801 F.3d 1045
9th Cir.2015Background
- Rodriguez, a PlayStation Network user, alleged Sony retained and disclosed his "personally identifiable information" (rental/purchase records) beyond the one‑year destruction period in 18 U.S.C. § 2710(e) and shared that data between Sony entities during an operational transition.
- He sued under the Video Privacy Protection Act (VPPA), asserting unlawful retention, unlawful disclosure, and a breach‑of‑contract claim; sought statutory/punitive damages and injunctive relief.
- The district court dismissed: (1) retention claims with prejudice, holding the VPPA provides no private remedy for retention violations; and (2) disclosure claims as to Sony entities under the VPPA’s "ordinary course of business" exemption (transfer of ownership/operations). Leave to amend was limited to Doe defendants only. Rodriguez appealed.
- The Ninth Circuit reviewed de novo and considered statute text, structure, and legislative history, and examined prior circuit authorities construing the VPPA.
- The Ninth Circuit affirmed: no private right of action for retention under § 2710(e); intra‑corporate or operational transfer disclosures fall within the VPPA’s ordinary‑course exception and thus do not give rise to liability.
Issues
| Issue | Plaintiff's Argument | Defendant's Argument | Held |
|---|---|---|---|
| Whether VPPA creates a private right of action for unlawful retention under § 2710(e) | Rodriguez: § 2710(c)(1) allows suits for "violation of this section," so retention violations are actionable (including injunctive relief). | Sony: § 2710(c) and structure limit private actions to unlawful disclosures in (b); (d) and (e) impose duties but do not create liability. | VPPA does not provide a private right to sue for retention violations; affirmed. |
| Whether intra‑ or inter‑company disclosure of customer data during a management/ownership transfer is unlawful (i.e., exception for "ordinary course of business") | Rodriguez: Disclosures between distinct Sony entities were unlawful and not covered by ordinary‑course exception; factual dispute (management vs ownership) precludes dismissal. | Sony: VPPA exempts disclosures "incident to the ordinary course of business," including "transfer of ownership" and order fulfillment/request processing; intra‑corporate transfers to operate service are covered. | Disclosures between related Sony entities to sustain PlayStation Network operations fall within the ordinary‑course/transfer exception; dismissal affirmed. |
| Whether VPPA retention obligations can be enforced via breach of contract or equitable relief | Rodriguez: Recast retention claim as breach of contract (terms incorporate VPPA duties) and sought injunctions/equitable relief. | Sony: Plaintiff failed to identify any contract terms incorporating VPPA retention obligations; equitable relief does not create a new private right. | Court rejected breach‑of‑contract theory and held equitable powers don’t create a private retention remedy under VPPA; dismissal proper. |
Key Cases Cited
- Sterk v. Redbox Automated Retail, LLC, 672 F.3d 535 (7th Cir. 2012) (limits VPPA private remedy to unlawful disclosures and analyzes statutory structure)
- Sterk v. Redbox Automated Retail, LLC, 770 F.3d 618 (7th Cir. 2014) (standing and intra‑company disclosure rationale reaffirmed)
- Daniel v. Cantrell, 375 F.3d 377 (6th Cir. 2004) (VPPA civil action limited to disclosure violations; statutory structure supports narrow reading)
- Graczyk v. West Pub. Co., 660 F.3d 275 (7th Cir. 2011) (discusses DPPA private right of action—distinguished on facts)
- Owner‑Operator Indep. Drivers Ass’n v. Swift Transp. Co., 632 F.3d 1111 (9th Cir. 2011) (equitable powers of courts do not themselves create statutory private rights)