MEMORANDUM AND ORDER
The Fair and Accurate Credit Transactions Act of 2003 (FACTA) amended the Fair Credit Reporting Act (FCRA) to, among other things, include the following truncation requirement: “[N]o person that accepts credit cards or debit cards for the transaction of business shall print more than the last 5 digits of the card number or the expiration date upon any receipt provided to the cardholder at the point of the sale or transaction.” 15 U.S.C. § 1681e(g). Plaintiff Lety Ramirez filed this putative class action lawsuit alleging that defendant Midwest Airlines, Inc. violated this statute by giving her a receipt that included her credit card’s expiration date. She seeks statutory damages, punitive damages, costs, and attorneys fees as permitted for a consumer to recover for a willful violation of FCRA. Id. § 1681n. This matter is currently before the court on Midwest’s motions for judgment on the pleadings or, alternatively, summary judgment (docs. # 18 & # 20). 1 As explained below, the court finds Midwest’s arguments to be without merit, and therefore both motions are denied.
STATEMENT OF MATERIAL FACTS
Midwest has styled its motions as ones for judgment on the pleadings or, alternatively, for summary judgment. In support of the motions, it relies on affidavits and other materials attached to the motions. And, in response to Midwest’s motions, plaintiff relies on similar types of materials. It would be improper for the court to consider materials outside the complaint in resolving a motion for judgment on the pleadings.
See Park Univ. Enters., Inc. v. Am. Cas. Co.,
On November 1, 2006, Midwest entered into a software license and services agreement with ABANCO International LLC relating to the use of ABANCO credit card processing software and hardware for consumer in-flight purchases on Midwest’s flights. On or after December 4, 2006, Midwest began using handheld devices provided by ABANCO to process credit card transactions for in-flight purchases of meals, drinks, and other items. Midwest used the devices on twenty-six test flights that month. As of January 1, 2007, Midwest began accepting credit cards on flights other than test flights.
At some time after December 4, 2006, plaintiff made an on-board, in-flight purchase on one of Midwest’s airplanes using her credit card. It is undisputed that the receipt she was given contained the last four digits of her credit card number as well as her card’s expiration date. She filed this lawsuit on April 27, 2007, alleging that the inclusion of the card’s expiration date on the receipt violated FACTA. 2 Midwest’s registered agent received the complaint on May 10, 2007. On May 25, 2007, Midwest notified ABANCO and an action plan was established to fix the information printed on the receipts. As of June 7, 2007, the ABANCO systems were updated so that they no longer print the credit or debit card expiration dates on any receipts provided to customers.
Midwest’s first motion for summary judgment is based on what it contends is a lack of harm to Ms. Ramirez. 3 In support of this motion, Midwest has submitted a declaration from Mari J. Frank, who is purportedly qualified to testify as an expert concerning privacy and identity theft issues. Ms. Frank states that the printing of the credit card expiration number on receipts does not foster credit card fraud or identity theft. Her rationale is that truncating the credit card number on the receipt by masking all but the last four digits of the card number is sufficient to thwart an imposter from making a fraudulent purchase because the complete account number must be input for a credit or debit card transaction to process at all. She further explains that the critical information needed to process a card in a card-not-present transaction is the complete credit card number in addition to the cardholder’s address, zip code, and security code, which is the three-digit code number on the back of the card, not the expiration date.
In response to Ms. Frank’s assertions, plaintiff has submitted a declaration from Patrick Faith, the Vice President of Encryption and Authentication Processing for Visa U.S.A. Inc. Mr. Faith states that “[t]he primary purpose of the expiration *1164 date on a Visa card is fraud detection and prevention.” Faith Decl. ¶ 2, at 1. Mr. Faith further explains that Visa publishes Rules for Visa Merchants: Card Acceptance and Chargeback Management Guidelines that is a comprehensive manual for all United States merchants that accept Visa transactions. In those Rules, Visa discusses its fraud prevention policies, guidelines, and services for card-not-present merchants. The Rules suggest that a card-not-present merchant ask the cardholder for the card expiration date and that the merchant include that information in the transaction authorization request. Mr. Faith explains in more detail as follows:
Including the expiration date helps to verify that the card and transaction are legitimate. A mail, telephone or internet order containing an invalid or missing expiration date may indicate eoun- . terfeit or other unauthorized use. If the merchant elects not to obtain the card expiration date and include that information in the transaction authorization request, the merchant is increasing its exposure to fraud and potentially to liability from chargebacks.
7. Card-not-present merchants may also elect to take advantage of Visa’s Card Verification Value 2 (“CW2”) validation as part of the authorization request. The CW2 is a three-digit security number printed on the back of Visa payment cards to help validate that a merchant’s customer is in possession of a legitimate card at the time of the order. To obtain CW2 validation as part of the authorization request, the merchant needs to request from the cardholder and submit as part of the authorization request, the CW2 number from the back of the Visa payment card, the card expiration date, and the card number. If the expiration date obtained from the customer is incorrect, the CW2 result code would show N for “No Match.” A “No Match” response is a sign of potential fraud, which the merchant should take into account along with the authorization response and any other verification data.
Id. ¶¶ 6-7, at 2-3.
Based on this factual background, Midwest has filed two motions in which it argues that it is entitled to summary judgment on plaintiffs claim. Therein, Midwest raises essentially two categories of arguments. In the first motion, Midwest argues that Ms. Frank’s declaration establishes that the fact that plaintiffs receipt contained four digits of her credit card number and the card’s expiration date did not and could not have placed her or anyone else at risk of being the victim of fraud or identity theft and, consequently, (1) plaintiff cannot show the “injury-in-fact” required for Article III standing; (2) plaintiff is not eligible for the windfall of statutory damages she seeks pursuant to § 1681n(a)(l)(A); and (3) an award of any such damages would violate principles of Due Process. In the second motion, Midwest argues that even if the receipt violated § 1681c(g), (1) Midwest cannot be held to have “willfully” violated that statute because the alleged violation conforms to an interpretation of the statute that has a foundation in the statutory text, and (2) the statute is unconstitutionally vague and ambiguous on its face.
SUMMARY JUDGMENT STANDARD
Summary judgment is appropriate if the moving party demonstrates that there is “no genuine issue as to any material fact” and that it is “entitled to a judgment as a matter of law.” Fed.R.Civ.P. 56(c). In applying this standard, the court views the evidence and all reasonable inferences therefrom in the light most favorable to the nonmoving party.
Spaulding v. United Transp. Union,
The moving party bears the initial burden of demonstrating an absence of a genuine issue of material fact and entitlement to judgment as a matter of law.
Spaulding,
Once the movant has met this initial burden, the burden shifts to the nonmov-ing party to “set forth specific facts showing that there is a genuine issue for trial.”
Spaulding,
Finally, the court notes that summary judgment is not a “disfavored procedural shortcut”; rather, it is an important procedure “designed ‘to secure the just, speedy and inexpensive determination of every action.’ ”
Celotex,
DISCUSSION
For the reasons explained below, the court finds each and every one of Midwest’s arguments to be without merit. Plaintiff has Article III standing to bring her claim by virtue of the fact that she suffered a concrete injury-in-fact when Midwest violated her legal right under FACTA to receive a receipt that omitted her credit card expiration date and, in doing so, subjected her to an increased risk of credit card fraud. Midwest’s argument that she is not permitted to recover statutory damages in the absence of a showing of actual damages is unsupported by the unambiguous language of § 1681n. And, Midwest’s due process argument is premature. Finally, Midwest’s attempt to find ambiguity in § 1681c(g), a statute which is anything but ambiguous, is wholly unpersuasive.
I. First Motion Based on Plaintiff’s Asserted Lack of Injury
The factual basis for Midwest’s first motion is its contention that plaintiff suffered no actual injury. In support of this argument, it has submitted Ms. Frank’s decía- *1166 ration to the effect that the printing of credit card expiration numbers on receipts does not foster credit card fraud or identity theft. Midwest contends that, because of this fact (1) plaintiff lacks Article III standing, (2) she is not permitted to recover damages under § 1681n, and (3) an award of statutory damages would violate due process.
A. Article III Standing
Federal courts may only hear actual “Cases” or “Controversies.” U.S. Const, art. Ill, § 2, cl. 1. Standing is an essential part of Article Ill’s case-or-controversy requirement.
Lujan v. Defenders of Wildlife,
First, Midwest’s lack of standing argument erroneously presumes that plaintiff must establish that the alleged FACTA violation caused her to suffer some form of actual harm. It is well settled that a statute itself may create a legal right, the invasion of which causes an injury sufficient to create standing.
Warth v. Seldin,
The second fallacy in Midwest’s argument is that the declaration submitted by plaintiff from Mr. Faith undermines Ms. Frank’s declaration. Mr. Faith’s affidavit states that the primary purpose of credit card expiration dates is fraud detection and prevention. He explains in detail how the expiration date serves to prevent fraud in card-not-present transactions. And, specifically, he explains how the expiration date is used in conjunction with the three-digit security code on the back of the card in the validation process. Ms. Frank’s declaration seems to be premised on the erroneous assumption that furnishing a receipt containing information that FACTA requires to be omitted is problematic only if the receipt furnishes all of the information needed for a wrongdoer to commit fraud. Mr. Faith’s more comprehensive declaration explains how the expiration date provides a piece of the puzzle that would assist a wrongdoer in committing fraud. Taken as true, this information establishes that plaintiff suffered a concrete and particularized injury when Midwest’s agent handed her a receipt containing information prohibited by FACTA and, in doing so, increased the risk that she might become a victim of credit card fraud.
Midwest nonetheless contends that Congress’s ability to create legal rights, the invasion of which creates standing, does not confer on Congress the ability to create Article Ill’s requirements. In support of this argument, Midwest relies on a line of Supreme Court cases which is distinguishable because they involved citizen lawsuits raising generalized grievances challenging the legality of government action or inaction, and the very nature of those cases implicated different legal concerns about standing.
See generally, e.g., Raines v. Byrd,
B. Availability of Statutory Damages
In this lawsuit plaintiff is seeking statutory damages for defendant’s allegedly willful violation of FCRA pursuant to 15 U.S.C. § 1681n(a)(l)(A). This statute provides as follows:
Any person who wilfully fails to comply with any requirement imposed under this subchapter with respect to any consumer is liable to that consumer in an amount equal to the sum of—
(1)(A) any actual damages sustained by the consumer as a result of the failure OR damages of not less than $100 and not more than $1,000; or
(B) in the case of liability of a natural person for obtaining a consumer report under false pretenses or knowingly without a permissible purpose, actual damages sustained by the consumer as a result of the failure or $1,000, whichever is greater;
(2) such amount of punitive damages as the court may allow; and
(3) in the case of any successful action to enforce any liability under this sec *1168 tion, the costs of the action together with reasonable attorney’s fees as determined by the court.
§ 1681n(a) (emphasis added). The emphasized subsection provides for “actual damages” or “damages of not less than $100 and not more than $1,000.” The latter of the two alternatives provides for what is commonly known as statutory damages. In this lawsuit, plaintiff is not seeking actual damages, but rather statutory damages. Midwest argues that the statutory damage provision should be read to provide only for damages to compensate actual injury without requiring proof of the extent of actual injury.
As in all statutory construction cases, the court begins with the language of the statute itself.
Barnhart v. Sigmon Coal Co.,
Midwest nonetheless argues that the plaintiff must be required to prove some actual damages because if the statute were to provide for damages where no injury exists, then its purpose would be punitive, thus making the punitive damages provided for in subsection (2) redundant. The actual or statutory damages in subsection (a)(1), however, are in the nature of compensatory damages.
See In re Trans Union Corp. Privacy Litig.,
Midwest also contends that because Congress provided for statutory damages only for willful violations, the meaning of the term “willful” confirms the need for some injury to exist. In support of this argument, Midwest cites to that portion of the Supreme Court’s opinion in
Safeco Ins. Co. of Am. v. Burr,
— U.S. -,
C. Due Process
Midwest contends that the statutory damages provision is unconstitutional as applied in this case where (as here) plaintiff has suffered no actual injury, and therefore
“any
” damage award would be wholly disproportionate to the offense. It is possible that statutory damages could violate due process if “the penalty prescribed is so severe and oppressive as to be wholly disproportionate to the offense and obviously unreasonable.”
St. Louis, I.M. & S. Ry. Co. v. Williams,
II. Second Motion Based on Alleged Ambiguity of Statute
In Midwest’s second motion, it argues that it cannot be held to have willfully
*1170
violated an ambiguous statute when there exists a reading of the text of the statute that would permit Midwest’s actions. This argument is based on the Supreme Court’s holding in
Safeco Ins. Co. of Am. v. Burr.,
— U.S. -,
This case involves an alleged violation of a different FCRA provision than the one at issue in Safeco. Whereas Safeco involved an alleged violation of § 1681m(a), this case involves an alleged violation of § 1681c(g) and, specifically, the inclusion of a credit card expiration date on a receipt given to the consumer at the point of sale. Midwest seeks to analogize § 1681c(g) to § 1681m(a) by arguing that the statutory text of § 1681c(g) is also “less than pellucid” and a proposed interpretation that permits the inclusion of an expiration date on a receipt that omits all but the last four digits of the card’s number has “a foundation in the statutory text.” The statute provides as follows:
Except as otherwise provided in this subsection, no person that accepts credit cards or debit cards for the truncation of *1171 business shall print more than the last 5 digits of the card number or the expiration date upon any receipt provided to the cardholder at the point of the sale or transaction.
§ 1681c(g). Midwest contends that an interpretation that rests on the most natural and common understanding of the word “or” would allow the statute’s requirements to be met in one of three ways: (1) receipts that contain less than five digits of the card number but include expiration dates; (2) receipts that contain six or more card number digits but exclude expiration dates; or (3) receipts that truncate numbers and exclude expiration dates.
This case, however, is not like
Safeco
which involved an ambiguity in the meaning of the term “increase” in § 1681a(k)(l)(B)(I). Here, the applicable statute — § 1681c(g) — sets out its requirements in plain language and is not susceptible to conflicting interpretations, no matter how much Midwest would like it to be. The plain meaning of the statute is that a merchant may print no more than the last five digits of the card number, nor may it print the card’s expiration date on the receipt. Midwest is grasping to find a plausible ambiguity in the statute which simply does not exist. In doing so, it joins a host of other defendants in similar FAC-TA cases who have also argued for alternative meanings of the statute in an attempt to escape liability for failing to omit the required information from point-of-sale receipts. And, like the courts in all of those other cases, this court flatly rejects Midwest’s argument that the statute has any such alternative meaning.
See, e.g., Follman v. Village Squire, Inc.,
Case No. 07-3767,
Lastly, Midwest also contends that the statute is so vague and ambiguous that it violates constitutional principles of due process. “The void-for-vagueness doctrine reflects the principle that a statute which either forbids or requires the doing of an act in terms so vague that persons of common intelligence must necessarily guess at its meaning and differ as to its application, violates the first essential of due process of law.”
Roberts v. U.S. Jaycees,
IT IS THEREFORE ORDERED BY THE COURT that Midwest Airlines’ First Motion for Judgment on the Pleadings or, Alternatively, Summary Judgment (doc. # 18) and Midwest Airlines’ Second Motion for Judgment on the Pleadings or, Alternatively, Summary Judgment (doc. # 20) are denied.
IT IS FURTHER ORDERED that Midwest’s Motion for Partial Summary Judgment on the Pleadings or, Alternatively, Partial Summary Judgment Regarding Plaintiffs Claim for Injunctive Relief (doc. # 22) and Plaintiffs’ Motion to Stay Deadline for Plaintiffs Response to Defendant Midwest Airlines, Inc.’s Motion for Partial Summary Judgment (doc. # 34) are denied as moot.
IT IS FURTHER ORDERED that plaintiffs Motion for Order Permitting Oral Argument (doc. # 53) is denied.
Notes
. Midwest’s third motion for summary judgment (doc. # 22) and plaintiff's motion to stay the response deadline (doc. # 34) are denied as moot in light of the stipulation (doc. # 56) filed on March 7, 2008. Plaintiff's motion for oral argument (doc. # 53) is denied, as the court does not believe that oral argument would be of material assistance in resolving the motions.
. Actually, her complaint alleges that Midwest printed "more than the last five digits of the card number and/or the expiration date on receipts.” Complaint (doc. # 1), ¶ 3, at 2. It is undisputed, however, that the receipt contained only the last four digits of plaintiff's card number. Consequently, the only potential violation of FACTA currently at issue is Midwest’s inclusion of the card's expiration date on her receipt.
. There is no suggestion in the record that Ms. Ramirez is now or has at any time since her purchase on board the Midwest flight been the victim of credit card fraud or identity theft.
