Plaintiff, Roy Dittman, appeals from the district court’s grant of summary judgment in favor of defendants the State of California Acupuncture Committee (Committee) and Marilyn Nielsen, whom Plaintiff sued in her individual capacity and in her official capacity as Executive Officer of the Committee. Plaintiff alleged that Defendants’ refusal to renew his license to practice acupuncture unless he first disclosed his social security number, as required by California law, violated both his right to due process under the Fourteenth Amendment and § 7(a)(1) of the Privacy Act (uncodified), 5 U.S.C.A. § 552a (note), Pub.L. No. 93-579, 88 Stat. 1896, eb seq. We affirm.
BACKGROUND
The facts of this case are undisputed. From 1983 to 1995, Plaintiff was a licensed acupunсturist in the State of California. On September 21,1995, Plaintiff received a form letter from the Committee notifying him that, under revised § 30 of the California Business and Professions Code, 1 the disclosure of his social security number was a necessary condition to the renewal of his license. The letter warned that, “[i]f you fail to disclose your social security number ..., your application for initial or renewal license will not be processed.” Plaintiff, whose license expired on October 31, 1995, objected to the disclosure requirement.
On July 17, 1996, Plaintiff received a second letter from the Committee, signed by defendant Nielsen. That letter stated that the Committee had recеived Plaintiffs complaint and that “[a] response will be forthcoming.” After hearing nothing for three months, Plaintiff wrote to the Committee on October 4, 1996, demanding immediate issuance of his license. Plaintiff received no response until April 7, 1997, when the Committee informed him that “[t]he Acupuncture Committee is unable to process your request for renewal of your license to practice acupuncture. The requirements for renewal of your license have been explained to you, in detail, on several occasions.”
On October 30, 1997, Plaintiff filed this action pursuant to 42 U.S.C. § 1983, alleging that Defendants’ refusal to renew his license violated the due procеss clause of the Fourteenth Amendment. Plaintiff also alleged that requiring disclosure of his social security number as a condition to li-censure violated § 7(a)(1) of the Privacy Act. Plaintiff sought both damages and prospective injunctive relief, i.e., the issuance of his license. The district court granted summary judgment in favor of Defendants as to all claims.
Plaintiff brought this timely appeal.
STANDARD OF REVIEW
We review de novo the district court’s grant of summary judgment.
See San Pedro Hotel Co. v. City of Los Angeles,
DISCUSSION
I. MOOTNESS
At oral argument, Defendants conceded that they hаd obtained Plaintiffs social security number through the use of an electronic database. Although Defendants did not assert that their possession of the social security number rendered this case moot, we have an independent obligation to address sua sponte whether this court has subject-matter jurisdiction.
See Queen of Angels/Hollywood Presbyterian Med. Ctr. v. Shalala,
“Mootness can be characterized as the doctrine of standing set in a time frame: The requisite personal interest that must exist at the commencement of the litigation (standing) must continue throughout its existence (mootness).”
Cook Inlet Treaty Tribes v. Shalala,
Plaintiffs claims for relief continue to present a live controversy for two reasons. First, as we read § 30, even if Defendants have obtained Plaintiffs social security number through independent means, Defendants do not have the authority to issue a license to him. The statute provides that “a licensing board may not process any application for an original license or for renewal of a license unless the applicant or licensee provides [his or her] ... social security number where requested on the application.” Cal. Bus. & Prof. Code § 30(c) (emphasis added). As is plain, § 30 mandаtes that an applicant must disclose his or her own social security number before the licensing authority may process the request for an application. The social security number must come from the applicant, perhaps to avoid the possibility of mistaken identity. Section 30 does not authorize the licensing authority to act if it acquires the applicant’s social security number only from an independent source. Thus, in this case, Defendants may not process Plaintiffs request for renewal using a social security number obtained from an independent source. Were Defendants to do so, they would exceed the scope of their statutory authority.
Moreоver, even if Defendants theoretically could have exceeded the scope of their authority by issuing Plaintiff a license, they have not done so. Defendants steadfastly maintain that, unless Plaintiff himself discloses his social security number, he cannot obtain a license under § 30. As discussed above, Defendants’ position is consistent with the text of the statute.
In summary, because Defendants, consistent with § 30, continue to deny Plaintiff a license to practice acupuncture, Plaintiffs claims have not been rendered moot by Defendants’ acquisition of Plaintiffs social security number.
II. CLAIMS AGAINST THE COMMITTEE
Plaintiff asserted claims against the Committee under both § 1983 and the Privacy Act. Neither сlaim is viable.
A. Due Process Claim Under § 1988
Plaintiffs § 1983 claim against the Committee for allegedly violating the due process clause is barred by the Eleventh Amendment. In the absence of a waiver by the state or a valid congressional override, “[u]nder the eleventh amendment, agencies of the state are immune from private damage actions or suits for injunctive relief brought in federal court.”
Mitchell v. Los Angeles Community College Dist.,
Indеed, Plaintiff does not contest that the Committee is a governmental agency of the State of California entitled to Eleventh Amendment immunity. Accordingly, the district court properly dismissed Plaintiffs § 1983 claim against the Committee.
B. The Privacy Act
Section 7(a)(1) of the Privacy Act provides that “[i]t shall be unlawful for any Federal, State or local government agency to deny to any individual any right, benefit, or privilege provided by law because of such individual’s refusal to disclose his social security account number.” 5 U.S.C.A. § 552a (note). Although the protection afforded by the Privacy Act is broad, its civil remedy provision is far less expansive. This court has held that the private right of civil actiоn created by the Privacy Act,
see
5 U.S.C. § 552a(g)(l) (providing that a private individual “may bring a civil action against the agency”), “is specifically limited to actions against agencies of the United States Government. The civil remedy provisions of the statute do not apply against private individuals,
state agencies,
private entities, or state and local officials,”
Unt v. Aerospace Corp.,
Plaintiff counters that, even if the Privacy Act itself provides no remedy against the Committee, § 1983 may serve as a vehicle to redress violations of that statute.
See Legal Servs. v. Arnett,
In summary, the district court properly granted summary judgment in favor of the Committee as to all claims.
III. CLAIMS AGAINST DEFENDANT NIELSEN
A. Due Process Claim Under § 1983
Plaintiff sued defendant Nielsen both in her individual capacity and in her official capacity as Executive Officer of the Committee, for both damages and prospective injunctive rеlief. Whether Plaintiff stated a cognizable § 1983 claim against Nielsen depends on two factors: (1) the capacity in which Plaintiff sued her and (2) the nature of the relief sought.
1. Official Capacity
The Eleventh Amendment bars actions for damages against state officials who are sued in their official capacities in federal court.
See Graham,
2. Personal Capacity
“Personal-capacity suits seek to impose personal liability upon a government official for actions he takes under color of state law.”
Graham,
This court has held that, when a public official acts in reliance on a duly enacted statute or ordinance, that official ordinarily is entitled to qualified immunity.
See Grossman v. City of Portland,
Here, in refusing to renew Plaintiffs license, defendant Nielsen acted pursuant to a duly enacted state statute, California Business and Professions Code § 30. At the time of the refusal, there was no clear case law in either the federal courts or the state courts of California establishing that the issuance of a professional license may not be conditioned on the licensee’s disclosure of her social security number.
2
Moreover, on its face, § 30 does not authorize “official conduct which is patently violative of fundamental constitutional principles.”
Grossman,
B. Privacy Act Claim
Plaintiff also alleged that defendant Nielsen’s actions violated the Privacy Act. As discussed, “[t]he civil remedy provisions of the [Privacy Act] do not apply against
private individuals,
state agencies, private entities, or
state and local officials." Unt,
Once again, Plaintiff counters that, even if the Privacy Act itself does 'not provide a private cause of action, § 1983 can serve as a vehicle to redress violations of the Privacy Act. This court has not yet addressed that issue.
“It is well established that § 1983 provides a private right of action for violations of federal statutes in some instances. However, § 1983 relief is avail
*1028
able only if the statute creates enforceable rights and if Congress has not foreclosed such enforcement in the statute itself.”
Legal Servs.,
Section 7(a)(1) of the Privacy Act satisfies each of the foregoing requirements. First, Congress clearly enacted § 7(a)(1) to benefit individuals such as Plaintiff. The purpose of the Privacy Act, Congress stated, was “to provide certain safeguards for an individual against an invasion of personal privacy.” 5 U.S.C.A. § 552a (note), Pub.L. No. 93-579, § 2. Toward that end, § 7(a)(1) prohibits “any Federal, State or local government agency to deny any individual any right, benefit, or privilege provided by law becаuse of such individual’s refusal to disclose his social security account number,” except as otherwise provided under the Privacy Act. 5 U.S.C.A. § 552a (note) (emphasis added). The breadth of § 7(a)(l)’s protection encompasses the privacy interest asserted by Plaintiff here.
Second, the statutory obligation imposed on governmental bodies is clear: A governmental body may not deny any individual any right, benefit, or privilege because she refuses to disclose her social security number, unless otherwise permitted by law.
Third, the judiciary is capable of enforcing the interest asserted by Plaintiff. The text of § 7(a)(1) and, more generally, the Privacy Act itself, is not so “vаgue and amorphous such that it is beyond the competence of the judiciary to enforce.”
Wilder v. Virginia Hosp. Ass’n,
Our inquiry does not end there, however. “Even if a plaintiff demonstrates that a federal statute creates an individual right, there is only a rebuttable presumption that the right is enforceable under § 1983.”
Blessing v. Freestone,
In
Polchowski v. Gorris,
[W]e believe that Congress has foreclosed the use of Sec.1983 as a remedy. Congress, by еnacting the Privacy Act of 1974, has provided comprehensive private remedies for unwarranted disclosures of personal information, including the type of information disclosed here. This act, however, applies only to agencies of the United States Government. Congress, when considering this legislation, specifically limited its scope to federal agencies. Indeed, the bill, as originally introduced, contained a remedy for improper disclosures by state authorities; these provisions were deleted, however, because of the uncertain effect of *1029 such a provision and because Congress felt that it lacked thе necessary information for devising a remedial scheme in this context.
Congress, by limiting the scope of Sec. 552a, has provided unequivocal and persuasive evidence that it intended “to foreclose private enforcement” of Sec. 3789g(a) against state or local officials who make unwarranted disclosures of statistical information.
Id. at 752 (citations and footnote omitted).
The Seventh Circuit’s reasoning applies squarely to the present case, and we are persuaded by it. Although the prohibitions of § 7(a)(1) apply to all governmental entities, including state and local governments, by limiting the scope of the Privacy Act’s civil remedy provision, 5 U.S.C. § 552a(g), Congress cleаrly intended to “foreclose private enforcement” against any entity other than federal agencies. Admittedly, this reasoning leaves individuals, such as Plaintiff, without a means of enforcing § 7(a)(1) against state and local officials. However, were we to hold that Plaintiff could pursue a Privacy Act claim under § 1983, we would circumvent the intent of Congress that the rights secured by the Privacy Act be enforceable only against federal agencies.
In summary, we conclude that a private plaintiff may not maintain an action against a state official — either in her official or her individual capacity — under § 1983 to remedy alleged violations of § 7(a)(1) of the Privacy Act. The district court therefore properly granted summary judgment in favor of defendant Nielsen as to Plaintiffs claim under the Privacy Act.
C. The Merits of Plaintiffs Substantive Due Process Claim
In the end, Plaintiffs only viable claim is one for prospective injunctive relief against defendant Nielsen in her official capacity for allegedly violating the due process clause of the Fourteenth Amendment. “A threshold requirement to a substantive or procedural due process claim is the plaintiffs showing of a liberty or property interest protected by the Constitution.”
Wedges/Ledges of Cal., Inc. v. City of Phoenix,
In an early line of cases, the Supreme Court recognized “that the liberty component of the Fourteenth Amendment’s Due Procеss Clause includes some generalized due process right to choose one’s field of private employment.”
Conn v. Gabbert,
Section 30’s disclosure requirement imposes the type of “complete prohibition” on entry into a profession that implicates a person’s liberty interest in pursuing an occupation or profession of her own choice. As illustrated by the facts of this case, the operation of § 30 is clear: If a person seeking an acupuncture license refuses to disclose her social security number, she may not practice that profession in the State of California. Thus, like minimal education and testing requirements, which California also demands of prospective acupuncturists, see *1030 Cal. Bus. & Prof.Code § 4938 (stating initial requirements of licensure), § 30 operates as a complete barrier to entry into the profession of acupuncture.
Having concluded that Plaintiffs due process claim is predicated on a protected liberty interest, the question then arises: To what degree of constitutional scrutiny is the regulation subject? The Supreme Court answered that question in a case involving admission to the practice of law,
Schware v. Board of Bar Exam’rs,
Defendants contend, and the district court agreed, that § 30’s disclosure requirement withstands constitutional scrutiny, because it is rationally related to the legitimate state interests of collecting taxes and child support. See Cal. Bus. & Prof.Code § 30(f). 4 The Committee concedes that it uses the social security numbers of applicants for no other purpose.
Recently, this court addressed whether the policy of the State of California to refuse to renew drivers’ licenses unless the driver first discloses her social security number violates the Free Exercise Clause.
See Miller v. Reed,
Although related to the present case,
Miller
is not controlling. In
Miller,
the applicable constitutional inquiry was whether the authorizing statute was “a
rationally based,
neutral law of general applicability [that] does not violate the right tо free exercise of religion even though the law incidentally burdens a particular religious belief or practice.”
Id.
at 1206 (citation omitted) (emphasis added). In short, the court used a “pure” rational-basis test to evaluate the challenged statute. Here, by contrast, the relevant test requires something more. As
Schware
makes clear, although a state may regulate entry into a profession, any such regulation must be rationally related, not merely to a legitimate state interest, but more specifically to the “the applicant’s fitness or capacity to practice” the profession itself.
Schware,
In addressing that issue, we first must ask ourselves a threshold question: In applying the test under Schware, is this court bound by the written reasons that the California state legislature articulated for enacting § 30, or- may this court consider any hypothetical basis on which the legislature might have acted? If we are bound by the stated reason .for the enactment of § 30, we may ask only whether the state’s interest in collecting taxes and child support is rationally related to an applicant’s fitness or capacity to practice acupuncture. See Cal. Bus. & Prof.Code § 30(f) (stating the legislative purpose of § 30); see also, e.g., California State Assembly Committee on Judiciary, Committee Report on A.B. No. 1394,1991-92 Reg. Sess. (1991) (“The author states that this-bill provides additional enforcement tools for collection of support and additional incentive to obligors to pay their support.”). If not, then we may take a more expansive view of the purposes of § 30 in evaluating its сonstitutionality.
Where, as here, a plaintiff relies on substantive due process to challenge a legislative act that does not infringe on a fundamental right,
5
the plaintiff bears a heavy burden. “[W]e do not require that the government’s action actually advance its stated purposes, but merely look to see whether the government
could
have had a legitimate reason for acting as it did.”
Halverson v. Skagit County,
Here, thе legislature could have had in mind at least two rational bases for relating § 30’s disclosure requirement to a person’s capacity and fitness to practice acupuncture. First, the state might have enacted § 30 to ensure that acupuncturists have the financial wherewithal to answer liability claims asserted by patients. In an analogous context, the California state legislature has recognized that an “acupuncture corporation” (that is, one or more licensed acupuncturists who practice in a corporate form) may be required to demonstrate its capacity to pay claims made by patients.
See
Cal. Bus. & Prоf.Code § 4979 (stating that the Committee may adopt and enforce regulations requiring an acupuncture cor
*1032
poration to “provide adequate security by insurance or otherwise for claims against it by its patients arising out of the rendering of professional services”). That statute evidences a legislative recognition of the importance of financial accountability to patients. Arguably, §
80 is
another means for all acupuncturists (not merely those who practice in a corporate setting) to demonstrate financial responsibility; an acupuncturist who is incapable of paying, or refuses to pay, child suppоrt or taxes is less likely to satisfy potential liabilities owed to patients. Concededly, the “fit” between the state’s interest in ensuring the financial accountability of acupuncturists and the means that it has adopted is imperfect. However, when a fundamental right is not at stake, “the law need not be in every respect logically consistent with its aims to be constitutional. It is enough that there is an evil at hand for correction, and that it might be thought that the particular legislative measure was a rational way to correct it.”
Williamson v. Lee Optical, Inc.,
In addition, there is a second rational reason for requiring that an applicant, such as Plaintiff, be current in child support and tax obligations as a condition of licensure: A state may require good moral character as a qualification for entry into a profession, when the practitioners of the profession come into close contact with patients or clients.
See Software,
In summary, we conclude that, consistent with
Schware,
§ 30’s disclosure requirement is rationally related to Plaintiffs fitness or capacity to practice acupuncture. The wisdom of that requirement is not for us to judge. For in the end, “it is for the legislature, not the courts, to balance the advantages and disadvantages of ... new requirement[s].”
Williamson,
AFFIRMED.
Notes
. That statute provides in relevant part:
(a) Notwithstanding any other provision of law, any board, as defined in Section 22, and the State Bar and the Department of Real Estate shall at the time of issuance or renewal of the license require that any licensee provide its federal employer identification number if the licensee is a partnership or his or her social security number for all others.
(b) Any licensee failing to provide the federal identification number or social security number shall be reported by the licensing board to the Franchise Tax Board and, if failing to provide after notification pursuant to paragraph (1) of subdivision (b) of Section 19528 of the Revenue and Taxation Code, shall be subject to the penalty provided in paragraph (2) of subdivision (b) of Section 19528 of the Revenue and Taxation Code.
(c)In addition to the penalty specified in subdivision (b), a licensing board may not process any application for an original license or for renewal of a license unless the applicant or licensee provides its federal employer identification number or social security number where requested on the application.
(Emphasis added.)
. Indeed, after the enactment of § 30, one commentator observed that the constitutionality of the statute was uncertain under existing case law. See Luke Foster, Comment, Review of Selected 1991 California Legislation, 23 Pac. L.J. 510, 621-22 (1992) (observing that, depending on thе standard used, § 30 may or may not be constitutional).
. The district court did not reach the issue of qualified immunity, because it held that Plaintiff's claim for damages under § 1983 was time-barred. However, this court may affirm on any ground supported by the record.
See Charley’s Taxi Radio Dispatch Corp. v. SIDA of Hawaii, Inc.,
. That statute provides:
It is the intent of the Legislature in enacting this section to utilize the social security account number ... for the purpose of establishing the identification of persons affected by state tax laws and for purposes of compliance with Section 11350.6 of the Welfare and Institutions Code and, to that end, the information furnished pursuant to this section shall be used exclusively for those purposes. Section 11350.6 of the Welfare and Institutions Code in turn deals with the enforcement of child support orders or judgments and the authority to withhold issuance or renewal of a license.
. We emphasize that the Supreme Court has recognized only that the
liberty
component of the Fourteenth Amendment's Due Process Clause "includes some generalized due process right to choose one's field of private employment.”
Conn v. Gabbert,
