In re Google, Inc. Privacy Policy Litigation, No. 5:2012cv01382 - Document 67 (N.D. Cal. 2013)

Court Description: ORDER GRANTING MOTION TO DISMISS by Magistrate Judge Paul Singh Grewal granting 53 Motion to Dismiss.(psglc3S, COURT STAFF) (Filed on 12/3/2013)

Download PDF

In re Google, Inc. Privacy Policy Litigation Doc. 67 1 2 3 4 5 6 7 8 UNITED STATES DISTRICT COURT 9 NORTHERN DISTRICT OF CALIFORNIA 10 United States District Court For the Northern District of California SAN JOSE DIVISION 11 Case No. C-12-01382-PSG 12 13 IN RE GOOGLE, INC. PRIVACY POLICY LITIGATION 14 15 ORDER GRANTING MOTION TO DISMISS (Re: Docket No. 53, 57, 59) 16 After this court’s order dismissing their consolidated complaint on standing grounds with 17 18 leave to amend, 1 Plaintiffs Robert Demars, Pedro Marti, David Nisenbaum, Lorena Barrios, 19 Nicholas Anderson, Matthew Villani and Scott McCullough (“Plaintiffs”) filed an amended 20 complaint. In their amended complaint, Plaintiffs again challenge the introduction of a new, unified 21 privacy policy by Defendant Google, Inc. (“Google”) permitting the commingling of user data 22 23 across different Google products. Plaintiffs also challenge Google’s disclosure of this data to third 24 parties, including developers of applications for the Google Play market and advertising partners. 25 Google again moves to dismiss, arguing that Plaintiffs still lack standing because they have not 26 sufficiently alleged any injury-in-fact traceable to Google. Google also argues that Plaintiffs have 27 28 1 See Docket No. 45. ORDER GRANTING MOTION TO DISMISS -1Case No. 5:12-cv-01382-PSG Dockets.Justia.com 1 failed to state any claim upon which relief may be granted. As detailed below, the court agrees with 2 Google that the amended complaint is defective and therefore must be dismissed, but only in part 3 and with further leave to amend. 4 I. BACKGROUND 2 5 By now, most people know who Google is and what Google does. Google serves billions of 6 7 online users in this country and around the world. What started as simply a search engine has 8 expanded to many other products such as YouTube and Gmail. Google offers these products and 9 most others without charge. With little or no revenue from its users, Google still manages to turn a United States District Court For the Northern District of California 10 11 healthy profit by selling advertisements within its products that rely in substantial part on users’ personal identification information (“PII”). As some before have observed, in this model, the users 12 13 are the real product. Before March 1, 2012, Google maintained separate privacy policies for each of its products, 14 15 each of which confirmed that Google used a user’s PII to provide that particular product. 3 These 16 policies also confirmed that Google would not use the PII for any other purpose without the user’s 17 explicit consent. As Google put it, “[w]hen you sign up for a particular service that requires 18 registration, we ask you to provide personal information. If we use this information in a manner 19 different than the purpose for which it was collected, then we will ask for your consent prior to such 20 21 22 23 24 25 26 27 use.” 4 2 Unless otherwise noted, the following allegations are taken from the amended consolidated complaint, see Docket No. 50. For the reasons stated in the court’s previous order, the court grants Google’s request for judicial notice of the same documents. See Docket No. 45. 3 For example, in a legal notice issued to Gmail users in 2011, Google stated, “We will not use any of your content [defined to include “text, data, information, images, photographs, music, sound, video, or other material.”] for any purpose except to provide you with the service.” Docket No. 50 ¶ 84. Google has also pledged that “Gmail stores processes, and maintains your messages, contact lists, and other data related to your account in order to provide the service to you.” Id. ¶ 85. 4 Id. ¶ 83. 28 ORDER GRANTING MOTION TO DISMISS -2Case No. 5:12-cv-01382-PSG On March 1, 2012, Google announced a new policy. The majority of its separate privacy 1 2 policies were eliminated in favor of a single, universal privacy policy that spells out that Google 3 may combine a user’s PII across multiple Google products. Google explained the basis for the 4 change in policy as follows: 5 Our new Privacy Policy makes clear that, if you’re signed in, we may combine information that you’ve provided from one service with information from other services. In short, we’ll treat you as a single user across all our products, which will mean simpler, more intuitive Google experience. 5 6 7 8 9 In other words, through the new policy, Google is explicit that it may combine PII collected from a United States District Court For the Northern District of California 10 user’s Gmail or YouTube account, including the content of that account, with PII collected from 11 that user’s Google search queries, along with the user’s activities on other Google products, such as 12 Picasa, Maps, Docs, and Reader. This PII includes: • 13 • 14 • 15 16 • 17 • 18 19 • 20 • 21 • 22 • 23 24 first and last name; home or other physical address (including street name and city); current, physical location, a user’s email address, and other online contact information (such as the identifier or screen name); IP address; telephone number (both home and mobile numbers); list of contacts; search history from Google’s search engine; web surfing history from cookies placed on the computer; and posts on Google+. Plaintiffs contend that Google’s new policy violates its prior policies because the new policy 25 no longer allows users to keep information gathered from one Google product separate from 26 27 28 information gathered from other Google products. Plaintiffs further contend that Google’s new 5 Id. ¶ 7. ORDER GRANTING MOTION TO DISMISS -3Case No. 5:12-cv-01382-PSG 1 policy violates users’ privacy rights by allowing Google to take information from a user’s Gmail 2 account, for which users may have one expectation of privacy, for use in a different context, such as 3 to personalize Google search engine results, or to personalize advertisements shown while a user is 4 surfing the internet, products for which a user may have an entirely different expectation of privacy. 5 In addition to commingling Plaintiffs’ PII across the various Google products, Plaintiff contend 6 7 8 Google has shared Plaintiffs’ PII with third-party entities who have partnered with Google in order to develop applications for the Google Play app store to help it place targeted advertisements. 6 Plaintiffs bring this nationwide class action against Google on behalf of all persons and 9 United States District Court For the Northern District of California 10 entities in the United States who acquired a Google account between August 19, 2004, and February 11 29, 2012, and maintained such an account until, on, or after March 1, 2012. Plaintiffs also bring this 12 action on behalf of a subclass of persons and entities in the United States who acquired a device 13 powered by Android between August 19, 2004 and February 29, 2012, continued to own that device 14 on or after March 1, 2012, and switched to a non-Android device on or after March 1, 2012 (the 15 16 “Android Device Switch Subclass”). 7 Plaintiffs also seek to represent a second subclass of persons 17 and entities in the U.S. who acquired a device powered by Android between August 19, 2004 and 18 the present, and downloaded at least one Android application through Google Play (the “Android 19 App Disclosure Subclass”). 8 20 21 Plaintiffs allege that they each acquired a Gmail account before the March 1, 2012 announcement of the new policy and continued to use it after the new policy took effect. They each 22 further allege they purchased an Android phone before March 1 and that after implementing the new 23 24 policy Google aggregated their personal information without consent or compensation. Mr. Marti 25 6 See id., ¶¶ 4, 10, 22, 58, 120, 133, 183, 346. 26 7 See id. 50, ¶¶ 36-37. 27 8 See id. 28 ORDER GRANTING MOTION TO DISMISS -4Case No. 5:12-cv-01382-PSG 1 further alleges Google used his likeness in display advertisements without authorization. Mr. 2 Nisenbaum further alleges that after March 1, for privacy reasons, he replaced his Android phone 3 for privacy reasons with an iPhone. The other plaintiffs allege use of various Android-powered 4 phones and that they downloaded various Android Applications (“apps”) from the Google Play 5 store. Based on these allegations, Plaintiffs bring claims against Google for statutory and common 6 law misappropriation of likeness, violation of California’s Unfair Competition Law (“UCL”), 7 8 9 United States District Court For the Northern District of California 10 breach of contract, common law intrusion upon seclusion, violation of California’s User Legal Remedies Act (“CLRA”), violation of the Wiretap Act, and violation of the Stored Communications Act (“SCA”). 11 II. LEGAL STANDARDS 12 To satisfy Article III, a plaintiff “must show that (1) it has suffered an ‘injury in fact’ that is 13 14 (a) concrete and particularized and (b) actual or imminent, not conjectural or hypothetical; (2) the 15 injury is fairly traceable to the challenged action of the defendant; and (3) it is likely, as opposed to 16 merely speculative, that the injury will be redressed by a favorable decision.” 9 A suit brought by a 17 plaintiff without Article III standing is not a “case or controversy,” and an Article III court therefore 18 lacks subject matter jurisdiction over the suit. 10 In that event, the suit should be dismissed under 19 Fed. R. Civ. Pro. 12(b)(1). 11 The injury required by Article III may exist by virtue of “statutes 20 21 22 creating legal rights, the invasion of which creates standing.” 12 In such cases, the “standing question . . . is whether the constitutional or standing provision on which the claim rests properly can be 23 24 9 25 10 26 See Friends of the Earth, Inc. v. Laidlaw Envtl. Sys. (TOC), Inc., 528 U.S. 167, 180-181 (2000). Steel Co. v. Citizens for a Better Environment, 523 U.S. 83, 101, 118 S.Ct. 1003, 140 L.Ed.2d 210 (1998). 11 27 See Steel Co., 523 U.S. at 109-110; White v. Lee, 227 F.3d 1214, 1242 (9th Cir. 2000). 12 28 See Edwards v. First Am. Corp., 610 F.3d 514, 517 (9th Cir. 2010) (quoting Warth v. Seldin, 422 U.S. 490, 500, 95 S.Ct. 2197, 45 L.Ed.2d 343 (1975)). ORDER GRANTING MOTION TO DISMISS -5Case No. 5:12-cv-01382-PSG 1 understood as granting persons in the plaintiff’s position a right to judicial relief.” 13 At all times the 2 threshold question of standing “is distinct from the merits of [a] claim” and does not require 3 “analysis of the merits.” 14 The Supreme Court also has instructed that the “standing inquiry 4 requires careful judicial examination of a complaint’s allegations to ascertain whether the particular 5 plaintiff is entitled to an adjudication of the particular claims asserted.” 15 6 7 8 9 A complaint must state a “short plain statement of the claim showing that the pleader is entitled to relief.” 16 While “detailed factual allegations” are not required, a complaint must include more than an unadorned, the defendant-unlawfully-harmed-me accusation.” 17 In other words, a United States District Court For the Northern District of California 10 complaint must have sufficient factual allegations to “state a claim to relief that is plausible on its 11 face.” 18 A claim is facially plausible “when the pleaded factual content allows the court to draw the 12 reasonable inference that the defendant is liable for the misconduct alleged.” 19 Accordingly, under 13 Fed. R. Civ. P. 12(b)(6), which tests the legal sufficiency of the claims alleged in the complaint, 14 “[d]ismissal can be based on the lack of cognizable legal theory or the absence of sufficient facts 15 16 alleged under a cognizable legal theory.” 20 When evaluating a Rule 12(b)(6) motion, the court must accept all material allegations in the 17 18 19 20 complaint as true and construe them in the light most favorable to the non-moving party. 21 Review 13 See id. (quoting Warth, 422 U.S. at 500). 14 Maya v. Centex Corp., 658 F.3d 1060, 1068 (9th Cir. 2011). 21 15 22 DaimlerChrysler, 547 U.S. at 352 (quoting Allen v. Wright, 468 U.S. 737, 752 (1984)); see also Chandler v. State Farm Mut. Auto. Ins. Co., 598 F. 3d 1115, 1121-22 (9th Cir. 2010). 23 16 Fed. R. Civ. P. 8 (a)(2). 24 17 Ashcroft v. Iqbal, 129 S.Ct. 1937, 1949 (2009). 25 18 Id. at 1940 (quoting Bell Atlantic Corp. v. Twombly, 550 U.S. 544, 570 (2007)). 26 19 Id. 27 20 Balistreri v. Pacifica Police Dep’t., 901 F.2d 696, 699 (9th Cir. 1990). 28 21 See Metzler Inv. GMBH v. Corinthian Colls., Inc., 540 F.3d 1049, 1061 (9th Cir. 2008). ORDER GRANTING MOTION TO DISMISS -6Case No. 5:12-cv-01382-PSG 1 of a motion to dismiss is limited to the face of the complaint, materials incorporated into the 2 complaint by reference, and matters of which the court may take judicial notice. 22 The court is not 3 required to accept “legal conclusions cast in the form of factual allegations if those conclusions 4 cannot reasonably be drawn from the facts alleged.” 23 Further, the court need not accept as true 5 allegations that contradict matters that are either subject to judicial notice or attached as exhibits to 6 the complaint. 24 7 Claims sounding in fraud or mistake must comply with the heightened pleading 8 9 requirements of Fed. R. Civ. P. 9(b) by pleading with particularity the circumstances surrounding United States District Court For the Northern District of California 10 the fraud or mistake. Rule 9(b) applies to the state claims at issue here as they involve allegations 11 that users were misled. The allegations must be “specific enough to give defendants notice of the 12 particular misconduct which is alleged to constitute the fraud charged so that they can defend 13 against the charge.” 25 This includes “the who, what, when, where, and how of the misconduct 14 charged.” 26 15 “Dismissal with prejudice and without leave to amend is not appropriate unless it is clear 16 17 that the complaint could not be saved by amendment.” 27 A dismissal with prejudice, except one for 18 lack of jurisdiction, improper venue, or failure to join a party operates as an adjudication on the 19 merits. 28 Dismissal without leave to amend, however, may be granted for reasons of undue delay, 20 21 22 22 See id. at 1061. 23 23 Clegg v. Cult Awareness Network, 18 F.3d 752, 754-55 (9th Cir. 1994). 24 24 See In re Gilead Sciences Securities Litigation, 536 F.3d 1049, 1055 (9th Cir. 2008). 25 25 Semegen v. Weidner, 780 F.2d 727, 731 (9th Cir. 1985). 26 26 Vess v. Ciba-Geigy Corp. USA, 317 F.3d 1097, 1106 (9th Cir. 2003). 27 27 Eminence Capital, LLC. v. Aspeon, Inc., 316 F.3d 1048, 1052 (9th Cir. 2003). 28 28 See Fed. R. Civ. P. 41(b). ORDER GRANTING MOTION TO DISMISS -7Case No. 5:12-cv-01382-PSG 1 2 bad faith, repeated failure to cure deficiencies by previous amendments, futility of the amendment, and prejudice. 29 III. DISCUSSION 3 4 A. Article III Standing 5 Once again, the issues of standing and in particular injury-in-fact are front-and-center in 6 Google’s Rule 12 challenge to the operative complaint. 30 And so once again, standing is where the 7 8 9 court begins. Before considering the standing question, however, the court cannot help but make a few observations. First, despite generating little or no discussion in most other cases, the issue of United States District Court For the Northern District of California 10 injury-in-fact has become standard fare in cases involving data privacy. In fact, the court is hard- 11 pressed to find even one recent data privacy case, at least in this district, in which injury-in-fact has 12 not been challenged. 31 Second, in this district’s recent case law on data privacy claims, injury-in- 13 14 fact has proven to be a significant barrier to entry. And so even though injury-in-fact may not generally be Mount Everest, as then-Judge Alito observed, 32 in data privacy cases in the Northern 15 16 District of California, the doctrine might still reasonably be described as Kilimanjaro. In any event, this time around, Plaintiffs aim to establish their standing with six theories of 17 18 injury that can fairly be grouped into three categories: (1) commingling of Plaintiffs’ PII, (2) direct 19 20 21 22 23 24 25 29 Foman v. Davis, 371 U.S. 178, 182 (1962); Abagninin v. AMVAC Chem. Corp., 545 F.3d 733, 742 (9th Cir. 2008). 30 See White v. Lee, 227 F.3d 1214, 1242 (9th Cir. 2000) (“A challenge to standing under Article III ‘pertain[s] to a federal court’s subject matter jurisdiction’ and is therefore ‘properly raised in a motion under Federal Rule of Civil Procedure 12(b)(1).’”). 31 26 See, e.g., In re iPhone Application Litig., Case No. 5:11-md-02250-LHK, 2013 WL 6212591 (N.D. Cal. Nov. 25, 2013); Pirozzi v. Apple Inc., 913 F. Supp. 2d 840, 847 (N.D. Cal. 2012). 27 32 See Danvers Motor Co., Inc. v. Ford Motor Co., 432 F.3d 286, 294 (3d Cir. 2005). 28 ORDER GRANTING MOTION TO DISMISS -8Case No. 5:12-cv-01382-PSG 1 2 economic injury, and (3) violations of statutorily created rights. 33 The court considers each category in turn. 3 1. Personal Identification Information 4 Plaintiffs claim that when Google combined information that Plaintiffs provided to discrete 5 6 Google products, without Plaintiffs’ consent, Google injured them in two different ways. 34 First, 7 Google did not compensate them for the substantial economic value of the combined information. 35 8 Second, Google’s unauthorized co,mingling of their information, especially their likeness, was a 9 breach of contract. Neither alleged harm, however, is sufficient to establish an injury-in-fact. United States District Court For the Northern District of California 10 11 As the court previously explained, injury-in-fact in this context requires more than an allegation that a defendant profited from a plaintiff’s personal identification information. Rather, a 12 13 14 plaintiff must allege how the defendant’s use of the information deprived the plaintiff of the information’s economic value. 36 Put another way, a plaintiff must do more than point to the dollars 15 in a defendant’s pocket; he must sufficient allege that in the process he lost dollars of his own. 16 Plaintiffs’ allegations certainly plead that Google made money using information about them for 17 which they were provided no compensation beyond free access to Google’s services. But an 18 19 20 21 22 33 See Docket No. 57 at 4-9; Docket No. 50 ¶ 129-135. 23 34 See Docket No. 50 ¶¶ 132, 169-178. 24 35 25 26 27 28 In 2011, Google’s revenues were $37.91 billion, approximately 95% of which ($36.53 billion) came from advertising. In 2012, Google’s revenues increased to $46.04 billion, approximately 95% of which ($43.69 billion) came from advertising. See Docket No. 50 ¶ 3. 36 See Docket No. 45 at 9-10 (citing In re iPhone Application Litig., Case No. 5:11-md-02250LHK, 2011 WL 4403963 (N.D. Cal. Sept. 20. 2011), Low v. LinkedIn Corp., Case No. 5:11-CV01468-LHK, 2011 WL 5509848 (N.D. Cal. Nov. 11, 2011), and LaCourt v. Specific Media, Inc., Case No. SACV 10-1256-GW (JCGX), 2011 WL 1661532 (C.D. Cal. Apr. 28, 2011)). ORDER GRANTING MOTION TO DISMISS -9Case No. 5:12-cv-01382-PSG 1 2 allegation that Google profited is not enough equivalent to an allegation that such profiteering deprived Plaintiffs’ of economic value from that same information. 37 As before, the court finds the reasoning in LaCourt v. Specific Media instructive. There the 3 4 plaintiffs alleged that the defendant installed cookies to track users’ internet browsing to build 5 behavior profiles to better target advertisements. 38 The court found the tracked users lacked 6 standing because, among other reasons, they did not “explain how they were ‘deprived’ of the 7 8 9 economic value of their personal information simply because their unspecified personal information was purportedly collected by a third party.” 39 Other courts have agreed. 40 Addressing a set of facts similar to the present case, in In re Google Android User Privacy United States District Court For the Northern District of California 10 11 Litig., the court found no Article III standing where plaintiffs alleged that Google’s unauthorized 12 use of PII reduced its value to them because the plaintiffs failed to tie Google’s use to their alleged 13 loss, such as being foreclosed from capitalizing on its value. 41 Here, Plaintiffs similarly have not 14 alleged how Google’s use of PII in any way deprives them of the ability to profit from the same 15 16 information. Plaintiffs rely on Goodman v. HTC to support their argument that Google’s commingling of 17 18 19 20 21 information did inflict an injury-in-fact sufficient for standing. 42 However, in Goodman, the court 37 See generally, Del Vecchio v. Amazon.com Inc., Case No. 5:11-cv-0366-RSL, 2011 WL 6325910, *3 (W.D. Wash. Dec. 1, 2011) (“While it may be theoretically possible that Plaintiffs’ information could lose value as a result of its collection and use by Defendant, Plaintiffs do not plead any facts from which the Court can reasonably infer that such devaluation occurred in this case.”). 22 38 See Specific Media, Inc., 2011 WL 1661532, *4-5. 23 39 Id. at *5. 40 See, e.g., Low v. LinkedIn Corp., 2011 WL 5509848 at *4-5; Goodman, 2012 WL 2412070 at *7. 24 25 26 27 28 41 See In re Google Android User Privacy Litig., Case No. 5:11-md-02264-JSW, 2013 WL 1283236, at *2, 4 (“Plaintiffs also do not allege they attempted to sell their personal information, that they would do so in the future, or that they were foreclosed from entering into a value for value transaction relating to their PII, as a result of the Google Defendants’ conduct.”). 42 See Docket No. 57 at 8. ORDER GRANTING MOTION TO DISMISS -10Case No. 5:12-cv-01382-PSG 1 held that “misappropriation of personally identifiable information does not allege injury in fact, 2 absent a separate statutory or constitutional right.” 43 The court thus explicitly rejected Article III 3 standing under the theory Plaintiffs urge here. 44 The court separately addresses the statutory theory 4 below. 5 6 Finally, although Plaintiffs assert that the breach of contract arising from Google’s unauthorized commingling activities offers a separate basis for injury-in-fact, they still fail to 7 8 9 articulate a sufficient contract injury. Nominal damages are not available in California for breach of contract, 45 and the amended complaint does not allege any other injury based on the breach. In United States District Court For the Northern District of California 10 their opposition, Plaintiffs assert that “one of the most egregious ways in which Google breaches its 11 contracts … is by misusing Plaintiffs’ information to misappropriate their likeness.” 46 But even if 12 this point in opposition were presented in the complaint itself, which it is not, Plaintiffs still cite no 13 case law holding that a contract breach by itself constitutes an injury in fact. This is insufficient. 14 2. Direct Economic Injuries 15 16 The court next considers whether Plaintiffs have alleged direct economic injuries sufficient 17 to establish injury-in-fact. As the Supreme Court has noted, “palpable economic injuries have long 18 been recognized as sufficient to lay the basis for standing.” 47 Plaintiffs each allege that they were 19 injured when their Android devices sent their respective names, email addresses, and locations to 20 21 the developer of each app they purchased or downloaded because they had to pay for the battery and 22 23 43 Goodman, 2012 WL 2412070, at *5 (emphasis added). 24 44 See id. at *7-8. 25 45 26 See Ruiz v. Gap, Inc., 380 F. App’x 689, 692 (9th Cir. 2010) (quoting Aguilera v. Pirelli Armstrong Tire Corp., 223 F.3d 1010, 1015 (9th Cir. 2000)). 27 46 See Docket No. 57 at 8. 28 47 Sierra Club v. Morton, 405 U.S. 727, 733 (1972). ORDER GRANTING MOTION TO DISMISS -11Case No. 5:12-cv-01382-PSG 1 bandwidth consumed by the unauthorized transmissions. 48 Mr. Nisenbaum, representing the 2 Android Device Switch Subclass, claims further injury in that he overpaid for his Android phone in 3 2010 because he would not have bought the phone had Google disclosed its intention to use his 4 information as alleged in the complaint. 49 5 phone with an iPhone in 2012 as a result of Google’s policy change, causing him further economic 6 Mr. Nisenbaum also claims that he replaced his Android injury. 50 7 The Court will consider each of these direct economic injury theories in turn to determine if 8 9 United States District Court For the Northern District of California 10 they articulate “something more” than pure economic harm to support subject-matter jurisdiction under Rule 12(b)(1). 51 11 12 13 With respect to Plaintiffs’ injury claims based on battery and bandwidth consumption, courts have found that the unauthorized use of system resources can suffice to establish a cognizable injury. For example, in Goodman, the court found standing based upon battery discharge where the 14 application at issue sent fine location data every three hours or whenever the device’s screen was 15 16 refreshed. 52 Similarly, in In re iPhone Application Litigation, the court found standing where the 17 device systematically collected and transmitted location information. 53 In In re Google Android 18 User Privacy Litigation, the plaintiffs did not clearly allege how frequently Google collected 19 geolocation data from a phone, but did allege that collecting relocation data was particularly battery 20 21 22 48 See Docket No. 50 ¶¶ 131, 156-168. 23 49 See id. ¶¶ 130, 146-155. 24 50 See id. 25 51 See In re LinkedIn User Privacy Litig., 932 F. Supp. 2d 1089, 1094 (N.D. Cal. 2013). 52 Goodman, 2012 WL 2412070. 26 27 28 53 In re iPhone Application Litigation, 844 F. Supp. 2d 1040, 1054-56 (N.D. Cal. 2012) (“iPhone I”). ORDER GRANTING MOTION TO DISMISS -12Case No. 5:12-cv-01382-PSG 1 intensive, that “their batteries discharged more quickly[,] and that their services were interrupted.” 54 2 This latter allegation was deemed sufficient to establish standing. At the same time, in Hernandez 3 v. Path, Inc., the court found that any harm from the use of phone resources in an app’s uploading a 4 user’s address book a single time upon first running the app was de minimis and thus insufficient to 5 establish injury. 55 6 Plaintiffs’ allegations here are closer to Goodman, iPhone I and Android than Hernandez. 7 8 9 Like Hernandez, Plaintiffs’ alleged unauthorized battery consumption only happened infrequently, when a plaintiff first downloaded an app. But in Hernandez the allegedly unauthorized upload only United States District Court For the Northern District of California 10 happened once, when a plaintiff downloaded the Path app. Here, it happens each time a user 11 downloads any app. The plaintiff who downloaded the most apps, according to the amended 12 complaint, did so at least 27 times. 56 In addition, like the plaintiffs in Goodman and Android, 13 Plaintiffs here specifically allege a greater discharge of battery power as a result of unauthorized 14 conduct and as in iPhone I the discharge is systemic rather than episodic. This is sufficient to 15 16 establish more than a de minimis injury. With respect to Mr. Nisenbaum’s further allegations of injury, they, too, support standing for 17 18 purposes of Article III. 19 First, the allegation that Mr. Nisenbaum bought a new phone after the policy change and that 20 his motivation for choosing an iPhone over the Android device was substantially for privacy 21 reasons, 57 establishes that he was injured by making the purchase. 58 To be sure, users frequently 22 23 54 In re Google Android User Privacy Litig., 11-MD-02264 JSW, 2013 WL 1283236, at *2, 4 (N.D. Cal. Mar. 26, 2013) (“Android”). 24 55 25 26 27 28 See Hernandez v. Path, Inc., Case No. 12-CV-01515 YGR, 2012 WL 5194120 (N.D. Cal. Oct. 19, 2012) (depletion of two to three seconds of battery capacity is de minimis); Caldwell v. Caldwell, 545 F.3d 1126, 1134 (9th Cir. 2008) (concurrence) (de minimis injury does not support standing). See Hernandez, 2012 WL 5194120, *1, 2, n.2 (N.D. Cal. Oct. 19, 2012). 56 See Docket No. 60 ¶ 163. 57 See id. at ¶ 130. ORDER GRANTING MOTION TO DISMISS -13Case No. 5:12-cv-01382-PSG 1 replace old phones for all kinds of reasons beyond privacy. For example, from the complaint, it 2 appears Mr. Nisenbaum had his Android device for approximately two years, the length of most 3 phone contracts that often include a discount for bundled phones, before purchasing a new phone. 4 But Mr. Nisenbaum specifically alleges that but for the policy switch he would not have otherwise 5 have bought a new phone. 59 The alleged injury is fairly traceable to Google based on Mr. 6 Nisenbaum’s allegation that he relied on Google’s previous policies in purchasing the Android 7 8 phone in the first place. Second, Mr. Nisembaum’s allegations regarding overpayment establish injury. In Pirozzi v. 9 United States District Court For the Northern District of California 10 Apple, the court explained that Article III standing under an overpayment theory may be supported 11 by “allegations [by plaintiffs] that, when they purchased their [] devices, they relied upon 12 representations regarding privacy protection, which caused them to pay more than they would have 13 for their devices.” 60 Similarly, in Goodman, the court found standing for overpayment of a 14 smartphone where plaintiffs alleged they would have “paid less for the phones had [d]efendant’s not 15 16 misrepresented the relevant features.” 61 The court held that a “general averment of quality, alleged 17 to be false, was sufficient to constitute an alleged injury in the form of overpayment.” 62 The 18 allegations here are equally sufficient. 19 20 21 58 22 See Docket No. 50 ¶ 19 (“Nisenbaum owned and used an Android device before and after March 1, 2012, but subsequently ceased using the device and acquired and Apple device in its place in substantial part because of Google’s invasive practices.”). 23 59 24 60 25 26 See id. ¶¶ 19, 150-51. See, e.g., Pirozzi v. Apple Inc., 913 F. Supp. 2d 840, 846-47 (N.D. Cal. 2012) (“Overpaying for goods or purchasing goods a person otherwise would not have purchased based upon alleged misrepresentations by the manufacturer would satisfy the injury-in-fact and causation requirements for Article III standing.”). 27 61 Goodman, 2012 WL 2412070, at *5. 28 62 Id. at *6. ORDER GRANTING MOTION TO DISMISS -14Case No. 5:12-cv-01382-PSG Google highlights that Mr. Nisenbaum has not alleged that he bought his phone from Google 1 2 or that Google manufactured the phone. But the complaint is clear that Mr. Nisenbaum’s phone ran 3 on Android, Google’s open-source operating system, and that in order to access the Google Play 4 marketplace included in Android, Mr. Nisenbaum had to create a Google account. Under such 5 circumstances, the alleged harm of overpayment to a third party is fairly traceable to Google. 63 6 3. Violation of Statutory Rights 7 The final category of Plaintiffs’ injury-in-fact theories concerns statutory rights. The Ninth 8 9 United States District Court For the Northern District of California 10 11 Circuit has made it clear that Article III standing can also be established by virtue of “statutes creating legal rights, the invasion of which creates standing.” 64 Courts have found that both state and federal statutes can create these legal rights. 65 To decide if a statute created such a legal right, a 12 13 14 court must determine whether the “standing provision on which the claim rests properly can be understood as granting persons in the plaintiff’s position a right to judicial relief.” 66 Put another 15 way, plaintiffs have standing where they have a “direct stake in the controversy.” 67 Although 16 Article III always requires an injury, the alleged violation of a statutory right that does not otherwise 17 require a showing of damages is an injury sufficient to establish Article III standing. 68 For example, 18 19 63 20 21 22 See Maya v. Centex Corp., 658 F.3d 1060, 1073 (9th Cir. 2011). 64 Edwards v. First Am. Corp., 610 F.3d 514, 517 (9th Cir. 2010) (quoting Warth v. Seldin, 422 U.S. 490, 500 (1975)). 65 23 See Cantrell v. City of Long Beach, 241 F.3d 674, 684 (9th Cir. 2001) (“state law can create interests that support standing in federal courts”). 24 66 25 Id. See also Jewel v. Nat’l Sec. Agency, 673 F.3d 902, 908 (9th Cir. 2011) (finding standing for an allegation of violation of the Stored Communication Act without other specific injury). 67 26 27 28 Goodman, 2012 WL 2412070, at *8 (quoting U.S. v. Students Challenging Regulatory Agency Procedures (SCRAP), 412 U.S. 669, 687 (1973)). 68 See Edwards v. First Am. Corp., 610 F.3d at 516 (finding standing for violation of the Real Estate Settlement Procedures Act even though plaintiff could not allege that she was overcharged); Jewel, 673 F.3d at 908 (finding Article III injury-in-fact for alleged violations of three surveillance statutes ORDER GRANTING MOTION TO DISMISS -15Case No. 5:12-cv-01382-PSG 1 in a case where a credit card company failed to make required disclosures and the Truth in Lending 2 Act created a private right of action for such failures without a showing of damages, the Ninth 3 Circuit held that the plaintiff “suffered the loss of a statutory right to disclosure and has therefore 4 suffered injury in fact for purposes of Article III standing.” 69 Similarly, in Edwards v. First 5 American Corp., the Ninth Circuit held that a plaintiff had standing for a violation of the Real Estate 6 Settlement Procedures Act even when she could not allege that she was financially harmed. 70 7 Plaintiffs have alleged unauthorized access and wrongful disclosure of communications, 8 9 including disclosure to third parties. 71 Plaintiffs also have alleged the interception of United States District Court For the Northern District of California 10 communications. 72 Courts have recognized that such alleged violations of the Wiretap Act or the 11 Stored Communications Act are sufficient to establish Article III injury. 73 These statutes grant 12 persons in Plaintiffs’ position a right to relief and thus Plaintiffs have standing for these claims. 13 14 The complaint also alleges that Mr. Marti was injured when Google used his name or likeness in connection with its “+1” function without authorization. 74 California Civil Code Section 15 16 17 18 19 3344 prohibits the commercial use another’s name or likeness. The statute thus creates a right of action for “persons injured as a result thereof.” 75 Where a plaintiff alleges an unauthorized that each “explicitly creates a private right of action for claims of illegal surveillance” without requiring a showing of damages). 20 69 21 70 22 23 24 25 26 DeMando v. Morris, 206 F.3d 1300, 1303 (9th Cir. 2000). See Edwards, 610 F.3d at 516. The case was briefed and argued before the Supreme Court, but the Court ultimately decided that the writ of certiorari was “improvidently granted” and dismissed. 132 S. Ct. 2536 (2012). 71 See Docket No. 50 ¶ 133. 72 See Docket No. 50 ¶ 134. 73 See, e.g., In re Google Inc., 13-MD-02430-LHK, 2013 WL 5423918 (N.D. Cal. Sept. 26, 2013); In re iPhone Application Litig., 844 F. Supp. 2d at 1055; Jewel, 673 F.3d at 908. 27 74 See Docket No. 50 ¶¶ 129, 136-145. 28 75 Cal. Civ. Code § 3344. ORDER GRANTING MOTION TO DISMISS -16Case No. 5:12-cv-01382-PSG 1 commercial use of a person’s name or likeness, “courts generally presume that [injury] has been 2 established” for a Section 3344 claim. 76 In Fraley v. Facebook, the court found standing for 3 allegations nearly identical to Mr. Marti’s . 77 The court agrees with Fraley that Section 3344 4 provides a right whose alleged violation creates standing. 5 6 Google disputes any injury-in-fact from the +1 feature because Plaintiffs have not alleged an unauthorized use. However, the amended complaint states that Google did not compensate Mr. 7 8 9 United States District Court For the Northern District of California 10 Marti for the commercial use of his personal endorsement and that he “did not authorize Google’s use of that endorsement.” 78 As explained above, whatever the merits of the parties’ competing views of consent, a merits analysis is not appropriate when considering standing. 79 11 12 13 14 In sum, while the Plaintiffs’ allegations regarding the loss of PII is insufficient to establish the required injury-in-fact, their economic and certain statutory injuries are sufficient to support standing for each of their Plaintiffs’ stated claims. The court therefore will next turn to whether these claims are those upon which relief may be granted. 80 15 16 17 18 19 20 21 22 76 Del Amo v. Baccash, CV 07-663-PSG, 2008 WL 4414514 (C.D. Cal. Sept. 16, 2008) (citing Miller v. Collectors Universe, Inc., 159 Cal. App. 4th 988, 1005 (2008)); see also Motschenbacher v. R. J. Reynolds Tobacco Co., 498 F.2d 821, 825 (9th Cir. 1974) (suggesting that the appropriation itself may create injury, the court noted that “the appropriation of the identity of a relatively unknown person may result in economic injury or may itself create economic value in what was previously valueless.”). 77 See Fraley v. Facebook, Inc., 830 F. Supp. 2d 785, 797 (N.D. Cal. 2011). 78 See Docket No. 50 ¶ 143. 23 79 24 25 26 27 28 See Catholic League for Religious & Civil Rights v. City & Cnty. of San Francisco, 624 F.3d 1043, 1049 (9th Cir. 2010) (“Nor can standing analysis, which prevents a claim from being adjudicated for lack of jurisdiction, be used to disguise merits analysis, which determines whether a claim is one for which relief can be granted if factually true.”). 80 See Lujan, 504 U.S. at 578 (“injury required by Art. III may exist solely by virtue of ‘statutes creating legal rights, the invasion of which creates standing..’”); Jewel, 673 F.3d at 908 (finding Article III injury-in-fact for claims asserted under federal surveillance statutes because the statutes created a private right of action for failure to comply with the statutory procedures). ORDER GRANTING MOTION TO DISMISS -17Case No. 5:12-cv-01382-PSG B. ADEQUACY OF CLAIMS 1 2 1. Wiretap Act 3 4 The Wiretap Act, as amended by the Electronic Communication Privacy Act (“ECPA”), generally prohibits the intentional interception of “wire, oral, or electronic communications.” 81 The 5 6 7 purpose of the Wiretap Act is to protect the privacy of communications. 82 The Wiretap Act provides a private right of action against any person who “intentionally intercepts, endeavors to 8 intercept, or procures any other person to intercept or endeavor to intercept, any wire, oral, or 9 electronic communication.” 83 United States District Court For the Northern District of California 10 11 The Act defines “intercept” as “the aural or other acquisition of the contents of any wire, electronic, or oral communication through the use of any electronic, mechanical, or other device.” 84 12 However, the definition of “electronic, mechanical, or other device” excludes: 13 any telephone or telegraph instrument, equipment or facility, or any component thereof, (i) furnished to the subscriber or user by a provider of wire or electronic communication service in the ordinary course of its business and being used by the subscriber or user in the ordinary course of its business or furnished by such subscriber or user for connection to the facilities of such service and used in the ordinary course of its business; or (ii) being used by a provider of wire or electronic communication service in the ordinary course of its business, or by an investigative or law enforcement officer in the ordinary course of his duties. 85 14 15 16 17 18 19 20 21 22 23 24 81 18 U.S.C. § 2511(1); see also Joffe v. Google, Inc., Case No. 11-7483, 2013 WL 4793247, at *3 (9th Cir. Sept. 10, 2013). 82 25 See Gelbrand v. United States, 408 U.S. 41, 48 (1972). 83 26 18 U.S.C. § 2511(1)(a); see id. § 2520 (providing a private right of action for violations of § 2511). 27 84 28 85 Id. § 2510(4). Id. § 2510(5)(a) . ORDER GRANTING MOTION TO DISMISS -18Case No. 5:12-cv-01382-PSG 1 Thus, as a provider of electronic communication services, Google is immune from claims alleging 2 interception by a “device” based on equipment used “by a provider of wire and electronic 3 communication service in the ordinary course of business.” 86 4 5 6 7 8 9 The amended complaint fails to allege any interception by Google that falls outside the scope of this broad immunity. While Plaintiffs point to their allegations that Google’s use of the accused devices to intercept Gmail communications and co-mingle the contents and distribute those contents without consent was not necessary to the delivery of Gmail, 87 this narrow read of the exemption, as being limited to only action taken to deliver the electronic communication, does not United States District Court For the Northern District of California 10 square with the plain meaning of the statutory text at issue. The text exempts from the definition of 11 “intercept” any use of a device by a provider “in the ordinary course of its business.” Rather than 12 narrowing the exemption to only the provision of electronic communications services itself, or some 13 such narrower scope, Congress specifically chose the broader term “business” that covers more far- 14 ranging activity. For good measure, Congress also teamed the term “business” with the terms 15 16 17 “ordinary course,” suggesting an interest in protecting a provider’s customary and routine business practices. Courts generally defer to the results of such a textual analysis. The “first step in interpreting 18 19 a statute is to determine whether the language at issue has a plain and unambiguous meaning.” 88 In 20 so doing, the court “must begin with … the assumption that the ordinary meaning of that language 21 accurately express the legislative purpose.” 89 “If the statutory language is unambiguous and the 22 23 24 25 86 Similarly, each Google agent enjoys broad immunity in his handling of communications “in the normal course of his employment while engaged in any activity which is a necessary incident to the rendition of his service or to the protection of the rights or property of the provider of that service.” 18 U.S.C. § 2511(2)(a)(i). 87 See Docket No. 50 ¶ 185. 88 Wilson v. C.I.R., 705 F.3d 980, 987-88 (9th Cir. 2013) (citation omitted). 26 27 89 28 de Osorio v. Mayorkas, 695 F.3d 1003, 1019 (9th Cir. 2012) (citing Gross v. FBL Fin. Servs. Inc., 557 U.S. 167, 175 (2009)). ORDER GRANTING MOTION TO DISMISS -19Case No. 5:12-cv-01382-PSG 1 statutory scheme is coherent and consistent, judicial inquiry must cease.” 90 Plaintiffs’ own 2 allegations make clear that the activities at issue here, concerning Google’s core targeted 3 advertising, is within its business’ ordinary course. 4 5 6 Although the Ninth Circuit has yet to rule on the subject, other appellate courts that have agreed that the “ordinary course of business” exception is not limited to actions necessary to providing the electronic communication services (“ECS”) at issue. For example, in Hall v. 7 8 9 Earthlink, the Second Circuit relied on the “ordinary course of its business” exception to affirm the dismissal of a claim brought against an ISP where the plaintiff alleged that the ISP continued United States District Court For the Northern District of California 10 processing his emails after he terminated his account. 91 Nothing in processing a closed account’s 11 emails facilitates was necessary to the provision of ECS, suggesting that the processing was 12 performed for other business reasons, and still the Second Circuit held that such processing was not 13 an “interception.” 92 14 In Kirch v. Embarq Management Co., 93 the Tenth Circuit held that the defendant was 15 16 protected by the exception when it conducted a test using third-party advertising technology and its 17 customers’ communications, because the defendant had “no more of its users’ electronic 18 communications than it had in the ordinary course of its business as an ISP.” The trial court’s 19 decision affirmed by Kirch noted that the “ordinary course of its business” defense “appears to have 20 merit, as plaintiffs have admitted that Embarq conducted the NebuAd test to further legitimate 21 22 business purposes and that behavioral advertising is a widespread business and is commonplace on the Internet.” 94 Kirch thus supports the application of Section 2510(5)(a)(ii) where the provider is 23 24 25 90 Services Emps. Int’l Union v. Nat’l Union of Healthcare Workers, 718 F.3d 1036, 1045 (9th Cir. 2013) (quoting Miranda v. Anchondo, 684 F.3d 844, 849 (9th Cir. 2012)). 91 396 F.3d 500, 505 (2nd Cir. 2005). 92 Id. 93 702 F.3d 1245, 1250 (10th Cir. 2012). 26 27 28 94 Kirch, 2011 WL 3651359, at *9 n.42 (D. Kan. Aug. 19, 2011) (emphasis added). ORDER GRANTING MOTION TO DISMISS -20Case No. 5:12-cv-01382-PSG 1 2 furthering its “legitimate business purposes”—including advertising—and is not limited to only those acts that are technically necessary to processing email. The more fundamental problem with Plaintiffs’ narrow construction of Section 3 4 2510(5)(a)(ii) is that in defining “ordinary course of business” as “necessary” it begs the question of 5 what exactly its means for a given action to be “necessary” to the delivery of Gmail. For example, 6 in delivering Gmail is it really “necessary” do more than just the comply with email protocols such 7 8 9 United States District Court For the Northern District of California 10 as POP, IMAP and MAPI? What about spam-filtering or indexing? None of these activities have anything specifically to do with transmitting email. And yet not even Plaintiffs suggest that these activities are unnecessary and thus lie outside of the “ordinary course business.” 11 12 13 Plaintiffs separately argue that the “ordinary course of business” exception cannot apply because of their allegations that Google exceeded the scope of the consent secured by their agreements with Plaintiffs. But the two cases Plaintiffs cite for this proposition, George v. 14 Carusone and United States v. Harpel, are inapposite. Both George and Harpel addressed the 15 16 surreptitious recording of telephone calls. Here, Plaintiffs claim is not that Google did anything in 17 secret, but rather that it publicly announced a new practice in conflict with it prior representations. 18 In fact, in a case cited by George, United States v. Sababu, 95 the Seventh Circuit specifically held 19 that an interception was excepted as being in the “ordinary course of business” because the practice 20 at issue was announced to the prisoners affected. 21 The undersigned is mindful that only recently, in In re Google Inc. Gmail Litigation, this 22 court held that the “ordinary course of business” exception applies “only where an electronic 23 24 communication service provider’s interception facilitates the transmission of the communication at 25 issue or is incidental to the transmission of such communication,” and only if the alleged 26 interceptions were an instrumental part of the transmission of email.” Id. But among other things, 27 the court’s thorough analysis addressed allegations that Google’s practices violated its own internal 28 95 891 F.2d 1308, 1329 (7th Cir. 1989). ORDER GRANTING MOTION TO DISMISS -21Case No. 5:12-cv-01382-PSG 1 policies, further establishing that its actions are outside the course of its business. In this case, 2 Plaintiffs allege no such violation of any internal policy, rendering Plaintiffs claim insufficiently 3 stated to overcome the hurdle that Rule 12(b)(6) imposes. 4 C. Stored Communications Act 5 “The SCA was enacted because the advent of the Internet presented a host of potential 6 7 privacy breaches that the Fourth Amendment does not address.” 96 Despite this purpose, the SCA has 8 a narrow scope: “[t]he SCA is not a catch-all statute designed to protect the privacy of stored 9 Internet communications.” 97 United States District Court For the Northern District of California 10 11 12 13 14 Plaintiffs claim that Google violated the SCA in two ways. First, they claim that in aggregating users’ information between Google services without their consent, Google exceeded the scope of Google’s authorized access in violation of 18 U.S.C. § 2701(a). 98 This claim borders on frivolous, considering the plain language of subsection (c) of Section 2701(a) that exempts conduct 15 authorized “by the person or entity providing a wire or electronic communications service.” 99 16 Whatever the propriety of Google’s actions, it plainly authorized actions that it took itself. 17 18 Second, Plaintiffs claim that Google shared stored communications with third parties in violation of Section 2702(a). 100 Section 2702(a) prohibits providers of electronic communication 19 services from “knowingly divulg[ing] to any person or entity the contents of a communication . . . .” 20 21 22 23 24 25 26 Plaintiffs’ only allegation supporting its second theory is that: 96 Quon v. Arch Wireless Operating Company, Inc., 529 F.3d 892, 900 (9th Cir. 2008), rev’d on other grounds by City of Ontario v. Quon, 130 S. Ct. 2619, 177 L. Ed. 2d 216 (2010). 97 Orin S. Kerr, A User’s Guide to the Stored Communications Act, and a Legislator’s Guide to Amending It, 72 GEO. WASH. L. REV. 1208, 1214 (2004). 98 It is an offense under 18 U.S.C. § 2701(a) to “intentionally exceed[] an authorization to access” a facility through which an electronic communication service is provided. 27 99 28 100 18 U.S.C. § 2701(c). See Docket No. 57 at 21. ORDER GRANTING MOTION TO DISMISS -22Case No. 5:12-cv-01382-PSG insofar as Google engages independent, unidentified third-party entities to process and distribute user information across its product platforms, including the contents of Plaintiffs’ Gmail communications, Google intentionally discloses the contents of those communications outside of Google. 101 1 2 3 4 But “insofar” is not a concrete allegation; it is theoretical and does not support a claim. Even if this 5 were a concrete allegation, it is too conclusory to support a claim. 102 Plaintiffs simply fail to state 6 any claim under the SCA. 7 D. Misappropriation of Likeness 8 California Civil Code Section 3344 prohibits the use of another’s name or likeness without 10 United States District Court For the Northern District of California 9 the person’s consent. The cause of action requires a plaintiff to prove: “(1) the defendant’s use of 11 the plaintiff’s identity; (2) the appropriation of plaintiff’s name or likeness to defendant’s advantage, 12 commercially or otherwise; (3) lack of consent; [] (4) resulting injury;” (5) “a knowing use by the 13 defendant;” and (6) “a direct connection between the alleged use and the commercial purpose. 103 14 Here, Plaintiffs fail to adequately allege lack of consent. 15 In Fraley, consent also was at issue. 104 Facebook argued that the terms of use that all users 16 17 agreed to when signing up for Facebook constituted consent. 105 Although these terms were 18 relatively clear, 106 the plaintiffs alleged that Facebook fraudulently obtained the consent, in part 19 20 101 Docket 50 at ¶ 183. 21 102 See Bruns v. Nat’l Credit Union Admin., 122 F.3d 1251, 1257 (9th Cir. 1997). 22 103 23 24 A statutory claim under Section 3344 requires that the plaintiff make all the allegations required for a common law misappropriation claim, and two additional allegations: “1) knowing use; and 2) a “direct connection ... between the use and the commercial purpose.” Abdul-Jabbar v. Gen. Motors Corp., 85 F.3d 407, 414 (9th Cir. 1996). 104 See Fraley, 830 F. Supp. 2d at 805-06. 105 See id. 25 26 27 28 106 Facebook’s Terms of Use included the agreement that “You give us permission to use your name and [Facebook] profile picture in connection with [commercial, sponsored, or related content (such as a brand you like) served or enhanced by us], subject to the limits you place.” Id. ORDER GRANTING MOTION TO DISMISS -23Case No. 5:12-cv-01382-PSG 1 2 because all of the plaintiffs agreed to the terms before Facebook launched the feature and Facebook never asked them to review or renew the terms as part of the rollout. 107 Plaintiffs in this case only make a threadbare allegation that Google did not obtain their 3 4 consent to use their name or likeness in advertisements associated with its “+1” feature, 108 and the 5 claim is not supported by other allegations. 109 To the contrary, the complaint alleges that Ms. Marti 6 voluntarily clicked on the “+1” feature, that Google clearly disclosed how the feature worked as part 7 8 9 of the feature’s launch, and that the feature worked as Google said it would when Marti used it. In particular, the amended complaint quotes Google as: describing the “+1” feature as “the digital United States District Court For the Northern District of California 10 shorthand for ‘this is pretty cool’” and a way “to share recommendations with the world;” 110 11 explaining that to “[t]o recommend something, all you have to do is click +1 on a webpage or ad 12 you find useful;” 111 and giving the example of a person planning a winter trip to Tahoe, California 13 14 who, when doing a search, “may now see a +1 from [his] slalom-skiing aunt next to the result for a lodge in the area.” 112 15 Without some contradictory allegations, 113 this is a clear disclosure of how the feature 16 17 worked such that the voluntary use of it constituted consent. 114 Plaintiffs therefore have not stated 18 any claim for statutory or common law misappropriation of likeness. 19 107 See id. 108 See Docket No. 50 ¶ 248. 20 21 109 22 See Ashcroft v. Iqbal, 556 U.S. 662, 678 (2009) (“Threadbare recitals of the elements of a cause of action, supported by mere conclusory statements, do not suffice.”). 23 110 Docket No. 50 ¶ 107. 24 111 Id. at ¶ 108. 112 Id. 25 26 27 28 113 For example, Plaintiffs might have a claim if they could allege that the feature did not work as Google explained, that Google did not adequately disclose how the feature worked, a theory of how clicking on the “+1” feature did not demonstrate consent, or an allegation that his name or likeness was associated with brands, products, or websites he did not “+1.” ORDER GRANTING MOTION TO DISMISS -24Case No. 5:12-cv-01382-PSG E. Breach of Contract 1 “Under California law, the elements of a breach of contract claim are: (1) the existence of a 2 3 contract, (2) plaintiff's performance or excuse for nonperformance, (3) defendant's breach, and (4) 4 resulting damage to plaintiff.” 115 Here, Google does not appear to contest the first or second 5 elements, and instead focuses on the third and fourth arguments. Google argues that it has not 6 breached its contact with Plaintiffs because the original contract included provisions for it to make 7 the types of very changes that Plaintiffs allege breached the contract. Plaintiffs have a different 8 9 United States District Court For the Northern District of California 10 interpretation of the provisions in question and urge the court not to engage in contract interpretation at this time. The Ninth Circuit has explicitly noted that the court need not accept as true allegations that 11 12 are plainly contradicted by the documents at hand on a motion to dismiss.116 The policy plainly 13 includes a provision for the commingling of PII across Google products. That provision states: “We 14 15 may combine the information you submit under your account with information from other services.” 117 In light of this express provision, it is not plausible to say that Google could be 16 17 considered to have breached the contract. Plaintiffs again have failed to state a claim. 18 F. California’s Unfair Competition Law (“UCL”) 19 20 California’s UCL provides a private cause of action for users who are harmed by unfair, unlawful, or fraudulent business practices. 118 Plaintiffs here plead their UCL claim under all three 21 22 23 24 prongs. To sustain a claim under the unlawful prong, Plaintiffs must allege facts that, if proven, 114 See Iqbal, 556 U.S. at 678 (“To survive a motion to dismiss, a complaint must contain sufficient factual matter, accepted as true, to ‘state a claim to relief that is plausible on its face.’”). 115 25 EPIS, Inc. v. Fid. & Guar. Life Ins. Co., 156 F. Supp. 2d 1116, 1124 (N.D.Cal.2001) (modifying punctuation) (citing Reichert v. General Ins. Co., 68 Cal.2d 822, 830 (1968)). 26 116 See Manzarek v. St. Paul Fire & Marine Ins. Co., 519 F.3d 1025, 1031 (9th Cir. 2008). 27 117 See Docket No. 54, Ex. B, at 2. 28 118 See Lozano v. AT & T Wireless Servs., Inc., 504 F.3d 718, 731 (9th Cir. 2007). ORDER GRANTING MOTION TO DISMISS -25Case No. 5:12-cv-01382-PSG 1 would demonstrate that Defendant’s conduct violated another, underlying law. 119 If the unlawful 2 conduct is part of a uniform course of fraudulent conduct, it must meet Fed R. Civ. Pro. 9(b)’s 3 heightened pleading standards, but if it does not, then the ordinary pleading standards will 4 suffice. 120 Under the fraudulent prong, Plaintiffs must allege specific facts to show that the 5 members of the public are likely to be deceived by the actions of the defendant. 121 The Ninth 6 7 8 9 Circuit has established that this prong is subject to Fed. Rule Civ. P. 9(b)’s heightened pleading requirements. 122 With respect to Plaintiffs’ final claim under the UCL’s unfair prong, “[t]he standard for determining what business acts or practices are “unfair” in user actions under the UCL United States District Court For the Northern District of California 10 is currently unsettled.” 123 Generally speaking, “[a]n unfair business practice under the UCL is “one 11 that either offends an established public policy or is immoral, unethical, oppressive, unscrupulous, 12 or substantially injurious to users.” 124 To determine whether a business practice is unfair, a court 13 should consider “the impact of the practice or act on its victim, balanced against the reasons, 14 15 119 16 See Trazo v. Nestle USA, Inc., Case No. 5:12-CV-2272-PSG, 2013 WL 4083218, at *9 (N.D. Cal. Aug. 9, 2013). 17 120 18 See Kearns v. Ford Motor Co., 567 F.3d 1120, 1125 (9th Cir. 2009); Vess v. Ciba-Geigy Corp. USA, 317 F.3d 1097, 1106 (9th Cir. 2003). 121 20 See Finuliar v. BAC Home Loans Servicing, L.P., Case No. 3:11-cv-02629-JCS, 2011 WL 4405659 (N.D. Cal. Sept. 21, 2011) (“ ‘Fraudulent,’ as used in the statute, does not refer to the common law tort of fraud but only requires a showing members of the public ‘are likely to be deceived.’”). 21 122 22 123 19 See Kearns v. Ford Motor Co., 567 F.3d 1120, 1125 (9th Cir. 2009). 27 Yanting Zhang v. Superior Court, 57 Cal.4th 364, 380 n. 9 (2013). One test holds that “an ‘unfair’ business practice occurs when it offends an established public policy or when the practice is immoral, unethical, oppressive, unscrupulous or substantially injurious to users.” People v. Casa Blanca Convalescent Homes, Inc., 159 Cal.App.3d 509, 530 (Cal.Ct.App.1984). Another test requires that a plaintiff prove “that the defendant's “conduct is tethered to an ... underlying constitutional, statutory or regulatory provision, or that it threatens an incipient violation of an antitrust law, or violates the policy or spirit of an antitrust law.” Byars v. SCME Mortgage Bankers, Inc., 109 Cal.App. 4th 1134, 1147 (Cal.Ct.App.2003). A third test requires that “(1) the user injury must be substantial; (2) the injury must not be outweighed by any countervailing benefits to users or competition; and (3) it must be an injury that users themselves could not reasonably have avoided.” Drum v. San Fernando Valley Bar Ass'n, 182 Cal.App. 4th 247, 257, (Cal.Ct.App.2010). 28 124 23 24 25 26 McDonald v. Coldwell Banker, 543 F.3d 498, 506 (9th Cir.2008). ORDER GRANTING MOTION TO DISMISS -26Case No. 5:12-cv-01382-PSG 1 2 justifications and motives of the alleged wrongdoer;” this prong of the UCL should be used to enjoin deceptive or sharp practices.” 125 To support their claim under the UCL’s unlawful prong, Plaintiffs allege that Google’s 3 4 conduct violates California’s Right of Publicity law, the common law principles of commercial 5 misappropriation, the California CLRA, the Federal Wiretap Act, and the Stored Electronic 6 Communications Act. 126 As discussed in other sections, Plaintiffs have failed to set forth sufficient 7 8 9 factual allegations to support these underlying charges, and without having plead any underlying unlawful conduct, Plaintiffs unlawful conduct claim under the UCL must be dismissed. United States District Court For the Northern District of California 10 With respect to their claim under the fraudulent prong, Plaintiffs allege that when Google 11 collected their PII before March 1, 2012, it assured them that it would not use the information for 12 any purpose other than delivering the service for which the users provided it. 127 Subsequently, 13 without seeking the consent of individual users (including Plaintiffs), Google compiled all the 14 information it had collected about Plaintiffs from each and every one of its products, and made that 15 16 information available for use in all products. But even though Plaintiffs provide details to support 17 their allegations under Rule 9(b), as the court has already stated, the documents submitted for 18 judicial notice undermine any notion that Google failed to disclose its data commingling practices 19 before March 1, 2012. 20 21 Finally, Plaintiffs seek to support their claim of unfair conduct by alleging that Google lead them to believe that they could opt out of endorsements, profiting from the use of the plaintiff’s 22 information, and “encouraging Plaintiffs and the Class to make Google products indispensable to 23 24 their lives,” before making it incredibly difficult for them to effectively “opt out” of programs 25 26 125 Wilson v. Hynek, 207 Cal.App. 4th 999, 1008 (Cal.Ct.App.2012). 27 126 See Docket No. 50 ¶¶ 263-267. 28 127 See id. ¶¶ 82-85. ORDER GRANTING MOTION TO DISMISS -27Case No. 5:12-cv-01382-PSG 1 making use of their data. 128 These facts, as alleged, do not rise to the level of “unscrupulous” or 2 “unethical.” Even if its earlier policies were not transparent, Google provided notice to its users 3 when it changed its privacy policy, which undercuts any unethical or immoral allegations; this was 4 not a change made in the dark, but rather one broadcast to all those affected. In addition, the overall 5 benefit to users in receiving free, “indispensable” services offsets much of the harm they may suffer 6 through the change. As it stands, Plaintiffs have not set forth sufficient allegations to support an 7 8 unfairness prong claim. G. Common Law Intrusion Upon Seclusion 9 In order to put forth a claim for intrusion upon seclusion, a plaintiff must plead facts to United States District Court For the Northern District of California 10 11 support two elements: “1) intrusion into a private place, conversation or matter, and 2) in a manner 12 highly offensive to a reasonable person. . . . To show intrusion, a plaintiff must have ‘an objectively 13 reasonable expectation of seclusion or solitude in the place, conversation or data source,’ and the 14 defendant must have ‘penetrated some zone of physical or sensory privacy surrounding, or obtained 15 16 unwanted access to data about, the plaintiff.’” 129 The California Supreme Court has clarified that 17 in this context, “the concept of ‘seclusion’ is relative. The mere fact that a person [or their 18 information] can be seen by someone does not automatically mean that he or she can legally be 19 forced to be subject to being seen by everyone.” 130 Courts have recognized facts sufficient to 20 support these elements in the context of repeated phone calls, 131 eavesdropping on workplace 21 conversations, 132 and unauthorized review of email. 133 22 23 24 128 See Docket No. 50 ¶¶ 271-72. 129 Thompson v. Chase Bank N.A., Case No. 4:09-cv-2153-DMS, 2010 WL 1329061 (S.D. Cal. Mar. 30, 2010) (citing Shulman v. Group W Productions, 18 Cal.4th 200, 232 (1998)). 25 130 Joseph v. J.J. Mac Intyre Companies, L.L.C., 281 F. Supp. 2d 1156, 1165 (N.D. Cal. 2003). 131 See Panahiasl v. Gurney, Case No. 5:04-04479-JF, 2007 WL 738642 (N.D. Cal. Mar. 8, 2007). 132 See Sanders v. Am. Broad. Companies, Inc., 20 Cal. 4th 907, 916 (1999). 26 27 28 133 See Yee v. Lin, Case No. 5:12-cv-02474 -WHA, 2012 WL 4343778 (N.D. Cal. Sept. 20, 2012). ORDER GRANTING MOTION TO DISMISS -28Case No. 5:12-cv-01382-PSG Plaintiffs here allege that Google’s PII commingling intruded upon their email, contact lists, 1 2 web histories, and other secluded and private spaces. According to Plaintiffs, this expectation was 3 reasonable in light of the previous privacy policies, which assured Plaintiffs of the isolated use of 4 their data. 5 Google’s earlier disclosure that it would commingle PII across products to support its advertising 6 But once again, the court does not find any expectation to be plausible in light of model. Without a plausible expectation, Plaintiffs seclusion on intrusion claim cannot stand. 7 H. California’s User Legal Remedies Act (“CLRA”) 8 Plaintiffs’ sixth cause of action seeks recovery under Sections (a) (9), (14), and (16) of the 9 United States District Court For the Northern District of California 10 CLRA, which ban advertising goods with intent not to sell them in the manner advertised, 11 representing that a transaction conveys rights which it does not, and representing that the subject of 12 a transaction has been conveyed in accordance with terms of a previous transaction, when it has not. 13 14 In order to recover, Plaintiffs must also allege facts to establish that they relied on the misrepresentations in question, and that in so relying, they suffered damage. 134 These allegations 15 16 are subject to Rule 9(b)’s heightened pleading standards. 135 17 Plaintiffs’ claims are insufficiently plead because they fail to allege that Google intended to 18 use the PII in a manner other was advertised at the time that the plaintiffs purchased the goods and 19 registered for the services in question. Under the CLRA, the intent to deceive or misuse information 20 must be present at the time of sale in order for a plaintiff to recover. 136 Yet even if its commingling 21 practices were not disclosed in 2010, Plaintiffs offer no factual allegations indicating that Google 22 planned to change its policies as far back as 2010, such that the existing policies were aimed to 23 24 134 25 Marolda v. Symantec Corp., 672 F. Supp. 2d 992, 1003 (N.D. Cal. 2009). 135 26 See Kearns v. Ford Motor Co., 567 F.3d 1120, 1125 (9th Cir. 2009) (citing Vess v. Ciba-Geigy Corp. USA, 317 F.3d 1097, 1102 (9th Cir. 2003)). 27 136 See Wilson v. Hewlett-Packard Co., 668 F.3d 1136, 1145 (9th Cir. 2012). 28 ORDER GRANTING MOTION TO DISMISS -29Case No. 5:12-cv-01382-PSG 1 deceive at the time the business relationship began. They have not put forth any allegations 2 suggesting that Google did not intend to honor its existing privacy policies, at the time they became 3 customers. They certainly do not provide the requisite level of detail under Rule 9(b) to support 4 allegations of intent to deceive. 5 IV. CONCLUSION 6 7 Google’s motion to dismiss is GRANTED. Plaintiffs must file any further amended 8 complaint by January 16, 2014. Having dismissed two complaints already, Plaintiffs are on notice 9 that any further dismissal will likely be with prejudice. United States District Court For the Northern District of California 10 11 12 Dated: December 3, 2013 _________________________________ Paul S. Grewal United States Magistrate Judge 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 ORDER GRANTING MOTION TO DISMISS -30Case No. 5:12-cv-01382-PSG

Some case metadata and case summaries were written with the help of AI, which can produce inaccuracies. You should read the full case before relying on it for legal research purposes.

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.