JOHN DOE, оn behalf of himself and all others similarly situated v. CEDARS-SINAI HEALTH SYSTEM; CEDARS-SINAI MEDICAL CENTER; JARROD BROWNE v. CEDARS-SINAI HEALTH SYSTEM; CEDARS-SINAI MEDICAL CENTER; STEVEN BELTRAN; LISA REINGOLD, individually and on behalf of all others similarly situated v. CEDARS-SINAI HEALTH SYSTEM; CEDARS-SINAI MEDICAL CENTER
No. 23-55466
No. 23-55474
No. 23-55557
United States Court of Appeals for the Ninth Circuit
July 5, 2024
Opinion by Judge Mendoza
D.C. Nos. 2:23-cv-00870-DSF-JPR, 2:23-cv-01551-DSF-JPR, 2:23-cv-02626-DSF-JPR.
FOR PUBLICATION
UNITED STATES COURT OF APPEALS FOR THE NINTH CIRCUIT
OPINION
Before: Marsha S. Berzon and Salvador Mendoza, Jr., Circuit Judges, and Susan
Opinion by Judge Mendoza
SUMMARY**
Federal Officer Removal
The panel affirmed the district court‘s orders remanding removed actions to state court based on a lack of federal officer jurisdiction under
Three sets of plaintiffs filed class-action lawsuits in state court against their healthcare provider, Cеdars-Sinai Health System and Cedars-Sinai Medical Center, alleging that Cedars-Sinai unlawfully disclosed their private medical information to third parties through tracking software on its website. Cedars-Sinai removed the suits to federal court under
Following other circuits, the panel agreed with the district court that Cedars-Sinai developed its website in compliance with a generally applicable and comprehensive regulatory scheme under the Health Information Technology for Economic and Clinical Health Act, and that there was therefore no federal jurisdiction under
COUNSEL
Rachele R. Byrd (argued), Wolf Haldenstein Adler Freeman & Herz LLP, San Diego, California; Brittany Scott and Lawrence T. Fisher, Bursor & Fisher PA, Walnut Creek, California; Scott R. Drury, Drury Legal LLC, Highwood, Illinois; Samuel M. Ward, Barrack Rodos & Bacine, San Diego, California; for Plaintiffs-Appellees.
Kyle T. Cutts (argued), Baker & Hostetler LLP, Cleveland, Ohio; Teresa C. Chow and Dyanne J. Cho, Baker & Hostetler LLP, Los Angeles, California; Paul G. Karlsgodt, Baker & Hostetler LLP, Denver, Colorado; Alexander Vitruk and James R. Morrison, Baker & Hostetler LLP, Seattle, Washington; for Defendant-Appellant.
OPINION
MENDOZA, Circuit Judge:
As courts of limited jurisdiction, we are often precluded from hearing interesting and complex cases like the one before us today. Here, three sets of patients (“Plaintiffs“) filed class-action lawsuits in state court against their healthcare provider, Defendants-Appellants Cedars-Sinai Health System and Cedars-Sinai Medical Center (“Cedars-Sinai“), alleging that Cedars-Sinai unlawfully disclosed their private medical information to third parties through tracking software on its website. Cedars-Sinai removed the suits to federal court under
After considering Cedars-Sinai‘s consolidated appeal, we agree with the district court‘s decision. Although Cedars-Sinai‘s website furthers the government‘s broad goal of promoting access to digital health records, Cedars-Sinai‘s relationship with the federal government does not establish that it acted pursuant to congressionally delegatеd authority to help accomplish a basic governmental task. Indeed, far from acting at the direction of a federal officer, Cedars-Sinai built a private website of its own design to benefit its patients and staff. Accordingly, we affirm the district court‘s remand orders.
I.
In 2009, Congress passed the Health Information Technology for Economic and Clinical Health (“HITECH“) Act to encourage healthcare providers to digitize medical records and make them available online to patients and medical care providers.
The HITECH Act authorized HHS and its offices and agencies to promote the development of health information technology in a variety of ways. For example, the Act directed HHS to make incentive payments, via reimbursement, to any Medicare-participating provider that is a “meaningful EHR user.”
Cedars-Sinai, a hеalthcare organization based in California, has participated in the Meaningful Use Program since 2011. Like other participating healthcare providers, Cedars-Sinai developed a patient portal, called My CS-Link,
which is available on its website. Cedars-Sinai promotes the “convenience, functionality, and security” of the portal, advertising that it allows its patients to access their medical information and view test results, schedule appointments with providers, and research medical conditions. Relevant here, Cedars-Sinai‘s website and portal incorporate a piece of code, developed by the technology company Meta Platforms, Inc. (formerly Facebook, Inc.), which enables its hospitals to “track and share data about customer transactions.” This code, colloquially called the “Meta Pixel,” tracks patients’ interactions with Cedars-Sinai‘s website and portal and relays that information back to Cedars-Sinai and to Meta. Cedars-Sinai‘s websites also use other website analytic tools, like Google Analytics “cookies,” to track and analyze pаtient interactions. To take advantage of federal incentive payments, Cedars-Sinai submits yearly Interoperability Reports, attesting to its progress in implementing the Meaningful Use Program‘s objectives and reporting on the success of My CS-Link.
Cedars-Sinai‘s website, and its use of the Meta Pixel and Google Analytics tools to track user interactions, prompted three separate class action lawsuits, each filed in
a common thread: Cedars-Sinai violated California law and breached its own privacy policies by using the Meta Pixel and Google Analytics tools to track and disclose sensitive medical information reflected in user interactions on Cedars-Sinai‘s website. According to Plaintiffs, the Meta Pixel intercepted and relayed information about Plaintiffs to Meta and other companies, including those patients’ Facebook ID numbers, information about their appointments, and the search terms they used while researching health conditions. Those patients’ Facebook ID numbers can be connected to patients’ names on Facebook, meaning that “the private medical information a person enters onto [Cedars-Sinai‘s] Website” is “easily linked to the person themselves.” Based on this conduct, each Plaintiff seeks remedies for violations of California law; no Plaintiff alleges claims under federal law.
Cedars-Sinai removed each lawsuit from state court to federal court, and each Plaintiff timely moved for the federal court to remand his or her lawsuit to state court. In opposition to Plaintiffs’ motions for remand, Cedars-Sinai argued that removal was warranted under
orders. The court reasoned that Cedars-Sinai‘s compliance with a comprehensive regulatory scheme, even when accompanied by governmental supervision and monitoring, does not mean that it “acted under” a federal officer sufficiently to permit federal officer jurisdiction under
II.
“[U]nlike garden-variety remand orders for lack of subject-matter jurisdiction or defects in removal procedure, which are not appealable,” remand orders rejecting federal officer removal under
III.
Although Cedars-Sinai unilaterally removed these state-court actions to federal court, that fact does not mean that they get to stay there. The federal officer removal statute permits removal of actions brought in state court against “any officer (or any person acting under that officer) of the United States or of any agency thereof... for or relating to any act under color of such office.”
that: “(a) it is a person within the meaning of the statute; (b) there is a causal nexus between its actions, taken pursuant to a federal officer‘s directiоns, and [the] plaintiff‘s claims; and (c) it can assert a colorable federal defense.” County of San Mateo v. Chevron Corp., 32 F.4th 733, 755 (9th Cir. 2022) (quoting Riggs v. Airbus Helicopters, Inc., 939 F.3d 981, 986–87 (9th Cir. 2019)). Unlike removal under
Neither party disputes that Cedars-Sinai is a “person” within the meaning of
tracking technology was federally directed, we affirm the district court‘s remand orders on that basis and do not address whether it can assert colorable federal defenses. See Chevron, 32 F.4th at 760.
A.
To satisfy
In Chevron, we distilled Watson into several factors, each of which may aid our determination of whether “a private person is ‘acting under’ a federal officer.” 32 F.4th at 756. Although non-exhaustive, those factors include:
[W]hether the person is acting on behalf of the officer in a manner akin to an agency relationship. The Court also considers whether the person is subject to the officer‘s close direction, such as acting under the “subjection, guidance, or control” of the officer, or in a relationship which “is an unusually close one involving detailed regulation, monitoring, or supervision.” Third, the Court considers whether the private person is assisting the federal officer in fulfilling “basic governmental tasks” that “the Government itself would have had to perform” if it had not contracted with a private firm. Finally, taking into account the purpose of
§ 1442(a)(1) , the Court has considered whether the private person‘s activity is so closely related to the government‘s implementation of its federal duties that the рrivate person faces “a significant risk of state-court ‘prejudice,‘” just as a government employee would in similar circumstances, and may have difficulty in raising an immunity defense in state court.
Id. at 756–57 (citations omitted) (discussing Watson, 551 U.S. at 151–54); see also Cabalce, 797 F.3d at 729; Goncalves, 865 F.3d at 1246–47; Leite v. Crane Co., 749 F.3d 1117, 1120, 1124 (9th Cir. 2014).
Our circuit has not yet applied these Watson-derived factors to address whether a healthcare provider acts at the direction of the National Coordinator when it creates an EHR website with an embedded tracking code. Thankfully, we are not staring at blank computer screens, learning how to program “Hello, World!”6 The Third, Fifth, and Eighth Circuits have each considered this issue, and all three
We start with the first mover: the Eighth Circuit in Doe v. BJC Health System, 89 F.4th 1037, 1043 (8th Cir. 2023). Like Cedars-Sinai, the BJC Health System defendant created an online portal for its patients to access EHRs, and that portal contained tracking code that allegedly disclosed those patients’ private data to third parties, including Meta and Google LLC. Id. at 1040–41. In response to the plaintiffs’ motion to remand, the BJC Health System defendant invoked
federal officer removal jurisdiction, arguing that “when it created and operated the portal, it acted under HHS‘s or the [National] Coordinator‘s authority.” Id. at 1041. The Eighth Circuit was not persuaded. Relying on Watson, it reasoned that
Not long after the Eighth Circuit‘s decision in BJC Health System, the Third Circuit issued its decision in Mohr v. Trustees of the University of Pennsylvania, 93 F.4th 100, 103 (3d Cir. 2024). It too rejected the defendant‘s theory that it acted under a federal officer when it shared “patients’ identities, sensitive health information, and online activity from its patient portals with Facebook in violation of [state] privacy law.” Id. Relying heavily on BJC Health System and Watson, the Mohr court considered whether the government delegated legal authority pursuant to the Meaningful Use Program and HITECH Act to the defendant “to operate a patient portal on behalf of the government.” Id. at 105. Like the BJC Health System court, it answered “no.” The Third Circuit reasoned that the defendant had merely demonstrated “compliance with fedеral laws and regulations” when operating its own portal, which is insufficient to show that it had acted at the direction of a federal officer. Id. at 105 (citation and internal quotation marks omitted). After all, “[a]dvancing governmental policy while operating one‘s own business is not the same as executing a delegated governmental duty.” Id. The court also dismissed the defendant‘s argument that its “contractual relationship” with the federal government permitted removal. Id. at 105–06. Invoking Watson, the Mohr court dug into the “nature of the relationship between the private party and the federal government,” аnd found that the defendant was “not producing or operating any patient portal for the government.” Id. (citing Watson, 551 U.S. at 152–54). So the Third Circuit also affirmed remand.
The Fifth Circuit joined the Eighth and Third Circuits with its decision in Martin v. LCMC Health Holdings, Inc., 101 F.4th 410, 412 (5th Cir. 2024). The Martin defendant, like the defendants in the Eighth and Third Circuit cases, sought removal in an action alleging that it “embedded tracking pixels onto its website that shared [the plaintiff‘s] private health information with third-party websites.” Id. It too urged the
B.
Here, Cedars-Sinai presents many of the same arguments in favor of removal as the BJC Health System, Mohr, and Martin defendants. Like those defendants, Cedars-Sinai points to the HITECH Act‘s and Meaningful Use Program‘s directives, arguing that the federal government regulated and monitors its development of the My CS-Link portal аnd associated website. Cedars-Sinai also argues that it is helping the government produce a nationwide, interoperable technology infrastructure for health information and, absent its assistance, the National Coordinator would be left to complete his mission alone. Finally, Cedars-Sinai points to its past receipt of federal incentive payments and its continuing efforts to avoid reduced Medicare reimbursement payments through compliance with federal reporting requirements as evidence of delegated government authority. Like our sister circuits, we are unpersuaded by these arguments.
First, we agree with BJC Health System: Cedars-Sinai did not assist the National Coordinator with delegated “basic governmental tasks” when it built its patient portal and website using tracking technology. See 89 F.4th at 1043. As the Watson Court noted,
Cedars-Sinai‘s conduct more closely resembles the Watson and Sunoco defendants’ conduct than the Goncalves defendant‘s conduct. Unlike the defendant in Goncalves, or even the analogous healthcare provider in Mohr, Cedars-
Sinai does not allege that it has contracted with the government to provide a service or to create a product on its behalf. See Goncalves, 865 F.3d at 1246; Mohr, 93 F.4th at 105–06. Instead, Cedars-Sinai has presented evidence that it has complied with the broad requirements of the HITECH Act, which apply to аny healthcare provider participating in the Meaningful Use Program. That Program‘s requirements do not show an express delegation of authority to Cedars-Sinai to accomplish a basic governmental task on the National Coordinator‘s behalf. Far from it. Cedars-Sinai chose to satisfy the Meaningful Use Program‘s objectives by building a patient portal using tracking technology. That decision does not mean Cedars-Sinai‘s My CS-Link is a federal government website, or that it is operated on the government‘s behalf or for the federal government‘s benefit.
To be sure, Cedars-Sinai‘s conduct might “advance the government‘s policy by operating a patient portal that meets certain objectives and measures.” Mohr, 93 F.4th at 105. But the portal is the healthcare provider‘s creation, and there is no evidence that the government would create such a portal absent Cedars-Sinai‘s participation. See Martin, 101 F.4th at 415. Put simply, it is a private website, built by a private entity, to serve that private entity‘s patients and staff. Given that context, Cedar Sinai cannot establish that it is a subject of the government‘s direction, thus entitling it to a federal forum to put on its federal dеfenses.
Anticipating this conclusion, Cedars-Sinai asks us to consider the government‘s requirements in
to view online, download, and transmit information about a hospital admission.” Likewise,
Nor do we agree that Cedars-Sinai‘s receipt of federal “incentive payments”
IV.
Our decision today puts us in good company, and Cedars-Sinai provides no “compelling reason” to “create a circuit split” by expanding the reach of federal officer removal jurisdiction. Padilla-Ramirez v. Bible, 882 F.3d 826, 836 (9th Cir. 2017). So we decline its invitation to do so, and we affirm the district court‘s remand orders.
AFFIRMED.
