DECISION AND ORDER DENYING SOGRO INC.’S MOTION FOR SUMMARY JUDGMENT (DOC. 69), DENYING ARMES’S MOTION FOR SUMMARY JUDGMENT (DOC. 79) AND SETTING A SCHEDULING CONFERENCE
Chris Armes sues Sogro, Inc., claiming that Sogro generated customer receipts displaying more than the last five digits and expiration dates of credit cards, in contravention of the Fair and Accurate Credit Transaction Act (FACTA), 15 U.S.C. § 1681c(g). Armes asserts that on April 30, 2007, at the Budget Host Diplomat Motel in Lake Geneva, Wisconsin, Sogro violated FACTA by printing a receipt on which his entire credit card number was displayed. Because Sogro’s practice in issuing credit card receipts was uniform, Armes filed a class action lawsuit seeking to represent all consumers who received receipts from Sogro in violation of FACTA. Sogro estimates that it processed 2500 credit and debit card transactions between December 4, 2006, (the date FACTA became effective) and March 24, 2008, when it learned of FACTA and immediately acted to conform its receipts to FACTA demands. .
On March 29, 2011,
The parties have filed cross-motions for summary judgment, and now that the opt-
Summary judgment is proper if the depositions, documents or electronically stored information, affidavits or declarations, stipulations, admissions, interrogatory answers or other materials show no genuine dispute of material fact and . that the moving party is entitled to judgment as a matter of law. Fed.R.Civ.P. 56(a), (e); Celotex Corp. v. Catrett, 477 U.S. 317, 322,
The mere existence of a factual dispute does not defeat a summary judgment motion; there must be a genuine issue of material fact for the case to survive. Id. at 247-48,
Because the parties in this case filed cross-motions for summary judgment, many facts are not contested. Nevertheless, when both parties have moved for summary judgment, each is required to show that no genuine dispute of material fact exists, taking the facts in the light most favorable to the party opposing each motion. If a genuine issue of material fact remains, neither party is entitled to summary judgment. Lac Courte Oreilles Band of Lake Superior Chippewa Indians v. Voigt,
FACTS
Sogro is a corporation that operates a single, twenty-three-room motel called the Budget Host Diplomat Motel, in Lake Geneva, Wisconsin; operating the motel is Sogro’s only business. (Sogro’s Local Rule 56.1 Stmt, of Material Facts (“Doc. 70”) ¶¶ 1, 2
At all relevant times, Sogro accepted credit and debit cards, including Visa and Discover cards. (Pl.’s Am. Civil L.R. 56(b)(2)(B) Resp. to Def.’s Local Rule 56 Stmt, of Facts (“Doc. 85”) ¶ Add’l 4.
In 1999, Sogro contracted with Paymentech to process credit card transactions at the Budget Host. Sogro was to comply with Paymentech’s Operating Guide and Rules. Under the contract, “Rules” is defined as “rules and regulations ... of VISA, Mastercard or any other Card associations for which Company provides Card processing pursuant to this Agreement.” (Doc. 85 ¶ Add’l 1.) The contract signed by Solus states that Sogro’s “signature on this Agreement constitutes the acknowledgment that Merchant has received, has reviewed and understands the Operating Guide.” (Doc. 91 Ex. A Ex. 1 at FD 000003.). Right above the signature line for Sogro, the contract states that “[b]y signing below, Merchant ... acknowledges that Merchant has read and understands this Agreement and Operating Procedures and agrees to be bound by their terms.” (Doc. 91 Ex. A Ex. 1 at FD 000008.) At all times relevant to this lawsuit, Sogro also contracted with Paymentech to process debit card transactions at the Budget Host. (Doc. 85 ¶ Add’l 3.)
Armes stayed at the Budget Host on April 30, 2007; it was the only time he stayed there. (Doc. 70 ¶ 17.) When he stayed at the Budget Host, Armes was employed by Benefit Health Insurance Company as a traveling salesperson. (Doc. 70 ¶ 18.) Armes was in Lake Geneva for business purposes, giving presentations to sell magnetic therapy to local residents. - (Doc. 70 ¶ 19; Doc. 85 .¶ Resp. 19.) He paid for his room at the Budget Host with his personal Visa debit card and was not reimbursed by his employer for the charge. (Doc. 70 ¶ 20; Doc. 85 ¶ Resp. 20, ¶ Add’l 42.) Sogro provided Armes with an electronically-printed receipt that displayed the entire number and expiration date of his debit card. (Doc. 85 ¶ 5.)
Solus says that he was not aware of any requirement to truncate card numbers or expiration dates for credit or debit card receipts, or of FACTA, until he was served with the complaint in this case. (Doc. 70 Ex. A ¶ 8; Doc. 91 ¶ Add’l 6
While an owner of Sogro, Donna was unaware of any requirement that customer credit card numbers and expiration dates be truncated. (Doc. 70 ¶ 9.)
In March 2004, Paymentech created and mailed to “certain merchants” notices that stated: “Visa, MasterCard, the . federal government, as well as numerous states have initiated regulations and legislation that require merchants to have point-of-sale terminals that assist in minimizing fraud.” (Doe. 78 Ex. B ¶¶ 4, 5, Exs. 1, 2.) The notices then set forth Visa and MasterCard requirements of printing only the last four digits of the account number and suppressing the expiration date on the customer’s receipt. (Id.) The notices added: “ACTION REQUIRED. If your terminal prints the full cardholder number on the customer’s receipt, please call the Paymentech Help Desk phone number on your terminal so your software can be updated.” (Id.)
In or about August 2004, Paymentech sent a letter to those merchants whose records at Paymentech showed they were using point-of-sale equipment that was not compliant with truncation requirements. (Doc. 78 Ex. B ¶ 8.) The letter read “ * ^URGENT* * Credit Card Account Number Truncation Requirements” in the subject line. (Doc. 78 Ex. B Ex. 5.) The body of the letter stated that “Visa and MasterCard, as well as numerous states, have initiated regulations and legislation that require merchants to have fraud-deterrent point-of-sale terminals” and indicated the Visa/MasterCard requirements of printing only the last four digits of the account number on the customer’s receipt. (Id.)
In or about September 2004, Paymentech mailed to all merchants a document titled “industry wire” that included a heading “Account Number Truncation Suppression Requirement Nears” and the text that the next year Visa and MasterCard would require suppression of all but the last four digits of the card number on a receipt. (Doc. 78 Ex. B ¶ 6, Ex. 3 at 2.)
The Merchant Card Processing Statement for 2/01/08 — 2/19/08 that was sent from Paymentech to Sogro adviséd:
Government Mandated Equipment Upgrade — are you in compliance? To reduce credit card fraud and protect cardholder account information, U.S. Government truncation legislation was passed December 4, 2003. As a result, all point of sale devices in use on January 1, 2005 must be in compliance by December 4, 2006.
(Doc. 85 ¶ Add’l 16.) Sogro admits to receiving this statement. (Doc. 85 ¶ Add’l 17; Def.’s Resp.' to Pl.’s Stmt, of Add’l Material Facts (“Doc. 92”) ¶ Í7.)
Prior to October 2007, Paymentech’s website stated: “You may already be aware that with the growing rate of identity theft and fraud, many states have passed a legislation requiring merchants to comply with ‘account truncation’ rules.” (Doc. 84 ¶ 45.)
Prior to August 2010, Sogro was a member of the Wisconsin Hotel and Lodging Association (“WHLA”). (Doc. 85 ¶ Add’l 25; Doc. 78 Ex. E ¶ 3.) In the summer'of 2005, WHLA sent Sogro the Inn Touch Guide, which contained an article regarding a merchant’s need to truncate information on the receipts it provided to its customers. (Doc. 85 ¶¶ Add’l 27, 28; Doc. 92 ¶¶ 27, 28.) Sogro acknowledges receipt of that Inn Touch Guide. (Doc. 84 ¶ 28; Doc. 91 ¶ Resp. 28; Doc. 78 Ex. A at 104.) In the winter of 2006, WHLA sent Sogro the Inn Touch Magazine, which contained an article regarding compliance with the Payment Card Industry Data Security Standards. (Doc. 85 ¶¶ Add’l 29, 30; Doc. 92 ¶¶ 29, 30.)
Solus testified at deposition that he did not bother to read Sogro’s statements from Paymentech other than to see the numbers, and he does not read any notices contained in statements from Paymentech and other credit card companies. (Doc. 85 ¶ Add’l 33.) Solus stated at deposition that he believed it was the credit card processing company’s responsibility to ensure the machine was compliant with law. (Doc. 85 ¶ Add’l 37; Doc. 92 ¶ 37.) Sogro never researched whether there were any regulations it was to comply with and made no effort’ to learn the rules it was obligated to follow, except that when it switched to a new processor, PNC (apparently after this lawsuit was filed), it inquired with PNC whether Sogro was compliant with all credit card related laws. (Doc; 85 ¶¶ Add’l 36, 39; Doc. 92 ¶ 36, 39.) Solus never would examine the receipts he personally received to determine whether the credit card information was truncated. (Doc. 85 ¶ Add’l 38.)
Armes has never been the victim of identity theft resulting from any conduct of Sogro. (Doc. 70 ¶ 21.) And he has never investigated whether he has been the victim of identity theft. (Doc. 70 ¶ 22.) Moreover, Armes did not change his debit card number or acquire his credit report to find out if he was a victim of identity theft. (Doc. 70 ¶ 23.) When Armes visited Budget Host, he was not aware of FACTA. (Doc. 70 ¶ 25.) He learned of FACTA after being notified by his attorney around October 2008. (Doc. 70 ¶ 24.) After his attorney told him about FACTA, Armes reviewed his debit card receipts and found some that were not compliant. (Doc. 70 ¶ 26.) The receipt that Armes received from Sogro, has been in his possession or the possession of his attorney since his stay at the Budget Host. (Doc. 70 ¶ 33.)
Sogro admits that it violated FACTA as to all members of the class. (Doc. 84 ¶ 35; Doc. 91 ¶Resp. 35.) No one other than Armes has ever complained to Sogro that Sogro printed the entire credit card number on a receipt or asserted a claim against Sogro for doing so. (Doc. 70 ¶¶ 31, 32.)
Armes admits that he is not seeking any actual damages. (Doc. 85 ¶ Resp. 28.)
ANALYSIS
FACTA, an amendment to the Fair Credit Reporting Act (“FCRA”), provides that “no person that accepts credit cards
A. Sogro’s Motion for Summary Judgment
In its motion for summary judgment, Sogro asserts three reasons why the court should grant summary in its favor: standing, business purpose, and willfulness.
1. Standing
Sogro argues that Armes lacks standing because he neither alleged nor suffered any actual harm or risk of actual harm. It is undisputed that Armes suffered no identity theft or inconvenience in changing card numbers because of the FACTA violation and that he seeks only statutory damages.
Generally, to fulfill Article III standing requirements a plaintiff must show that (1) he suffered an “injury in fact” that is (a) concrete and particularized and (b) actual or imminent, not conjectural or hypothetical; (2) the injury is fairly traceable to the challenged action of the defendant; and (3) it is likely, not merely speculative, that the injury will be redressed by a favorable decision. Friends of the Earth, Inc. v. Laidlaw Envtl. Servs.,
Under FACTA, private citizens may sue for negligent or willful FACTA violations. See 15 U.S.C. §§ 1681n, 1681o. In the case of a negligent violation, the plaintiff may recover any actual damages plus costs of suit and reasonable attorney’s fees. § 1681o(a). For a willful violation, the plaintiff is entitled to recover “any actual damages sustained by the consumer as a result of the failure or damages of not less than $100 and not more than $1,000,” plus costs of suit and reasonable attorney’s fees. 15 U.S.C. § 1681n(a)(l)(A), (a)(3). Additionally, a plaintiff may recover punitive damages for a willful violation. 15 U.S.C. § 1681n(a)(2).
In 2007, the Supreme Court interpreted § 1681n’s willfulness provision when a plaintiff did not allege actual harm and sought only statutory damages. See Safeco Ins. Co. of Am. v. Burr,
Similarly, the Seventh Circuit did not mention any standing issue for a plaintiff who sought to represent a class of consumers seeking statutory damages rather than compensatory damages in an action under the FCRA. Murray v. GMAC Mortg.
Through FACTA, Congress created a legal right to electronically printed receipts that truncate the consumer’s credit card number. Receiving a receipt that fails to truncate the card number violates this legally protected right, which results in an injury sufficient to confer standing under Article III. See Korman v. Walking Co.,
Sogro’s citation to Amburgy v. Express Scripts, Inc.,
2. Business-Related Purposes
Next, Sogro argues that summary judgment is proper because FACTA limits recovery of statutory damages to consumer cardholders and does not allow for such damages for business card holders or for business related transactions. (Doc. 71 at 9). The court addressed this contention during class certification, finding it “unconvincing”:
Armes used his personal debit card in the credit transaction at issue; thus, his personal card information was subject to identity theft. Personal debit cards are personal debit cards no matter the purpose of the expense or whether someone’s mother, friend, or employer ends up paying the bill or reimbursing the cardholder.
(Doc. 75 at 5.)
Section 1681n provides a private right of action for consumer cardholders to enforce FACTA’s requirements. Follman v. Village Squire, Inc.,
3. Willfulness
Sogro contends that it could not have violated FACTA willfully because “during the relevant time period Sogro had no knowledge of FACTA or the credit card truncation requirements.” (Doc. 71 at 8). Additionally, says Sogro, none of Armes’s allegations or evidence demonstrates that it acted willfully.
In Safeco, the Supreme Court held that willfulness as used in the penalty section of the FCRA, 15 U.S.C. § 1681n, “covers a violation committed in reckless disregard of the notice obligation.”
In light of this standard for willfulness, Sogro’s motion for summary judgment must be denied. Taking the facts in Armes’s favor, Sogro (1) received at least two notices from Paymentech stating that federal law and Visa and MasterCard rules required point-of-sale terminals to minimize fraud by printing only the last four digits of the account number on receipts, (2) received a Paymentech notice stating that in 2005 Visa and MasterCard would require suppression of all but the last four digits of the card number on a receipt, (3) received an “urgent” letter from Paymentech about state legislation and Visa and MasterCard requirements of card number truncation, and (4) received the Inn Touch Magazine that discussed truncation. In addition, Sogro received (5) a notice in or around February 2008 discussing the equipment upgrade mandated by federal truncation legislation, and (6) the 2005 Inn Touch Guide discussing truncation. Moreover, Solus signed the Paymentech contract stating that he knew Visa and MasterCard rules applied, and that those rules required truncation by December 2006.
A reasonable jury coüld find that Solus saw some or all of these truncation notices when he looked at bills for the “numbers” or opened his mail; Arms has presented evidence sufficient to support a reasonable inference that Sogro received notice. But actual knowledge is not even required for Armes to establish willfulness; recklessness is the standard. A reasonable jury could find that Solus’s failure to pay attention to the rules that applied to him and to read notices on his bills, notices received from Paymentech about truncation, and publications he received concerning truncation constituted reckless disregard — actions entailing an unjustifiably high risk of harm that is either known or so obvious that it should be known and running a risk of violating the law substantially greater than the risk associated with negligence. Thus, a reasonable jury could find that Sogro acted willfully when it printed the full card number on Armes’s and other class members’ receipts.
Sogro is correct that many of Armes’s exhibits are not as strong as Armes portrays them. The affidavit of Paymentech’s Benjamin Wong does not specifically indicate delivery of the notices to Sogro. Wong attested that some notices were sent to some merchants, some were sent to all merchants, and the “urgent” notice was sent to those merchants whose records indicated they were honcompliant. Though none of these statements confirm that Sogro was sent two of the notices or received the notices, a reasonable jury could infer that Sogro did receive some or all of them.
Additionally, Sogro points out that the notice it admits receiving, in or about February 2008, post-dated Armes’s stay at the Budget Host. But the post-dating does not make a difference for present purposes because the evidence suggests that other notices reached Sogro as earlier as 2004 or
Sogro submits that these notices would not necessarily have informed him of FAC-TA, as they mention Visa and MasterCard and state-law rules about truncation. But that argument fails. Some of the notices did reference federal law or regulations or warned that there could be legal ramifications for failure to truncate card numbers. In addition, § 1681n references willful failure to comply with requirements imposed under FCRA, of which truncation was one. Truncation, not FACTA’s name or existence, is what is at issue. Taking the facts in Armes’s favor, Solus’s attitude toward truncation was the same for legal requirements as it was for Visa or MasterCard or state-law requirements: he just did not care about truncation, whatever the source for it was.
Sogro quotes heavily from Gardner v. Appleton Baseball Club, Inc., No. 09-C705,
Conversely, here Armes has presented enough evidence specific to Sogro to raise a genuine issue of material fact as to whether the defendant’s violation was willful. Indeed, Gardner supports Armes’s case: in noting that the complaint in Gardner gave no reason to infer willfulness merely because a FACTA violation occurred, the court suggested that a merchant’s “cavalier attitude towards credit card privacy or toward regulatory compliance in general” could change the outcome. Here, a reasonable jury definitely could conclude that Solus, and thus Sogro, maintained a cavalier attitude toward responsibilities regarding safety of credit card numbers and cardholders’ rights of customers.
Similarly, Keller v. Macon Cnty. Greyhound Park, Inc., No. 3:07-CV-1098-WKW,
Najarían also involved a merchant’s attempt to comply with FACTA and California law by requesting its hardware and software vendor to truncate the credit card number and the expiration date, but the
B. Armes’s Motion for Summary Judgment
Armes contends that summary judgment in his favor is warranted because “feigned ignorance is not a defense.” (Doc. 80 at 7.) According to Armes, Sogro’s continued ignorance of the numerous notices sent to it as well as its legal obligations constituted willful violation of FACTA.
However, summary judgment must be denied to Armes as well. Construing the evidence in the light most favorable to Sogro, Solus did not know about the truncation requirements or have reason to know. Taking the evidence in the light favorable to Sogro, Paymentech’s mailing to “certain merchants” did not go out to him, he did not receive most notices Paymentech or WHLÁ distributed, and the notices from Discover about new rules being available may not have prompted Solus to inquire further. Moreover, even if Solus did receive some of the notices and publications discussing truncation, a reasonable jury could find that he was merely careless and did not act recklessly, i.e., he did not run an unjustifiably high risk of harm that was so obvious that it should have been known. See, e.g., Shurland v. Bacci Cafe & Pizzeria on Ogden, Inc., No. 08 C 2259,
CONCLUSION
For the foregoing reasons,
IT IS ORDERED Sogro’s motion for summary judgment (Doc. 69) and Armes’s motion for summary judgment (Doc. 79) are both denied.
IT IS FURTHER ORDERED that a scheduling conference is set for April 9, 2013, at 11:00 AM in Courtroom 222, at which time the court will schedule final pretrial conference and trial dates.
Notes
. Sogro requested oral argument on its motion. However, the court finds that oral argument is not necessary.
. Unless otherwise noted, a proposed statement of material fact was undisputed by the opposing party. The court notes that Sogro’s statement of fact states that it “owns a single restaurant” doing business as the Budget Host Diplomat Motel. (Doc. 70 at 1.) However, the word "restaurant” appears to be a mistake, as Solus’s affidavit on which the proposed finding is based states that Sogro operates a motel (Doc. 70 Ex. A ¶ 2) and through the course of these proceedings the property has always been discussed as a motel rather than a restaurant.
. Doc. 91 contains two sets of numbered paragraphs. The set responding to Armes’s proposed statements of fact are called “Resp.
. Similar to Doc. 91, Doc. 85 contains two sets of numbered paragraphs. The set responding to Sogro's proposed statements of fact are called “Resp. # ” and those setting forth Armes’s proposed additional material facts are called "Add! # .”
. Although Solus says he was unaware of any truncation requirements before being served with this lawsuit, Armes disputes'whether Solus was unaware. (See Pl.’s Civil L.R. 56(b)(3)(B) Resp. to Def.’s Stmt, of Add’l Facts (“Doc. 101”) ¶ 6.)