NSS Labs, Inc. v. CrowdStrike, Inc. et al, No. 5:2018cv05711 - Document 99 (N.D. Cal. 2019)

Court Description: ORDER GRANTING 42 , 43 , 51 MOTIONS TO DISMISS WITH LEAVE TO AMEND. Signed by Judge Beth Labson Freeman on August 13, 2019. (blflc1S, COURT STAFF) (Filed on 8/13/2019)

Download PDF
1 2 3 4 5 UNITED STATES DISTRICT COURT 6 NORTHERN DISTRICT OF CALIFORNIA 7 SAN JOSE DIVISION 8 9 NSS LABS, INC., Plaintiff, 10 United States District Court Northern District of California 11 12 Case No. 18-cv-05711-BLF ORDER GRANTING MOTIONS TO DISMISS WITH LEAVE TO AMEND v. 13 SYMANTEC CORPORATION; ESET, LLC; and ANTI-MALWARE TESTING STANDARDS ORGANIZATION, INC., 14 Defendants. [Re: ECF 42, 43, 51] 15 16 17 Plaintiff NSS Labs, Inc. (“NSS Labs”) provides cybersecurity testing services for vendors 18 and end users of cybersecurity products. NSS Labs alleges that several vendors, including 19 Defendants Symantec Corporation (“Symantec”) and ESET, LLC (“ESET”), conspired with 20 Defendant Anti-Malware Testing Standards Organization (“AMTSO”) to exclude NSS Labs from 21 cybersecurity testing markets. NSS Labs sues Symantec, ESET, and AMTSO for violations of 22 federal and state antitrust laws, specifically, Section 1 of the Sherman Act, 15 U.S.C. § 1, and 23 California’s Cartwright Act, Cal. Bus. & Prof. Code § 16700 et seq. 24 Each of the Defendants has filed a motion to dismiss the complaint under Federal Rule of 25 Civil Procedure 12(b)(6). The Court has considered the briefing of the parties and the oral 26 arguments presented at the hearing on May 30, 2019. For the reasons discussed below, the 27 motions are GRANTED WITH LEAVE TO AMEND. 28 I. 1 2 The Parties 3 Plaintiff NSS Labs is the world’s leading provider of cybersecurity testing services. 4 Compl. ¶ 15, ECF 1. NSS Labs tests cybersecurity products known as Endpoint Protection 5 (“EPP”) products, which category includes Advanced Endpoint Protection (“AEP”) products. Id. 6 ¶¶ 6, 17. EPP products are primarily designed to protect endpoint devices such as personal 7 computers, laptops, and smartphones. Id. ¶ 27. AEP products “attempt to continuously monitor 8 threats to file systems” so as to allow users to act against these threats in real-time. Id. ¶ 28. NSS Labs began its business by performing “public tests,” in which it tested a number of 9 United States District Court Northern District of California BACKGROUND1 10 competing cybersecurity products, assessed the products’ abilities to protect from cyberattacks, 11 and then distributed a report to paying customers. Compl. ¶ 37. NSS Labs’ customers for public 12 reports include users, potential users, and vendors of the tested products. Id. NSS Labs also 13 performs “private tests” for vendors, in which NSS Labs tests a single product under a non- 14 disclosure agreement with the vendor. Id. ¶ 40. Defendants Symantec and ESET are vendors of EPP and AEP products. Compl. ¶¶ 48, 50. 15 16 Defendant AMTSO holds itself out as a standards setting organization. Id. ¶ 52. According to 17 AMTSO’s website, it “was founded in 2008 to improve the business conditions related to the 18 development, use, testing and rating of anti-malware products and solutions.” Id. Most EPP 19 product vendors are members of AMTSO. Id. ¶ 53. Symantec, ESET and other EPP product 20 vendors have had representatives serve on AMTSO’s Board of Directors. Id. ¶¶ 56-59. 21 AMTSO’s membership also includes companies that provide EPP testing services, including NSS 22 Labs, but those companies are in the minority and are outvoted by the EPP vendors. Id. ¶¶ 54, 60. 23 The Alleged Conspiracy 24 Symantec, ESET, and other EPP vendors (collectively, “Vendor Conspirators”) conspired 25 “to license their products under terms of use or end user license restrictions that purport to prevent 26 27 28 1 The background section is drawn from the allegations of the complaint, documents incorporated into the complaint by reference, and matters subject to judicial notice. See Louisiana Mun. Police Employees’ Ret. Sys. v. Wynn, 829 F.3d 1048, 1063 (9th Cir. 2016). 2 1 competitive or comparative testing of their products, and purport to prohibit their customers from 2 allowing their copies or ‘instances’ of EPP products to be used for competitive or comparative 3 testing.” Compl. ¶ 64. In February 2017, the Vendor Conspirators met at a conference held in 4 San Francisco, California. Id. ¶ 65. The Vendor Conspirators agreed that AMTSO would adopt 5 standards for testing and rating anti-malware products, and that the Vendor Conspirators would 6 refuse to deal with any cybersecurity testing service that did not adhere to those standards. Id. ¶ 7 66. 8 United States District Court Northern District of California 9 In May 2018, AMTSO adopted the AMTSO Testing Standard (“the Standard”), which is attached to the complaint as Exhibit A. Compl. ¶ 75 and Exh. A. The Standard does not mandate 10 any particular testing methodology. Compl. Exh. A. Instead, it requires advance disclosure of a 11 test plan to EPP Vendors. Compl. ¶¶ 77-78 and Exh. A. According to NSS Labs, the purpose of 12 the Standard is to let the Vendor Conspirators know in advance exactly how their products will be 13 tested. Id. ¶ 76. This gives “Vendor Conspirators the ability to tailor their products in advance to 14 the threats against which their products will be tested.” Id. ¶ 79. NSS Labs asserts that the 15 Standard is intended to, and does, “defeat the purpose of independent third-party testing by giving 16 the EPP Vendor Conspirators the ability to cheat the tests they will be subject to and to give 17 consumers the false impression that EPP products are free from EPP Security Defects when in fact 18 they are not.” Id. 19 On May 19, 2018, Mark Kennedy of Symantec sent an email to AMTSO membership 20 stating that Symantec is committed to using the AMTSO Standard for all privately commissioned 21 tests, and that Symantec will not deal with a testing company that does not follow the Standard. 22 Compl. ¶ 73. On May 21, 2018, at an AMTSO meeting in Portland, Oregon, other Vendor 23 Conspirators announced that they too would refuse to deal with cybersecurity testing companies 24 that do not adhere to the AMTSO Standard. Id. ¶ 74. At a June 2018 AMTSO meeting, one of the 25 agenda items was “Driving Adoption: Companies Requiring AMTSO Standards.” Id. ¶ 83. In 26 September 2018, the president of AMTSO posted to the AMTSO website a blog “strongly” 27 encouraging all testing organizations and other parties engaged in anti-malware testing to follow 28 the AMTSO Standard. Id. ¶ 84. 3 1 2 without giving EPP product vendors advance information about how the tests will be performed. 3 Compl. ¶¶ 99-100. NSS Labs claims that as a result, it is the principal target of a group boycott by 4 the Vendor Conspirators. Id. ¶¶ 98-100. The Vendor Conspirators purport to prohibit even 5 private testing of their products unless the testing company adheres to the AMTSO Standard. Id. ¶ 6 103. The Vendor Conspirators have conspired to license their products under terms of use that 7 prevent competitive or comparative testing of their products and prohibit customers from allowing 8 their copies of EPP products to be used for competitive or comparative testing. Id. ¶ 64. 9 10 United States District Court Northern District of California NSS Labs refuses to adhere to the AMTSO Standard, and it continues its practice of testing Antitrust Claims NSS Labs filed the complaint in this action on September 18, 2018, alleging federal and 11 state law antitrust claims against Symantec, ESET, and AMTSO. Compl., ECF 1. NSS Labs also 12 named EPP Vendor CrowdStrike, Inc. as a defendant, but NSS Labs has voluntarily dismissed 13 CrowdStrike, Inc. pursuant to Federal Rule of Civil Procedure 41(a). Notice of Voluntary 14 Dismissal, ECF 75. 15 NSS Labs asserts claims for: (1) Per Se Violation of Section 1 of the Sherman Act (Group 16 Boycott); (2) Violation of Section 1 of the Sherman Act under the Rule of Reason (Group 17 Boycott); (3) Per Se Violation of Section 1 of the Sherman Act (Being Disadvantaged by a 18 Membership Organization); (4) Violation of Section 1 of the Sherman Act under the Rule of 19 Reason (Being Disadvantaged by a Membership Organization); (5) Per Se Violation of Section 1 20 of the Sherman Act (Use of Membership Organization to Commit Antitrust Violations); (6) 21 Violation of Section 1 of the Sherman Act under the Rule of Reason (Use of Membership 22 Organization to Commit Antitrust Violations); (7) Per Se Violation of Section 1 of the Sherman 23 Act (Membership Organization is Inherently Anticompetitive); (8) Violation of Section 1 of the 24 Sherman Act under the Rule of Reason (Membership Organization is Inherently Anticompetitive); 25 (9) Per Se Violation of the Cartwright Act; and (10) Violation of the Cartwright Act under the 26 Rule of Reason. 27 Symantec, ESET, and AMTSO seek dismissal of all claims under Rule 12(b)(6). 28 4 1 II. “A motion to dismiss under Federal Rule of Civil Procedure 12(b)(6) for failure to state a 2 3 claim upon which relief can be granted tests the legal sufficiency of a claim.” Conservation Force 4 v. Salazar, 646 F.3d 1240, 1241-42 (9th Cir. 2011) (internal quotation marks and citation omitted). 5 While a complaint need not contain detailed factual allegations, it “must contain sufficient factual 6 matter, accepted as true, to ‘state a claim to relief that is plausible on its face.’” Ashcroft v. Iqbal, 7 556 U.S. 662, 678 (2009) (quoting Bell Atl. Corp. v. Twombly, 550 U.S. 544, 570 (2007)). A 8 claim is facially plausible when it “allows the court to draw the reasonable inference that the 9 defendant is liable for the misconduct alleged.” Id. 10 III. DISCUSSION The complaint asserts ten antitrust claims, eight under the Sherman Act § 1 and two under 11 United States District Court Northern District of California LEGAL STANDARD 12 California’s Cartwright Act. The claims fall into two categories: per se claims based on the 13 alleged conspiracy and group boycott (Claims 1, 3, 5, 7, and 9), and rule of reason claims based on 14 the same conduct (Claims 2, 4, 6, 8, and 10). Defendants contend that both sets of claims are 15 subject to dismissal under Rule 12(b)(6), while NSS Labs asserts that its per se and rule of reason 16 claims are pled adequately. When evaluating the adequacy of the pleading, the Court applies 17 federal antitrust law to all claims, including those asserted under the Cartwright Act. “The 18 analysis under California’s antitrust law mirrors the analysis under federal law because the 19 Cartwright Act, Cal. Bus. & Prof. Code § 16700 et seq., was modeled after the Sherman Act.” 20 Cty. of Tuolumne v. Sonora Cmty. Hosp., 236 F.3d 1148, 1160 (9th Cir. 2001). The parties agree 21 that, for pleading purposes, the Cartwright Act claims rise and fall with the Sherman Act § 1 22 claims. 23 A. Sherman Act § 1 24 Section 1 of the Sherman Act states that “[e]very contract, combination . . . , or conspiracy, 25 in restraint of trade or commerce” is illegal. 15 U.S.C. § 1. Because “every commercial 26 agreement restrains trade,” whether particular conduct “violates § 1 of the Sherman Act depends 27 on whether it is adjudged an unreasonable restraint.” Nw. Wholesale Stationers, Inc. v. Pac. 28 Stationery & Printing Co., 472 U.S. 284, 289 (1985). “Restraints can be unreasonable in one of 5 United States District Court Northern District of California 1 two ways.” Ohio v. Am. Express Co., 138 S. Ct. 2274, 2283-84 (2018). “A small group of 2 restraints are unreasonable per se because they always or almost always tend to restrict 3 competition and decrease output.” Id. (internal quotation marks and citation omitted). “Restraints 4 that are not unreasonable per se are judged under the rule of reason.” Id. (internal quotation marks 5 and citation omitted). “The rule of reason requires courts to conduct a fact-specific assessment of 6 market power and market structure to assess the restraint’s actual effect on competition.” Id. 7 (internal quotation marks, citation omitted, and alterations omitted). 8 Before addressing the pleading requirements particular to each of these theories of antitrust 9 liability, the Court takes up the more basic question of whether NSS Labs has alleged enough facts 10 to suggest the existence of a conspiracy. Defendant ESET contends that NSS Labs has not done 11 so, and that all claims against ESET are subject to dismissal on that basis. While framed slightly 12 differently, AMTSO also argues that the complaint alleges no unlawful conduct on its part, and 13 therefore that it cannot be liable under NSS Labs’ conspiracy theory. Defendant Symantec has 14 stated expressly that it does not challenge the conspiracy allegations for purpose of its motion to 15 dismiss. Accordingly, the Court first addresses the challenges to NSS Labs’ conspiracy allegations 16 raised by ESET and AMTSO, then it turns to all Defendants’ motions to dismiss the per se claims, 17 and finally it addresses all Defendants’ motions to dismiss the rule of reason claims. 18 B. Conspiracy Allegations Against ESET and AMTSO 19 In order to defeat a Rule 12(b)(6) motion, a plaintiff asserting Sherman Act § 1 claims 20 must allege “enough factual matter (taken as true) to suggest that an agreement was made.” Bell 21 Atl. Corp. v. Twombly, 550 U.S. 544, 556 (2007). It is insufficient to allege the existence of a 22 conspiracy in conclusory terms, or to allege facts that suggesting the mere possibility of a 23 conspiracy. See id. The plaintiff must plead “facts that are suggestive enough to render a § 1 24 conspiracy plausible.” Id. 25 1. ESET 26 ESET argues that the complaint is devoid of allegations that ESET representatives agreed 27 to, or took action in furtherance of, the conspiracy. The Court agrees. NSS Labs alleges that the 28 conspiracy began in February 2017 when CrowdStrike’s CTO “organized a meeting of the EPP 6 United States District Court Northern District of California 1 Vendor Conspirators with the express intent, purpose and effect of obtaining agreement among the 2 competitors to refuse to do business with companies, including specifically NSS Labs, who 3 attempt to perform public tests of their products using testing methodologies other than those 4 agreed to by the EPP Vendor Conspirators and embodied in the AMTSO Testing Standard.” 5 Compl. ¶ 65. According to NSS Labs, “[t]he EPP Vendor Conspirators agreed that defendant 6 AMTSO would adopt ‘standards’ for ‘testing and rating of anti-malware products and solutions,’ 7 that adherence to such standards would be mandatory at least among the EPP Vendor 8 Conspirators, and that at least the EPP Vendor Conspirators would refuse to deal with any 9 cybersecurity testing service that did not adhere to the testing ‘standards’ to be adopted by 10 AMTSO.” Id. ¶ 66. However, the complaint does not allege that ESET representatives were at the 11 February 2017 meeting or voted to adopt the proposed testing standards. 12 ESET points out that it appears from documents attached to the complaint that ESET was 13 not a member of the AMTSO Standards Working Group that developed the Standard. See Compl. 14 Exh. A at 4 (listing of AMTSO Standards Working Group). ESET requests that the Court take 15 judicial notice of information on AMTSO’s website showing that, in fact, ESET voted against 16 adoption of the Standard. See ESET’s RJN Exh. 1, ECF 44-1. The request for judicial notice is 17 granted, as no party disputes ESET’s vote and the vote “can be accurately and readily determined 18 from sources whose accuracy cannot reasonably be questioned.” Khoja v. Orexigen Therapeutics, 19 Inc., 899 F.3d 988, 999 (9th Cir. 2018). 20 At the hearing, NSS Labs’ counsel argued that ESET voted against the AMTSO Standard 21 because ESET wanted a more restrictive standard, and therefore that ESET’s vote does not 22 undermine the allegation of conspiracy. ESET’s desire for a more restrictive standard is not 23 alleged in the complaint. Further, NSS Labs does not explain how ESET’s vote against the 24 Standard that was the apparent focus of the conspiracy could give rise to a plausible inference that 25 ESET was part of the conspiracy. “For an agreement to constitute a violation of section 1 of the 26 Sherman Act, a conscious commitment to a common scheme designed to achieve an unlawful 27 objective must be established.” Toscano v. Prof’l Golfers Ass’n, 258 F.3d 978, 983 (9th Cir. 28 2001) (internal quotation marks and citation omitted). 7 1 NSS Labs alleges that the Vendor Conspirators have conspired to license their products 2 under terms of use that prevent competitive or comparative testing of their products and prohibit 3 customers from allowing their copies of EPP products to be used for competitive or comparative 4 testing. Id. ¶ 64. ESET points out that the complaint does not allege that ESET’s EULAs contain 5 such restrictions. 6 In summary, the complaint contains no facts plausibly suggesting that ESET agreed to or 7 participated in the alleged conspiracy to boycott NSS Labs. All of the claims against ESET are 8 subject to dismissal on that basis as well as on the grounds discussed below. 2. United States District Court Northern District of California 9 AMTSO 10 AMTSO argues that it is not alleged to have done anything unlawful, as its only relevant 11 conduct was adopting the AMTSO Standard through a vote of its members. The Standard is not 12 mandatory, nor does it address the type of licensing restrictions described by NSS Labs. See 13 Compl. Exh. A, Standard. It is entirely unclear from the complaint how AMTSO joined or 14 participated in the alleged conspiracy. AMTSO is not a vendor and it does not hire companies 15 such as NSS Labs to provide testing services. In short, the complaint contains no facts plausibly 16 suggesting that AMTSO agreed to or participated in the alleged conspiracy to boycott NSS Labs. 17 All of the claims against AMTSO are subject to dismissal on that basis as well as on the grounds 18 discussed below. 19 C. 20 Defendants argue that this case does not present the type of circumstances that traditionally Per Se Claims 21 have warranted application of the per se rule, and they request that the Court dismiss the per se 22 claims without leave to amend. AMTSO makes the additional argument that per se claims cannot 23 be asserted against it in light of the Standards Development Organization Advancement Act of 24 2004 (“SDOAA”), 15 U.S.C. § 4302. In opposition, NSS Labs claims that it has alleged a “classic 25 group boycott” falling squarely within the scope of the per se rule, and that the SDOAA does not 26 prohibit application of the per se rule with respect to AMTSO. 27 28 1. Circumstances Traditionally Warranting Application of Per Se Rule Exactly what kinds of activity fall within the per se rule is “far from certain.” Nw. 8 United States District Court Northern District of California 1 Wholesale Stationers, 472 U.S. at 293. Defendants argue that cases in which the Supreme Court 2 has applied a per se approach generally have involved joint efforts to disadvantage competitors by 3 denying them suppliers or customers needed to compete. For example, in Fashion Originators’ 4 Guild of America, Inc. v. FTC, the Supreme Court applied the per se rule when dress and textile 5 manufacturers who sold original designs agreed to boycott retailers that dealt with manufacturers 6 who sold copies of those original designs. 312 U.S. 457 (1941). While the manufacturers 7 boycotted retailers, with whom they had a vertical relationship, the purpose of the boycott was to 8 injure competitors – manufacturers who sold copies. Id. at 467. In Klor’s, Inc. v. Broadway-Hale 9 Stores, Inc., the Supreme Court applied the per se rule to a boycott created when a retail store, 10 Broadway-Hale, obtained agreement from manufacturers and distributors of household appliances 11 that they would not sell (or would sell only at discriminatory prices) to Broadway-Hale’s 12 competitor, Klor’s. 359 U.S. 207, 208-09 (1959). As Defendants point out, NSS Labs is not a 13 competitor of any Defendant. 14 NSS Labs contends that a per se illegal boycott need not be aimed at a competitor, citing 15 F.T.C. v. Superior Court Trial Lawyers Ass’n. In Trial Lawyers Ass’n, “a group of lawyers agreed 16 not to represent indigent criminal defendants in the District of Columbia Superior Court until the 17 District of Columbia government increased the lawyers’ compensation.” 493 U.S. 411, 414 18 (1990). The lawyers, who were in private practice, were appointed and compensated pursuant to 19 the District of Columbia Criminal Justice Act (“CJA”). Id. at 415. The Supreme Court held that 20 the lawyers’ “boycott constituted a classic restraint of trade within the meaning of Section 1 of the 21 Sherman Act,” observing that “[t]he agreement among the CJA lawyers was designed to obtain 22 higher prices for their services and was implemented by a concerted refusal to serve an important 23 customer in the market for legal services and, indeed, the only customer in the market for the 24 particular services that CJA regulars offered.” Id. at 422-23 (internal quotation marks and citation 25 omitted). Characterizing the CJA lawyers’ conduct as “the essence of price-fixing,” the Supreme 26 Court concluded that “[t]he horizontal arrangement among these competitors was unquestionably 27 a ‘naked restraint’ on price and output.” Id. at 423. 28 While Trial Lawyers Ass’n demonstrates that the per se rule may be applied where the 9 1 conspiracy does not target a direct competitor, it involved a price-fixing cartel and thus presented 2 factual circumstances very different from those at issue in this action. NSS Labs has not cited, and 3 the Court has not discovered, any case in which the per se rule has been applied to conduct 4 centered on standard setting activities such as those alleged here. At least one court in this district 5 has held that “SSO’s are not illegal per se and often create a net pro-competitive effect. . . . 6 Accordingly, any alleged agreement among the members of a SSO is analyzed under a rule of 7 reason.” Analogix Semiconductor, Inc. v. Silicon Image, Inc., No. C 08-2917 JF PVT, 2008 WL 8 8096149, at *4 (N.D. Cal. Oct. 28, 2008). United States District Court Northern District of California 9 Recognizing that “there is more confusion about the scope and operation of the per se rule 10 against group boycotts than in reference to any other aspect of the per se doctrine,” the Supreme 11 Court in Nw. Wholesale Stationers offered guidance by identifying three characteristics that are 12 indicative of a per se illegal boycott. Nw. Wholesale Stationers, 472 U.S. at 294 (internal 13 quotation marks, citation, and alterations omitted). The Ninth Circuit has summarized those three 14 characteristics as follows: “(1) the boycott cuts off access to a supply, facility, or market 15 necessary to enable the victim firm to compete; (2) the boycotting firm possesses a dominant 16 market position; and (3) the practices are not justified by plausible arguments that they enhanced 17 overall efficiency or competition.” Adaptive Power Sols., LLC v. Hughes Missile Sys. Co., 141 18 F.3d 947, 950 (9th Cir. 1998) (summarizing Nw. Wholesale Stationers). “[A] concerted refusal to 19 deal need not necessarily possess all of these traits to merit per se treatment.” Nw. Wholesale 20 Stationers, 472 at 295. Defendants argue NSS Labs’ per se claims possess none of the three 21 characteristics articulated above. Defendants focus primarily on the third characteristic, arguing 22 that the AMTSO Standard reveals a plausible efficiency justification on its face that makes 23 application of the per se rule inappropriate. However, Defendants also argue that the complaint 24 lacks facts showing that Defendants cut off NSS Labs’ access to a necessary facility or market, or 25 that Defendants have a dominant position in any relevant market. 26 27 28 a. Plausible Efficiency Justification Defendants argue that a plausible efficiency justification for the AMTSO Standard appears from the document itself. The Forward to the Standard states that “AMTSO is a non-profit 10 1 organization established to help improve the business conditions related to the development, use, 2 testing, and rating of anti-malware solutions.” Standard at 3, Exh. A to Compl., ECF 1-1. The 3 Forward goes on to discuss the critical nature of anti-malware testing, and articulates the view that 4 “the lack of proper testing protocols can create unnecessary expense for vendors, which ultimately 5 can impact the amount of resources devoted to research and development, and shift focus from 6 critical threat detection toward compliance with opaque or unfair testing procedures.” Id. The 7 Forward states that it is “based on a premise that although testers and vendors must retain their 8 independence, anti-malware testing is more likely to be transparent and Fair if there is 9 communication between the parties regarding the solution being tested, and the testing United States District Court Northern District of California 10 methodology.” Id. 11 The justification for adoption offered in the Forward to the Standard is plausible on its 12 face. Under the applicable authorities, that alone appears to doom the per se claims. “When a 13 defendant advances plausible arguments that a practice enhances overall efficiency and makes 14 markets more competitive, per se treatment is inappropriate, and the rule of reason applies.” 15 Paladin Assocs., Inc. v. Montana Power Co., 328 F.3d 1145, 1155 (9th Cir. 2003). “This is so 16 because plausible arguments that a practice is procompetitive make [the court] unable to conclude 17 ‘the likelihood of anticompetitive effects is clear and the possibility of countervailing 18 procompetitive effects is remote.’” Id. (quoting Nw. Wholesale Stationers, 472 U.S. at 294). 19 NSS Labs argues that the justification set forth in the Standard’s Forward cannot be 20 accepted at face value but must be evaluated on a more developed record. NSS Labs points out 21 that in Paladin the determination whether a per se approach was appropriate was made at 22 summary judgment and not on a first round motion to dismiss. See Paladin, 328 F.3d at 1155. 23 While NSS Labs is correct as to the procedural posture of Paladin, it is not apparent from the 24 decision that the Ninth Circuit’s discussion of the plausible efficiency justification turned on any 25 particular evidence in the record. The Ninth Circuit found that a per se approach is inappropriate 26 when a defendant “advances” a plausible efficiency justification. See id. At least one district 27 court in the Northern District of California has applied that reasoning to preclude per se claims at 28 the motion to dismiss stage, finding that a policy enacted by eBay, Inc. regarding the auctioning of 11 1 coins on its website arguably was pro-competitive and thus that a per se approach was 2 inappropriate. See Universal Grading Serv. v. eBay, Inc., No. C-09-2755 RMW, 2011 WL 3 846060, at *5 (N.D. Cal. Mar. 8, 2011). Other district courts, however, have declined to 4 determine the applicability of the per se rule on a motion to dismiss, finding “that decision is more 5 appropriate on a motion for summary judgment.” In re High-Tech Employee Antitrust Litig., 856 6 F. Supp. 2d 1103, 1122 (N.D. Cal. 2012). United States District Court Northern District of California 7 This Court concludes that because the per se claims in this case turn on enactment of a 8 Standard which articulates plausible pro-competitive justifications on its face, dismissal is 9 appropriate at the motion to dismiss stage. NSS Labs argues that its per se claims are not 10 grounded wholly in the enactment of the Standard, but also in the EPP Vendors’ agreement to 11 boycott testing companies that refuse to comply with the Standard. NSS Labs also argues that the 12 proffered pro-competitive justification actually is not plausible because there is no legitimate 13 reason for EPP Vendors to control how their products are tested. 14 The separation between the enactment of the Standard and the alleged agreement to 15 boycott is not apparent to the Court upon a reading of the complaint. The Court reads the 16 complaint to allege that the Vendor Conspirators conceived of a scheme to enact a standard for the 17 purpose of restricting testing of their products, and thereafter used the resulting AMTSO Standard 18 as a justification to boycott NSS Labs. It may be that NSS Labs can clarify its theory to show 19 anticompetitive conduct not grounded in the Standard, and to allege facts demonstrating that the 20 justification articulated in the Forward to the Standard is not plausible. As presently framed, 21 however, the Court reads the per se claims to be firmly grounded in a non-mandatory standard, 22 which was passed by AMTSO’s members in what appears to have been a legitimate vote, and 23 which articulates a plausible efficiency justification on its face. 24 25 b. Access / Market Power Defendants argue that NSS Labs also has failed to allege facts showing the existence of the 26 first two characteristics listed above, specifically, that NSS Labs was denied access to a supply, 27 facility, or market necessary to enable the victim firm to compete, or that Defendants hold a 28 dominant position in any relevant market. Defendants’ argument on these points is well-taken, 12 United States District Court Northern District of California 1 and is not refuted by NSS Labs. As noted above, it appears from the face of the complaint and 2 attached documents that the Standard is voluntary. NSS Labs is not required to adhere to the 3 Standard, nor are its customers. NSS Labs appears to argue that it needs access to test all anti- 4 malware products on the market in order to provide accurate results to its customers. However, it 5 is unclear from the complaint that Defendants deprived NSS Labs of such access. While NSS 6 Labs suggests that Defendants’ EULAs restrict access to their products such that NSS Labs does 7 not have access to Symantec and ESET products even for public testing, NSS Labs does not allege 8 any specific facts to support that suggestion. Moreover, it is entirely unclear whether Symantec 9 and ESET together make up 1% or 100% of NSS Labs’ potential customer base among EPP 10 Vendors. It therefore is unclear what effect, if any, a boycott by Symantec and ESET would have 11 on NSS Labs. AMTSO is not alleged to participate in or hold a dominant position in any market. c. 12 13 Conclusion Because it has failed to allege facts showing the existence of any of the three 14 characteristics that are indicative of a per se illegal boycott, the Court concludes that NSS Labs 15 has failed to allege a per se claim. While Defendants urge the Court to dismiss the per se claims 16 without leave to amend, the Court is reluctant to do so without granting NSS Labs the opportunity 17 to clarify its per se theories and attempt to cure the deficiencies noted herein. Accordingly, 18 Defendants’ motions to dismiss the per se claims are GRANTED WITH LEAVE TO AMEND. 19 20 2. SDOAA Defendant AMTSO argues that the per se claims against it are barred by the Standards 21 Development Organization Advancement Act of 2004 (“SDOAA”), 15 U.S.C. § 4302. That 22 statute provides in relevant part that, in any antitrust action under federal or state law, the conduct 23 of “a standards development organization while engaged in a standards development activity, shall 24 not be deemed illegal per se; such conduct shall be judged on the basis of its reasonableness, 25 taking into account all relevant factors affecting competition, including, but not limited to, effects 26 on competition in properly defined, relevant research, development, product, process, and service 27 markets.” 15 U.S.C. § 4302 (2). Defendants Symantec and ESET argue that even if the SDOAA 28 does not bar the per se claims against them on its face, the statute should be extended to cover 13 1 2 In opposition, NSS Labs argues that AMTSO is not a true standards setting organization 3 covered by the SDOAA. After the hearing, the United States filed a Statement of Interest urging 4 the Court not to dismiss NSS Labs’ per se claims pursuant to the SDOAA. See Gov’t’s Statement 5 of Interest, ECF 91. The Government argues that there are factual questions whether AMTSO is a 6 standards development organization falling within the SDOAA. The Court granted Defendants 7 leave to respond to the Government’s Statement of Interest. See Order Granting Leave, ECF 94. 8 Symantec and AMTSO filed responses; ESET did not. 9 United States District Court Northern District of California them as AMTSO’s members. After reviewing the Government’s Statement of Interest and the responses thereto, the 10 Court concludes that there may be factual issues as to whether the SDOAA applies in this case. 11 The AMTSO Standard does not proscribe any particular testing methodology but rather focuses on 12 what information must be exchanged between the testing company and the vendor. The Court 13 need not make any determination regarding the application of the SDOAA at this time, however, 14 because NSS Labs’ per se claims are subject to dismissal on other grounds, as discussed above. 15 D. Rule of Reason Claims 16 Under the rule of reason, a plaintiff must plead four separate elements: (1) the existence of 17 a conspiracy, (2) the intention on the part of the co-conspirators to harm or restrain competition, 18 (3) actual injury to competition, and (4) that the plaintiffs suffered “antitrust injury” as a result of 19 the conspiracy. See Brantley v. NBC Universal, Inc., 675 F.3d 1192, 1197 (9th Cir. 2012). 20 Defendants attack NSS Labs’ pleading with respect to the first, third, and fourth elements. 21 22 1. Existence of Conspiracy As discussed above, both ESET and AMTSO successfully challenge the sufficiency of 23 NSS Labs’ conspiracy allegations. The complaint does not allege facts showing that ESET’s 24 representatives were at the February 2017 where the conspiracy allegedly began, were involved in 25 creating the AMTSO Standard, or even voted for the Standard. The complaint likewise contains 26 no facts plausibly suggesting that AMTSO agreed to or participated in the alleged conspiracy to 27 boycott NSS Labs. 28 14 1 Injury to Competition 2 “Proving injury to competition in a rule of reason case almost uniformly requires a 3 claimant to prove the relevant market and to show the effects upon competition within that 4 market.” Oltz v. St. Peter’s Cmty. Hosp., 861 F.2d 1440, 1446 (9th Cir. 1988). “That is, the 5 plaintiff must allege both that a ‘relevant market’ exists and that the defendant has power within 6 that market.” Newcal Indus., Inc. v. IKON Office Sol., 513 F.3d 1038, 1044 (9th Cir. 2008). “The 7 term ‘relevant market’ encompasses notions of geography as well as product use, quality, and 8 description.” Oltz, 861 F.2d at 1446. “The product market includes the pool of goods or services 9 that enjoy reasonable interchangeability of use and cross-elasticity of demand.” Id. 10 United States District Court Northern District of California 2. Symantec and ESET argue that NSS Labs has not stated enough facts to plausibly establish 11 a relevant product market or power within the market. AMTSO does not focus on the relevant 12 product market in its motion. 13 Relevant Market 14 In Newcal, the Ninth Circuit discussed three factors, drawn from Brown Shoe Co. v. United 15 States, 370 U.S. 294 (1962), that must be considered in assessing a plaintiff’s definition of the 16 relevant market. See Newcal Indus., Inc. v. IKON Office Sol., 513 F.3d 1038, 1044 (9th Cir. 17 2008). First, “the relevant market must be a product market.” Id. at 1045. Second, “the market 18 must encompass the product at issue as well as all economic substitutes for the product.” Id. As 19 noted by the Supreme Court in Brown Shoe, “[t]he outer boundaries of a product market are 20 determined by the reasonable interchangeability of use or the cross-elasticity of demand between 21 the product itself and substitutes for it.” Brown Shoe, 370 U.S. at 325. Third, “although the 22 general market must include all economic substitutes, it is legally permissible to premise antitrust 23 allegations on a submarket.” Newcal, 513 F.3d at 1045. “Failure to identify a relevant market is a 24 proper ground for dismissing a Sherman Act claim.” Tanaka, 252 F.3d at 1063; see also Newcal, 25 513 F.3d at 1045 (“[A] complaint may be dismissed under Rule 12(b)(6) if the complaint’s 26 ‘relevant market’ definition is facially unsustainable.”). 27 28 The complaint alleges four product markets in the United States, referred to collectively herein as the “Relevant Product Markets”: (1) national market for EPP products, (2) national 15 United States District Court Northern District of California 1 market for AEP products, (3) national market for EPP product testing, and (4) national market for 2 AEP product testing. Compl. ¶¶ 90-95. Thus, the first of the Brown Shoe factors is satisfied. 3 However, the second factor is not satisfied, because NSS Labs fails to identify the economic 4 substitutes for the product markets. Nor does NSS Labs plead any facts regarding the cross- 5 elasticity of demand between the Relevant Product Markets and their substitutes. NSS Labs also 6 does not distinguish between any general or submarkets in its complaint. Accordingly, even 7 applying a liberal pleading standard, NSS Labs has failed to allege the relevant markets. 8 Market Power 9 To establish the effects on competition within a relevant product market, the moving party 10 must allege market power. Newcal, 513 F.3d at 1044. NSS Labs has not alleged any facts with 11 respect to Defendants’ market power in the Relevant Product Markets. 3. 12 Antitrust Injury Only those who possess antitrust standing by virtue of having suffered antitrust injury may 13 14 bring a private action for damages for violation of the antitrust laws. See Glen Holly Entm’t, Inc. 15 v. Tektronix, Inc., 352 F.3d 367, 371 (9th Cir. 2003). Plaintiff must allege harm to competition in 16 the market and cannot succeed by merely showing harm to itself as a competitor. See Brantley v. 17 NBC Universal, Inc., 675 F.3d 1192, 1200 (9th Cir. 2012). There are “four requirements for 18 antitrust injury: (1) unlawful conduct, (2) causing an injury to the plaintiff, (3) that flows from 19 that which makes the conduct unlawful, and (4) that is of the type the antitrust laws were intended 20 to prevent.” Am. Ad Mgmt., Inc. v. Gen. Tel. Co. of California, 190 F.3d 1051, 1055 (9th Cir. 21 1999). 22 Symantec and AMTSO argue that NSS Labs has not alleged facts showing antitrust injury. 23 They argue that even if NSS Labs has suffered an injury, there has been no harm to competition. 24 AMTSO also asserts that any injury suffered by NSS Labs does not flow from unlawful conduct 25 on the part of AMTSO. 26 NSS Labs alleges that it has suffered an antitrust injury due to Defendants’ actions because 27 it has suffered a group boycott and lost revenue based on its refusal to adhere to the AMTSO 28 Standard. Compl. ¶¶ 98–103. NSS Labs does not link its alleged loss of revenue to conduct that 16 1 also harms competition. NSS Labs argues that competition is harmed by EPP Vendors’ EULAs 2 restricting access to their products for testing, suggesting that NSS Labs does not have access to 3 Symantec and ESET products even for public testing. Those facts are not alleged in the 4 complaint. United States District Court Northern District of California 5 With respect to AMTSO, standards setting organizations can run afoul of antitrust laws 6 under certain circumstances, for example, where the standard is a result of coercion. See Coalition 7 for ICANN Transparency, Inc. v. VeriSign, Inc., 611 F.3d 495, 505-07 (9th Cir. 2010) (finding that 8 allegations of financial pressure and litigation threats demonstrated improper coercion of a 9 standard-setting body at the motion to dismiss stage); see also Allied Tube & Conduit Corp. v. 10 Indian Head, Inc., 486 U.S. 492, 496 (1988) (stating that packing a standard-setting organization 11 with paid support to ban a competing product violated antitrust laws). Here, no coercion or 12 similar activity is alleged in the complaint. It appears that the only relevant action AMTSO took 13 was to adopt the Standard at issue pursuant to a vote of its membership. NSS Labs asserts that the 14 Standard is anti-competitive, and causes harm to competition, because under the Standard 15 companies such as NSS Labs are to give EPP Vendors advance notice of the test plan. However, 16 the Standard is voluntary, not mandatory. NSS Labs has made clear on the face of the complaint 17 that it does not adhere to the Standard, that is, that it continues to provide testing without giving 18 EPP Vendors advance notice. NSS Labs therefore has failed to allege how AMTSO’s adoption of 19 the Standard itself, as opposed to the EPP Vendors’ alleged boycott, has caused it to suffer 20 antitrust injury. 21 22 4. Conclusion NSS Labs has failed to state a claim under the rule of reason, because it has failed to allege 23 facts showing: the existence of a conspiracy and participation in such conspiracy by ESET and 24 AMTSO; the relevant markets and Defendants’ power within those markets; or antitrust injury. 25 NSS Labs’ opposition briefs suggest that NSS Labs can allege additional facts addressing all of 26 these elements. Accordingly, the motions to dismiss are GRANTED WITH LEAVE TO AMEND 27 as to NSS Labs’ rule of reason claims. 28 17 1 IV. ORDER 2 (1) The motions to dismiss are GRANTED WITH LEAVE TO AMEND. 3 (2) Any amended complaint shall be filed on or before September 12, 2019. 4 (3) Leave to amend is limited to the deficiencies addressed in this order. NSS Labs may not add new parties or claims without first obtaining leave of the Court. 5 United States District Court Northern District of California 6 (4) With respect to any future motions to dismiss, the Court sets the following page 7 limits: 8 (a) Defendants collectively are limited to a single main brief of no more than 9 20 pages. Defendants ESET and AMTSO may, but are not required to, file 10 supplemental briefs of no more than 5 pages each. In no event may the total 11 pages of the moving briefs exceed 30 pages. 12 (b) pages of the moving briefs. 13 14 15 The opposition brief is limited to single brief that shall not exceed the total (c) Defendants collectively are limited to a single reply brief of no more than 15 pages. 16 17 18 Dated: August 13, 2019 ______________________________________ BETH LABSON FREEMAN United States District Judge 19 20 21 22 23 24 25 26 27 28 18

Some case metadata and case summaries were written with the help of AI, which can produce inaccuracies. You should read the full case before relying on it for legal research purposes.

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.