 9 Washington State law. Plaintiffs claim that the data regarding Plaintiffs’ internet activity constitutes 10 property that has value, and that they have suffered harm in the form of diminution of the value of 11 their private data by Microsoft’s theft or unfair and deceptive trade practices. See, e.g., Compl. ¶¶ 12 221, 277-80, 283-87, 292-96, 312-17. Microsoft argues that Plaintiffs have not pleaded economic 13 injury and thus fail to establish standing. Mot. 11-12 (citing Ji, 2022 WL 4624898, at *9). 14 To establish standing for their claims of loss of value in their data as property, Plaintiffs 15 must show that they personally lost money or property as a result of Microsoft’s conduct. See, e.g., 16 Ji, 2022 WL 4624898, at * 9 (“Courts in this District have held that to proceed on an economic 17 injury theory, data privacy plaintiffs must allege the existence of a market for their data and the 18 impairment of the ability to participate in that market.”); Bass v. Facebook, Inc., 394 F. Supp. 3d 19 1024, 1039 (N.D. Cal. 2019) (“In order to establish standing for [the loss of the value of personal 20 information], plaintiffs must show that they personally lost money or property ‘as a result of the 21 unfair competition.’” (citation omitted)); Weizman v. Talkspace, Inc., --- F. Supp. 3d ----, 23-CV- 22 00912-PCP, 2023 WL 8461173, at *3 n.2 (N.D. Cal. Dec. 6, 2023) (noting that to establish standing 23 24 25 ORDER GRANTING DEFENDANT’S MOTION TO DISMISS - 11 1 under unfair competition law, a plaintiff must allege economic injury caused by the unfair business 2 practice). 3 Plaintiffs have generally asserted that they have “a property right and interest” in their 4 private data, the “interception and use of that data is violative of those rights and therefore causes 5 [them] injury and damages,” and they “suffered further economic injury as a result of Defendant’s 6 unlawful and unauthorized interceptions and recordings of communications.” Compl. ¶¶ 7–9. 7 Courts have recognized that the loss of personal identifying information may constitute a 8 cognizable injury in data breach cases, but that is not what Plaintiffs have alleged here. Plaintiffs 9 argue that their personal identifying data, as well as their web browsing and online shopping data, 10 has monetary value, Opp’n at 10–11, but the individual Plaintiffs have failed to allege how they 11 have lost value from the loss of their data, or lost profit from the sale of their data without 12 compensation, or how they were prevented from deriving economic benefit from their data.8 13 “California’s state and federal courts have consistently dismissed informational-privacy claims 14 resting on bald references to the ‘economic value’ of a plaintiff’s information.” Murphy v. Kochava 15 Inc., 2:23-CV-00058-BLW, 2023 WL 6391061, at *9 (D. Idaho Oct. 2, 2023); see also Greenley v. 16 Kochava, Inc., 22-CV-01327-BAS-AHG, 2023 WL 4833466, at *18 (S.D. Cal. July 27, 2023) 17 (“Courts have consistently found that alleging the economic value of data is not enough, if a plaintiff 18 fails to allege the economic value to him.”); In re Google, Inc. Privacy Policy Litig., C-12-01382- 19 PSG, 2013 WL 6248499, at *5–6 (N.D. Cal. Dec. 3, 2013) (finding that users lacked standing for 20 failure to allege how the defendant’s use of personal data deprived them of the ability to profit from 21 22 8 23 Plaintiffs allege generally that Class and Subclass members lost the benefit of their bargain and are precluded from selling their data because it is now worthless, Compl. ¶¶ 163-74, 293-94, but there are no individual allegations by the named Plaintiffs of losses particular to them. 24 ORDER GRANTING DEFENDANT’S MOTION TO DISMISS 25 - 12 1 the same information); Viveros v. Audible, Inc., C23-0925JLR, 2023 WL 6960281, at *5 (W.D. 2 Wash. Oct. 20, 2023) (“It is not enough that a plaintiff lost money; to have standing, there must be 3 a causal link between the unlawful practice and the loss.” (citation omitted)). 4 Although Plaintiffs allege that they would not have used Microsoft Edge had they known 5 that Microsoft was intercepting and using their data, they have no claim of loss on their purchase 6 of the product because Microsoft Edge is included with the operating system and can be 7 downloaded at no cost. Compl. ¶¶ 7–9, 18-20, 140. And no named Plaintiffs have alleged that they 8 provided their data in a transaction in which they were not paid the fair value for the data provided. 9 In sum, Plaintiffs have failed to allege how they were personally injured by the collection 10 of their data sufficient to establish standing for their property-related claims. 11 C. Leave to amend 12 Because the named Plaintiffs fail to allege a particularized, concrete injury to a legally 13 protected interest, they have failed to allege standing to proceed with their claims. Given this lack 14 of standing, the Court will not consider Microsoft’s alternative argument under Rule 12(b)(6). 15 Microsoft’s Motion to Dismiss is granted. Plaintiffs’ Complaint is dismissed without prejudice for 16 lack of subject matter jurisdiction. See Mo. ex rel. Koster v. Harris, 847 F.3d 646, 656 (9th Cir. 17 2017) (“In general, dismissal for lack of subject matter jurisdiction is without prejudice.”). 18 Plaintiffs have asked for leave to amend. Ordinarily, leave to amend a complaint should be 19 freely given. Fed. R. Civ. P. 15(a)(2); see also Eminence Capital, LLC v. Aspeon, Inc., 316 F.3d 20 1048, 1051 (9th Cir. 2003) (“[L]eave shall be freely given when justice so requires”). 21 Microsoft asks the Court to dismiss Plaintiffs’ claims with prejudice, contending that all of 22 Plaintiffs’ claims fail on some essential element and cannot be adequately pleaded under Plaintiffs’ 23 theories. Because the Court lacks jurisdiction to consider Plaintiffs’ claims on the merits, it would 24 ORDER GRANTING DEFENDANT’S MOTION TO DISMISS 25 - 13 1 be premature to dismiss with prejudice.9 If Plaintiffs wish to amend their Complaint, they must file 2 a motion for leave to amend within 30 days of the date of this Order. The motion must attach any 3 proposed amended complaint and cite relevant authority explaining why leave to amend is 4 appropriate, how they have addressed the raised deficiencies, and why the proposed amendments 5 will not be subject to dismissal under the legal authorities discussed above. 6 V. 7 CONCLUSION For the foregoing reasons: 1. Microsoft’s Motion to Dismiss Under Rules 12(b)(1) and 12(b)(6), ECF No. 36, is GRANTED; and 8 9 2. Plaintiffs may file a motion for leave to amend their Complaint within 30 days of the date of this Order. 10 DATED this 21st day of December 2023. 11 12 A 13 Barbara Jacobs Rothstein U.S. District Court Judge 14 15 16 17 18 19 20 21 22 23 The Court notes however, that Plaintiffs’ failure to plausibly allege standing also implicates the essential elements of their various causes of action. Dismissal likely would be warranted for failure to state plausible claims. 24 ORDER GRANTING DEFENDANT’S MOTION TO DISMISS 9 25 - 14

Some case metadata and case summaries were written with the help of AI, which can produce inaccuracies. You should read the full case before relying on it for legal research purposes.

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.