MEMORANDUM AND ORDER
Plaintiff brought suit against defendants American Family Mutual Insurance Company (“American Family”), Gary Cole, and Leroy Adler for violations of the Fair Credit Reporting Act (“FCRA”), 15 U.S.C. § 1681 et seq. This matter comes before the court on Defendant Leroy Adler’s Motion to Dismiss for Lack of Personal Jurisdiction (Doc. 20), and Defendant American Family Mutual Insurance Company’s Motion to Dismiss for Failure to State a Claim Upon Which Relief Can be Granted (Doc. 21).
I. Background
Defendant American Family is a Wisconsin entity with its principal place of business in Madison, Wisconsin. Defendant Adler, a Wisconsin resident, has been employed by American Family in Wisconsin since 1976 as a Farm/Ranch Underwriting Specialist, which enables him to access credit reports. Adler has not lived in Kansas, transacted other business in Kansas, or visited Kansas within the past five years.
Defendant Cole resides in Kansas and was employed by American Family from 1977 until 2003. Cole is plaintiffs ex-husband and a friend of Adler.
In September 2002, Cole requested that, as a favor to him, Adler obtain plaintiffs credit report. Adler obtained plaintiffs credit report for Cole without the permission of plaintiff or American Family. In February 2003, Cole again asked Adler to obtain plaintiffs credit report, and again, without permission from plaintiff or American Family, Adler obtained plaintiffs credit report for Cole.
American Family received notice in March 2003 that plaintiffs credit reports were obtained- without her permission. Following this notification, American Family investigated the situation and discovered Adler’s and Cole’s role in the matter. Accordingly, American Family terminated Cole’s employment with the company and disciplined Adler.
II. Legal Standard
A. Motion to Dismiss
The court will dismiss a cause of action for failure to state a claim only when it appears beyond a doubt that the plaintiff can prove no set of facts in support of the theory of recovery that would entitle him or her to relief,
Conley v. Gibson,
B. Personal Jurisdiction
A plaintiff opposing a motion to dismiss for lack of personal jurisdiction bears the burden of showing that the court’s exercise of personal jurisdiction over the defendant is proper.
Kuenzle v. HTM Sport-Und Freizeitgerate AG,
In the instant case, the court must determine that the exercise of jurisdiction comports with due process and that an applicable statute potentially confers jurisdiction by authorizing service of process.
Peay v. BellSouth Med. Assistance Plan,
Under the due process analysis, the “constitutional touchstone” is “whether the defendant purposely established ‘minimum contacts’ in the forum state.”
Burger King,
Consistent with due process, specific jurisdiction may be conferred over a nonresident defendant where the court’s exercise of jurisdiction directly arises from a defendant’s forum-related activities. To determine whether specific jurisdiction is appropriate, the court must first decide whether the defendant has such minimum contacts within the forum state “that he should reasonably anticipate being haled into court there.”
World-Wide Volkswagen Corp. v. Woodson,
III. American Family’s Motion to Dismiss
American Family contends that it is not liable under the FCRA for violations of the *1043 Act by American Family’s employees. Plaintiff responds that American Family is directly liable for obtaining her credit report and indirectly liable for the actions of its employees, Adler and Cole, who ac-. cessed her credit report.
A.The FCRA
In 1968 Congress, recognizing the importance of an accurate and fair credit reporting system, enacted the FCRA. In particular, Congress found that “[tjhere is a need to insure that consumer reporting agencies exercise their grave responsibilities with fairness, impartiality, and a respect for the consumer’s right to privacy.” 15 U.S.C. § 1681(a)(4). The FCRA, therefore, provides an exhaustive list of permissible uses of credit reports, including, among others, by written permission of the consumer, § 1681b(a)(2); in connection with the extension of credit, § 1681b(a)(3)(A), or other business transaction; and, in connection with the underwriting of insurance, § 1681b(a)(3)(C).
Violators of the FCRA are subject to both civil liability and criminal penalty. As originally implemented, the FCRA provided for a civil action against “[a]ny consumer reporting agency or user of information ” which negligently or willfully fails to comply with any requirement of the Act. See Omnibus Consolidated Appropriations Act, 1997, Pub.L. No. 104-208, Div. A., Title II, § 2412(a), (c), (d) (emphasis added). Subsequently, Congress amended the FCRA through the Consumer Credit Reporting Reform Act of 1996 to impose civil liability on “[a]ny person toho ” willfully or negligently violates the Act. Id. at § 2401; 15 U.S.C. §§ 1681n, 1681o. The term “person” is defined as “any individual, partnership, corporation, trust, estate, cooperative, association, government or governmental subdivision or agency, or other entity.” 16 U.S.C. § 1681a(b).
B. Direct Liability
Pursuant to §§ 1681n and 1681o, an aggrieved plaintiff may bring an action against a corporation that fails to comply with the FCRA. Because a corporation can only act through its officers and directors, violations of the FCRA committed by these individuals results in the corporation being directly liable under the Act.
See, e.g., Comeau v. Rupp,
Plaintiff initially contends that American Family should be held directly liable due to the actions of Adler and Cole. However, plaintiff does not allege that either Adler or Cole were officers, directors, or even supervisory employees of American Family. Consequently, plaintiff has not pled the proper standards to hold American Family .directly liable.
C. Vicarious Liability
1. Theories of Vicarious Liability
A principal may be liable under the doctrine of respondeat superior or vicarious liability for the misconduct of its agent. First, a principal may be vicariously liable for "an agent’s tortious conduct if the principal expressly or implicitly authorized the conduct.
Schraft v. Leis,
*1044
Finally, the Supreme Court, in
Burlington Industries, Inc. v. Ellerth,
The Court distinguished the two theories outlined in § 219(2)(d) based on whether the employee is actually empowered to act in the allegedly tortious manner. According to the Court,
“apparent authority
is relevant where the agent purports to exercise a power which he or she does not have.”
Id.
at 759,
2. Case Law Analyzing Vicarious Liability Under the FCRA
At issue in this case is whether American Family should be subject to vicarious liability, under any of the above agency theories, for Adler’s and Cole’s alleged violations of the FCRA. The FCRA does not explicitly provide for vicarious liability. Further, neither -this court nor the Tenth Circuit has considered whether an employer is subject to liability under the FCRA for violations committed by its employees. Each party in this case, however, has cited several opinions from federal courts that have reviewed the issue and reached a conclusion that supports the respective party’s position. Here, as in the cases discussed below, there is no argument that American Family either authorized Adler’s and Cole’s conduct, or that they were acting within the scope of their employment. Instead, the courts’ holdings turn on whether an employer can be held liable under the apparent authority or aided-in-the-agency-relation theories.
In
Jones v. Federated Financial Reserve Corp.,
In
Del Amora v. Metro Ford Sales and Service, Inc.,
Conversely, in
Kodrick v. Ferguson,
Concern over the potential result that a subscriber would be strictly liable when its employees obtained credit reports in violation of the FCRA led two other courts to conclude that a subscriber was not vicariously liable for the actions of its employee. In
Smith v. Sears, Roebuck and Co.,
D. Analysis
The court first concludes that subscribers who violate the FCRA are not immune from liability as a matter of law. The
Kodrick
court, after an extensive analysis of the FCRA, concluded that only CRAs' and individuals could be liable under the FCRA.
See
The main point of contention of courts that have considered this issue is the application, or not, of vicarious liability to corporate employers. It is well settled that a corporation is liable for the torts of *1046 its employees, and the court can find-no reason to assume that Congress meant to exclude traditional common-law principles of agency relationships from the FCRA. Indeed, as the Jones court highlighted, Congress enacted the FCRA in order to protect consumers from individuals or entities who impermissibly access consumers’ credit reports. Allowing an injured consumer to hold a subscriber vicariously liable for the acts of its employees is, therefore, consistent with Congress’s intent. Consequently, the court holds that American Family is potentially vicariously liable for Adler’s and Cole’s actions that violate the FCRA.
In this case, there is no contention that American Family, authorized Adler’s or Cole’s conduct, nor did they act within the scope of their employment as there is no assertion that plaintiffs credit report was checked as part of American Family’s business operations. Instead, American Family’s liability hinges on. Adler’s and Cole’s actions that were beyond the scope of their employment, under the apparent authority or aided-in-the-agency-relation theory.
As the court discussed above, most courts that have considered vicarious liability in this context have adopted the aided-in-the-agency-relation rule as outlined by the Supreme Court in
Ellerth.
As the Supreme Court explained in
Ellerth,
use of the agency-relation rule is more appropriate when the employee is alleged to have misused authority, rather than attempted to exercise power the employee does not, in fact, have. Nevertheless, the court recognizes that the correct application of the agency-relation rule is made difficult by the rule’s relatively recent emergence and comparatively narrow application in comparison to other agency theories. As the
Ellerth
Court explained when acknowledging the confusion among Courts of Appeal when applying the Restatement’s rule in Title VII cases: “[t]he aided .in the agency relation standard ... is a developing feature of agency law, and we hesitate to render a definitive explanation of our understanding of the standard in an area where other important considerations must affect out judgment.”
Ellerth,
In particular, the court shares the concern expressed by the
Kodrick
court that the agency-relation rule, as applied by courts in the context of the FCRA, may subject employers to strict liability. The FCRA provides for willful or negligent standards but nowhere does the Act impose strict liability on a person or entity. Thus, this court, while understanding that the Supreme Court provided for the use of the agency-relation rule, also concludes that application of the rule has not yet been fully delineated in every context. For example, in
Ellerth
the Court applied the agency-relation rule to a Title VII sexual harassment case and held that an employer should have the opportunity to present an affirmative defense under certain circumstances before being held vicariously liable.
See Ellerth,
524 U.S. at
764-
65,
Consequently, the court concludes that American Family’s vicarious liability cannot be properly considered in a motion to dismiss. Instead, the issue should be *1047 raised at summary judgment where the parties can present evidence beyond the pleadings. 1 Specifically, the parties should address whether apparent authority or aided-in-the-agency-relation rule is the correct theory of agency liability in this case; whether an affirmative defense exists to the chosen vicarious liability theory; and, whether the affirmative defense is applicable in this context.
IY. Adler’s Motion to Dismiss for Lack of Personal Jurisdiction
Plaintiff asserts that the court may properly exercise specific jurisdiction over defendant Adler because the present cause of action arises from Adler’s contacts with Kansas. Plaintiff contends that defendant Adler engaged in sufficient minimum contacts due to Adler’s actions directed at plaintiff at her residence in Kansas. Specifically, plaintiff alleges that Adler violated plaintiffs privacy by obtaining her credit report in violation of the FCRA without her permission and without an adequate cause. Plaintiff also contends that minimum contacts exist because Cole’s requests to Adler for the credit reports came from Kansas and Adler communicated with Cole while Cole was in Kansas.
Adler argues that even if he did imper-missibly obtain plaintiffs credit report, he did so in Wisconsin and at the direction of Cole. Adler asserts that his action of making the credit inquiry is not sufficient to invoke this court’s jurisdiction and did not avail him of any privilege or benefit in Kansas.
A. Personal Jurisdiction and the FCRA
Neither this court nor the Tenth Circuit has addressed a personal jurisdiction question when, dealing with an alleged FCRA violation that results from impermissibly obtaining a credit report. Other federal courts that have addressed the issue, however, have exercised personal jurisdiction over an out-of-state defendant who accessed the credit report of an in-state plaintiff.. In
Myers,
B. Analysis
The mere allegation of an intentional tort, coupled with the injury of a forum resident, does not automatically establish personal jurisdiction over a nonresident defendant.
Far West Capital, Inc. v. Towne,
Here, Adler admits to obtaining plaintiffs credit report without plaintiffs permission and without cause. From the information required to access a credit report and Adler’s relationship with Cole, Adler was aware that plaintiff resided in Kansas. Accordingly, Adler’s actions were “expressly aimed” at plaintiff, a Kansas resident. The court, therefore, concludes that Adler’s contacts with Kansas are sufficient to establish the required minimum contacts needed to exercise jurisdiction.
The court also concludes that the exercise of jurisdiction does not offend “traditional notions of fair play and substantial justice.”
Asahi,
Here, plaintiff alleges emotional injuries and distress as a result of defendant Adler’s credit inquiry. Because this alleged injury occurred in Kansas where plaintiff resides and defendant Adler intentionally obtained plaintiffs credit report knowing plaintiff resided in Kansas, it is reasonable to conclude that defendant Adler knew his actions would have specific impact in Kansas. As the Kansas Supreme Court explained in
Ling v. Jan’s Liquors,
The court concludes that, based upon Adler’s conduct in purposefully directing his actions at Kansas and causing injury to plaintiff in Kansas, the exercise of personal jurisdiction over Adler does not violate the due process clause of the Fourteenth Amendment.
Y. Order
IT IS THEREFORE ORDERED that Defendant Leroy Adler’s Motion to Dismiss for Lack of Personal Jurisdiction (Doc. 20), and Defendant American Family Mutual Insurance Company’s Motion to Dismiss for Failure to State a Claim Upon Which Relief Can be Granted (Doc. 21) are denied.
Notes
. American Family has moved, in the alternative, for summary judgment based on exhibits attached to its motion to dismiss. The court exercises its discretion to deny American Family's alternative motion in order to allow plaintiff to respond and both parties to brief the court in light of the present opinion:
