QUENTIN CRABTREE, Plaintiff-Appellant, Cross-Appellee, v. EXPERIAN INFORMATION SOLUTIONS, INC., Defendant-Appellee, Cross-Appellant.
Nos. 18-3416 & 18-3405
United States Court of Appeals For the Seventh Circuit
ARGUED SEPTEMBER 4, 2019 — DECIDED JANUARY 28, 2020
Before ROVNER, SCUDDER, and ST. EVE, Circuit Judges.
SCUDDER, Circuit Judge. We know from the Supreme Court‘s decision in Spokeo, Inc. v. Robins that a plaintiff claiming a statutory violation must allege a concrete and particularized injury for Article III standing. Recent years have shown that this principle is often easier to observe than to apply. The claim in this appeal falls on the easier side. Quentin Crabtree filed this suit against Experian for what he contends was an unauthorized release of his credit information under
I
The Fair Credit Reporting Act or FCRA protects consumers’ privacy in their credit information. It does so in part by prohibiting consumer reporting agencies like Experian from releasing credit information except under specific circumstances, which Congress enumerated in
Stepping back to see what the lawful exchange of prescreen lists typically looks like aids our analysis. As a consumer reporting agency, Experian compiles consumer information into credit reports and scores. Intermediate entities collect this information from Experian and provide tailored prescreen lists of consumers to creditors and insurers intending to make firm offers. So long as those creditors and insurers ultimately extend a firm offer to each person on the list, the
At first glance that seems to be what happened when Quentin Crabtree‘s information appeared on a 2011 prescreen list compiled from Experian‘s data. But there were some complications, which Crabtree learned of in 2016 and then formed the basis of his lawsuit. The full facts are complicated and require unpacking.
Prior to the events in this case, Experian and Western Sierra had a contract that permitted Western Sierra to receive prescreen lists from Experian. These were not direct exchanges, however, as both parties used agents. Experian provided its consumer data to a company called Tranzact, which used that information to create prescreen lists. For its part, Western Sierra did not directly deal with Tranzact; rather, Tranzact sold the prescreen lists to a marketing agency called Data by IMS. Data by IMS would then extend offers backed by Western Sierra to the consumers on the prescreen list. To summarize, Experian dealt with Tranzact, Western Sierra dealt with Data by IMS, and Tranzact and Data by IMS dealt with each other—all in furtherance of Experian‘s contract with Western Sierra.
Though Crabtree brought his claim in 2016, the unauthorized exchange underlying his lawsuit took place in 2011. Experian terminated its contract with Western Sierra in October and set November 18, 2011 as the cutoff date. At that point, Western Sierra was no longer authorized to receive Experian‘s credit data, including in the form of prescreen lists prepared by Tranzact and purchased by Data by IMS.
But these facts do not necessarily show a FCRA violation. Even though Experian‘s contract with Western Sierra did not authorize the disclosure, there is little indication that Western Sierra, believing that everything was in order, failed to extend firm offers to everyone on the November 2011 prescreen list. What is more, Crabtree himself testified that he was unable to say that he did not receive a firm offer from Western Sierra and in fact he “probably did” but just does not recall. Crabtree went further and admitted that he would not have sought a loan in response to any offer of credit.
These facts nonetheless gave rise to a lawsuit. Crabtree filed a complaint against Experian in November 2016—nearly five years after Experian shared his credit information with Western Sierra. Discovery revealed that Crabtree learned about this post-contract disclosure through the person who is now his lawyer. The lawyer had recognized Crabtree‘s name while examining the list and brought it to his attention. It was only then that Crabtree was made aware of any of this and decided to bring suit in federal court under FCRA.
After extensive and complete jurisdictional discovery on whether Crabtree had alleged the requisite injury-in-fact to satisfy Article III‘s case or controversy requirement, the district court dismissed the complaint for lack of standing pursuant to
II
A
Our first question in any case is whether we have jurisdiction. Article III extends the judicial power only to the resolution of cases and controversies. At the very least, this requires a plaintiff to have suffered an injury-in-fact traceable to the defendant and capable of being redressed through a favorable judicial ruling. See Lujan v. Defs. of Wildlife, 504 U.S. 555, 560-61 (1992); see also Lopez-Aguilar v. Marion Cty. Sheriff‘s Dep‘t, 924 F.3d 375, 384 (7th Cir. 2019). At the pleading stage, the
The alleged injury must be “concrete and particularized” as well as “actual or imminent, not conjectural or hypothetical” to satisfy Article III standing. Lujan, 504 U.S. at 561. A “particularized” injury is one that “affect[s] the plaintiff in a personal and individual way.” Id. at 560 n.1. Concreteness means that the injury must exist: it must be “real,” not abstract. Spokeo, Inc. v. Robins, 136 S. Ct. 1540, 1548 (2016).
Identifying a violation of a statutory right does not automatically equate to showing injury-in-fact for standing purposes. See id. at 1548. Because the injury-in-fact requirement is rooted in Article III, Congress cannot “statutorily grant[] the right to sue to a plaintiff who would not otherwise have standing.” Id. at 1548-49. While a “bare procedural violation, divorced from any concrete injury” may be particularized because it is unique to the individual plaintiff, without more it is insufficient to confer standing. Id. at 1549.
These teachings come from the Supreme Court‘s 2016 decision in Spokeo, Inc. v. Robins. Like this case, Spokeo concerned whether a statutory violation of FCRA satisfied the injury-in-fact requirement for purposes of Article III standing. See id. at 1546. Thomas Robins brought a class action against Spokeo, a so-called “people search engine,” for failing to comply with FCRA‘s requirements. Id. Spokeo‘s service allowed users to search people by name, email address, or phone number and in return provided information such as the individual‘s “address, phone number, marital status, approximate age, [and] occupation[.]” Id. Robins alleged harm based on inaccuracies in his information. The inaccuracies amounted to a FCRA violation because Spokeo willfully failed to comply with several
The Supreme Court remanded the case because the appellate court had not adequately considered whether the alleged procedural violations “entail[ed] a degree of risk sufficient to meet the concreteness requirement.” Id. at 1550. While any small error in a consumer report might violate FCRA, the Court emphasized that “not all inaccuracies cause harm or present any material risk of harm” and therefore not all inaccuracies amount to an injury sufficient to confer Article III standing. Id. By way of example, the Court observed that “[i]t is difficult to imagine how the dissemination of an incorrect zip code, without more, could work any concrete harm.” Id.
B
In Spokeo‘s wake, we like other circuits have considered its application to the concrete injury requirement in several consumer protection cases. Three particular decisions stand alongside Spokeo itself to frame the proper analysis here.
First, in Gubala v. Time Warner Cable, Inc., Time Warner retained the plaintiff‘s information for eight years after he cancelled his cable television subscription but had not given the information to anyone else. 846 F.3d 909, 911 (7th Cir. 2017). We were willing to assume that Time Warner‘s retention of the information violated the Cable Communications Policy Act, which provides that cable operators must destroy personally identifiable information under such circumstances. Id. at 910. But, applying the lessons of Spokeo, we held that the mere retention of private consumer information, absent any
Next came Robertson v. Allied Solutions, LLC, where we held that a statutory violation that led to the deprivation of an opportunity, even if futile as a practical matter, can be enough to establish a concrete injury. 902 F.3d 690, 697 (7th Cir. 2018). A prospective employer failed to provide the plaintiff with a copy of her background report before rescinding her employment offer, which is a violation of FCRA. See id. at 695 (explaining that
To sum up—and emphasizing that we have avoided broad holdings and instead focused on the particular facts of each case—Robertson v. Allied Solutions provided an example of a prospective employee adequately pleading a concrete injury from a statutory violation that had the effect of depriving her of the chance to respond to information in a background
C
These principles find a straightforward application on the facts before us. The disclosure that Crabtree learned of nearly five years after Experian included his name on a prescreen list is not a concrete injury. To start with the obvious, Crabtree has not plausibly alleged that Experian shared his private credit report with a lender not intending to make a firm offer. Because of the middlemen inherent in this process, Crabtree‘s information got to Western Sierra from Experian even though, because of their terminated contract, it should not have. By Crabtree‘s own admissions, however, Western Sierra likely did extend him a firm offer of credit after receiving his information from Experian. The contractually unauthorized exchange of information, then, is the type of “bare procedural violation” contemplated in Spokeo that, without more, does not suffice to establish a concrete injury-in-fact for Article III purposes. 136 S. Ct. at 1550.
To put the same point in statutory terms, the privacy interest in credit information embodied in FCRA was permissibly exchanged for the promise of a firm offer—all of which Congress allowed in
Even more, Crabtree has identified no harm of any kind. Like the plaintiff in Casillas who never attempted to respond to the debt collector and therefore was not affected by the incomplete instructions, Crabtree admitted in sworn testimony that he would have thrown any firm offer from Western Sierra in the trash. Indeed, he only learned about these events after being contacted by his lawyer nearly five years later. If this communication had not occurred, Crabtree would have gone on completely unaware of and unaffected by any prescreen list. This all falls well short of the concreteness mandated by Article III. Crabtree had to come forward with something showing that he did not receive a firm offer, that Western Sierra would not have honored a firm offer, that he was affected by the lack of a firm offer, or that he suffered any actual emotional damages. He failed on each possible ground, leaving him without the concrete injury necessary for Article III standing.
D
Do not overread our conclusion to mean that a claim like Crabtree‘s fails as a matter of course. Based on Spokeo‘s principles, there is no question that a consumer reporting agency‘s unauthorized disclosure of consumer credit information can be a concrete injury. The common law recognized some right to privacy that “encompass[es] the individual‘s control of information concerning his or her person.” U.S. Dep‘t of Justice v. Reporters Comm. for Freedom of Press, 489 U.S. 749, 763 (1989). And FCRA specifically articulates a statutory right to privacy
The disclosure of consumer credit information, absent any exchanged-for consumer benefit contemplated by FCRA, can constitute an injury-in-fact for the purpose of Article III standing. The common law history, Congress‘s judgment in FCRA, and our line of cases all support the conclusion that the injury can be sufficiently real. The plaintiff just needs to plead or otherwise come forward with some evidence showing that is what happened and thus is the source of the alleged injury giving rise to the FCRA claim. The district court was right to conclude that Crabtree failed to meet these standards.
III
A
This brings us to Experian‘s counterclaim. Recall that Experian, in response to being sued under FCRA, affirmatively invoked the statute to bring a counterclaim against Crabtree. It alleged that Crabtree as the plaintiff violated
We chart a different path of reasoning in reaching the same conclusion and start with Experian‘s allegation of reputational harm. We agree with the district court that this was not a sufficient injury, as it was unsupported by any factual allegations. Experian‘s counterclaim points to no definite reasons to believe Crabtree‘s lawsuit tarnished the company‘s goodwill, affected its future business prospects, or lessened its position as one of the nation‘s major consumer reporting agencies. It is not enough to say that your reputation was harmed without explaining how. See Johnson v. U.S. Office of Pers. Mgmt., 783 F.3d 655, 669 (7th Cir. 2015) (holding that “a political figure‘s assertion, without more, that the receipt . . . [of] a benefit will hurt his or her reputation . . . is insufficient to establish standing“). Experian‘s bare counterclaim allegations are “conjectural or hypothetical” and therefore are insufficient to confer standing. Lujan, 504 U.S. at 560; see also Diedrich v. Ocwen Loan Servicing, LLC, 839 F.3d 583, 589 (7th Cir. 2016) (“Legal conclusions or bare and conclusory allegations . . . are insufficient to state a claim.“).
B
As for Experian‘s second basis for standing, we see the analysis in terms different than those endorsed by the district court. The costs to defend a lawsuit can be an injury-in-fact for purposes of Article III. In the case relied on by the district court, Steel Co. v. Citizens for a Better Environment, the Supreme Court only addressed whether a plaintiff can satisfy standing simply by pointing to the cost of bringing suit. See 523 U.S. at 107. While that cost may be concrete and particularized, the Court held that “[t]he litigation must give the plaintiff some
Experian‘s position—that the cost of defending a lawsuit is enough for Article III standing—finds some support in our court‘s Steel Company decision, which we decided on a remand from the Supreme Court. See Citizens for a Better Env‘t v. Steel Co., 230 F.3d 923, 926 (7th Cir. 2000). Even though the Supreme Court dismissed the underlying case for lack of jurisdiction, we retained authority on remand to award attorney‘s fees to the prevailing party that was “injured in fact to the tune of $270,000 and counting.” Id. We explained that the law allows “awards of litigation expenses in suits that federal courts are not authorized to decide on the merits.” Id. at 927. Against this principle, it is hard to say that litigation expenses alone cannot be a concrete and particularized injury for the purpose of our Article III standing.
To recognize that Experian has Article III standing to bring a counterclaim does not mean the company has a statutory right under FCRA to recover its defense costs, however. And even if such a right exists, the proper mechanism for relief from this type of injury ordinarily is not a counterclaim but instead a motion made after the court has entered judgment. Even more specifically,
In Citizens for a Better Environment, we held that the defendants had Article III standing to avail themselves of a federal statutory right to recover their defense costs after the Supreme Court dismissed the plaintiff‘s Emergency Planning and Community Right-to-Know Act claim. See 230 F.3d at 926. That does not mean, however, that this Article III standing alone was sufficient to bring their lawsuit; it was essential to the decision that the relevant statute provided for the recovery of attorney‘s fees. See id. at 925 (citing EPCRA‘s cause of action for litigation costs in
Put more simply, a party injured only by incurring defense costs—while injured for constitutional purposes—must find some statutory or common law hook for its motion or claim to recover those costs. Determining whether there is a cause of action in these circumstances “is a matter of statutory meaning, not of the power to adjudicate.” Id. at 928; see also Bank of Am. Corp. v. City of Miami, Fla., 137 S. Ct. 1296, 1302 (2017) (noting that the Supreme Court has cautioned against using “prudential standing” to describe the statutory interpretation exercise of discerning a cause of action‘s scope under a particular statute). The most obvious basis is a statutory right for defense costs, but defendants could also point to a common law claim for malicious prosecution. See, e.g., City of New Haven v. Reichhart, 748 N.E.2d 374, 378 (Ind. 2001) (listing the elements for a malicious prosecution claim under Indiana law). Absent either of these more straightforward grounds, a
C
FCRA does not provide a statutory cause of action to recover defense costs. If it did, this issue would be easy. All we would need to do is determine whether Experian satisfied the statutory criteria for recovery.
Recognizing this, Experian has nonetheless invoked FCRA and tries to fit under a different provision of the statute to bring its counterclaim. To do so, though, the law requires Experian to show that its claim “fall[s] within the zone of interests protected” by the precise provision of FCRA invoked in its counterclaim. Lexmark Int‘l, Inc. v. Static Control Components, Inc., 572 U.S. 118, 126 (2014). The controlling question is “whether a legislatively conferred cause of action encompasses a particular plaintiff‘s claim.” Id. at 127. To do so we “apply traditional principles of statutory interpretation.” Id. at 128.
Lexmark itself illustrates the proper approach. The case concerned whether Static Control, a maker and seller of components for Lexmark‘s cartridges, had standing to sue Lexmark for false advertising under the Lanham Act. See id. at 120. Static Control invoked
In order to bring a claim, the Court emphasized that Static Control must fall within the zone of interests protected by
D
Determining whether Experian can bring its counterclaim requires us to follow Lexmark‘s guidance by asking both whether the company has Article III standing and, separately, whether it falls within the zone of interests Congress meant to protect in creating a civil cause of action in
But we know from Lexmark that identifying an injury is not the same as locating a viable statutory cause of action. Experian cannot bring its counterclaim because the FCRA cause of action that it invokes does not encompass that claim. Experian brought its counterclaim under FCRA‘s provision for civil liability for knowing noncompliance, which covers “[a]ny person who obtains a consumer report from a consumer reporting agency under false pretenses or knowingly without a permissible purpose[.]”
But it is not enough to fit literally into the statutorily created cause of action. See Lexmark, 572 U.S. at 129. The zone-of-interests test requires us to look at FCRA‘s purpose to determine Congress‘s intended scope. See id. at 131. Congress described that purpose as “requir[ing] that consumer reporting agencies adopt reasonable procedures . . . in a manner which is fair and equitable to the consumer . . . .”
IV
We close by considering Crabtree‘s challenge to the district court‘s order requiring him to pay for the deposition of Experian‘s expert. He sees the order as an abuse of discretion because the court did not first perform its gatekeeping role of determining that the expert‘s proffered testimony would be admissible at trial under the standards embodied in
We find no abuse of discretion in this award. See Schrott v. Bristol–Myers Squibb Co., 403 F.3d 940, 943 (7th Cir. 2005).
Crabtree also misses the mark in contending that the district court had to rule on his Daubert motion to exclude Experian‘s expert testimony before considering Experian‘s application for costs under
For these reasons, we AFFIRM.
