678 F. App'x 816
11th Cir.2016Background
- LabMD, a clinical lab, stored sensitive data for ~750,000 patients; a 1718-page file with ~9,300 patients’ identifiers was placed in an employee’s shared "My Documents" folder via LimeWire.
- Tiversa, a data-security company, discovered the 1718 file on peer‑to‑peer networks, solicited LabMD for services, and later reported LabMD to the FTC after LabMD declined to buy services.
- The FTC investigated and, relying in part on Tiversa’s representations, charged LabMD with unfair practices under § 45 for failing to provide reasonable data security; an ALJ dismissed the complaint for lack of proof of consumer harm.
- The FTC reversed the ALJ, issued a Final Order imposing extensive compliance, notice, and monitoring requirements, and denied LabMD’s stay request pending appeal.
- LabMD ceased operations, has negligible assets and no revenue, and contends compliance costs would be ruinous and unrecoverable due to sovereign immunity.
Issues
| Issue | Plaintiff's Argument | Defendant's Argument | Held |
|---|---|---|---|
| Whether the FTC reasonably interpreted "unfair" under 15 U.S.C. § 45(n) to include speculative/intangible privacy harms | FTC misread § 45(n); requires proof of actual or probable substantial injury, not speculative or purely emotional harms | FTC: § 45(n) and precedent allow recognizing privacy/intangible harms and a "significant risk" construction of "likely to cause" | Court found LabMD raised a serious legal question that the FTC’s interpretation may be unreasonable and merited Chevron scrutiny; substantial case on the merits for a stay |
| Scope of "likely to cause" in § 45(n) (probable vs. significant risk) | "Likely" requires higher probability (probable/ reasonably expected); FTC’s low‑threshold "significant risk" is unreasonable | FTC: dictionaries and context support its broader meaning allowing action for large‑magnitude but less probable harms | Court doubted FTC’s low‑probability reading; concluded LabMD made a substantial showing that FTC’s interpretation may be unreasonable |
| Irreparable harm from enforcing the FTC Final Order pending appeal | Enforcement costs (notice, security program, assessments, hotline) would destroy LabMD; sovereign immunity prevents recovery of costs later | FTC disputed cost estimates and argued no irreparable harm | Court held LabMD would suffer irreparable harm given its insolvency and inability to recover costs, favoring a stay |
| Harm to third parties / public interest from staying the FTC Order | Stay poses minimal risk: LabMD is defunct, stores records offline, no evidence of misuse beyond Tiversa/FTC | FTC argued potential consumer risk and interest in timely notice to affected individuals | Court found no current substantial risk of consumer harm and treated public interest as neutral; stay granted |
Key Cases Cited
- Nken v. Holder, 556 U.S. 418 (stay‑pending‑appeal factors)
- Ruiz v. Estelle, 650 F.2d 555 (standard permitting stay when serious legal question and equities favor movant)
- Garcia‑Mir v. Meese, 781 F.2d 1450 (stay on lesser showing when equities heavily favor movant)
- Chevron U.S.A., Inc. v. Nat. Res. Def. Council, Inc., 467 U.S. 837 (agency interpretations entitled to deference if reasonable)
- United States v. Mead Corp., 533 U.S. 218 (limits on Chevron deference)
- Atlantic Ref. Co. v. FTC, 381 U.S. 357 (Congress left development of "unfair" to FTC expertise)
- Freedom Holdings, Inc. v. Spitzer, 408 F.3d 112 (ordinary compliance costs generally not irreparable)
- Texas v. United States EPA, 829 F.3d 405 (insolvency and enforcement costs can support irreparable harm)
- Odebrecht Constr., Inc. v. Sec'y, Fla. Dep't of Transp., 715 F.3d 1268 (sovereign immunity can make monetary relief unrecoverable, supporting irreparable‑harm finding)
- Bonner v. City of Prichard, 661 F.2d 1206 (Eleventh Circuit adoption of pre‑1981 Fifth Circuit decisions)