THERMOFLEX WAUKEGAN, LLC, an Illinois limited liability company, Plaintiffs, v. MITSUI SUMITOMO INSURANCE USA, INC., Defendant.
No. 21 C 788
UNITED STATES DISTRICT COURT FOR THE NORTHERN DISTRICT OF ILLINOIS EASTERN DIVISION
03/30/22
MEMORANDUM OPINION AND ORDER
Plaintiff Thermoflex Waukegan, LLC, purchased a number of insurance policies from Defendant Mitsui Sumitomo Insurance USA, Inc. related to its business operations. While those policies were in effect, a former worker sued Thermoflex, alleging that it had violated the Illinois Biometric Information Privacy Act (“BIPA“),
Now Thermoflex and Mitsui have cross-moved for summary judgment as to whether Mitsui has a duty to defend and indemnify Thermoflex under certain commercial general liability policies, as well as excess and umbrella insurance policies.1 Because the Court concludes that at least one of the exclusions contained in the commercial general liability policies applies to the underlying claims, Mitsui‘s motion is granted as to these policies, and Thermoflex‘s cross-motion is denied as to these policies.
I. Undisputed Facts
A. The Underlying Litigation
Gregory Gates filed a class action lawsuit in Illinois state court against Thermoflex and a temporary employment agency. Def.‘s Statement of Facts (“DSOF“) ¶ 7, ECF No. 27. According to Gates, Thermoflex required him to scan his handprint each time he clocked in and out of work. Id. ¶ 11. Furthermore, Gates claims that Thermoflex transmitted his handprint data to a third party without his authorization. Id. ¶ 12. Gates also alleges that the company did not provide him with a publicly-available policy identifying its retention schedule or procedures for obtaining his consent and release. Id. ¶ 13. As a result, Gates contends, Thermoflex violated BIPA, the Illinois statute that regulates the collection, disclosure, retention, and destruction of biometric information by private entities. Id. ¶ 14; see
B. Thermoflex‘s Commercial General Liability Policies
Mitsui insures Thermoflex under a series of commercial general liability policies (“CGL Policies“). DSOF ¶ 15. In them, Mitsui agreed to “pay those sums that [Thermoflex] becomes legally obligated to pay as damages because of ‘personal and advertising injury’ to which this insurance applies.” Id. ¶ 16. The CGL Policies define “personal and advertising injury” as “injury . . . arising out of one or more of” certain enumerated offenses, including the “[o]ral or written publication, in any manner, of material that violates a person‘s
The CGL Policies contain three pertinent exclusions. The first, entitled “Access Or Disclosure Of Confidential Or Personal Information,” states:
This insurance does not apply to . . . “personal and advertising injury” arising out of any access to or disclosure of any person‘s or organization‘s confidential or personal information, including patents, trade secrets, processing methods, customer lists, financial information, credit card information, health information or any other type of nonpublic information.
Id. ¶ 18.
The second, entitled “Recording And Distribution Of Material Or Information In Violation Of Law,” provides that coverage is excluded for:
“Personal and advertising injury” arising directly or indirectly out of any action or omission that violates or is alleged to violate:
- The Telephone Consumer Protection Act (TCPA) [
47 U.S.C. § 227 et seq. ] including any amendment of or addition to such law; - The CAN-SPAM Act of 2003 [
15 U.S.C. § 7701 et seq. ], including any amendment of or addition to such law; - The Fair Credit Reporting Act (FCRA) [
15 U.S.C. § 1681 et seq. ], and any amendment of or addition to such law, including the Fair and Accurate Credit Transaction Act (FACTA); or - Any federal, state or local statute, ordinance or regulation, other than the TCPA, CAN-SPAM Act of 2003 or FCRA and their amendments and additions, that addresses, prohibits, or limits the printing, dissemination, disposal, collecting, recording, sending, transmitting, communicating or distribution of material or information.
Id. ¶ 19.
The third, “Employment-Related Practices,” reads that the insurance does not apply to “[p]ersonal and advertising injury to . . . [a] person arising out of any“:
- [r]efusal to employ that person;
- [t]ermination of that person‘s employment; or
- [e]mployment-related practices, policies, acts or omissions, such as coercion, demotion, evaluation, reassignment, discipline, defamation, harassment, humiliation, discrimination or malicious prosecution directed at that person . . . .
Id. ¶ 20.
The issue here is whether any of these exclusions precludes coverage for Gates‘s lawsuit.
II. Legal Standard
Summary judgment is appropriate where “the movant shows that there is no genuine dispute as to any material fact and the movant is entitled to judgment as a matter of law.”
III. Analysis
As a preliminary matter, the parties agree that Illinois law applies. Compare Def.‘s Mem. Law Supp. Summ. J. (“Def.‘s Mem.“) at 7, ECF No. 28, with Pl.‘s Mem. Law Opp‘n Def.‘s Mot. Summ. J. (“Pl.‘s Mem.“), ECF No. 32. Furthermore, all facts relevant to the cross-motions for summary judgment are undisputed. See generally Pl.‘s Statement Facts Resp. DSOF (“Pl.‘s Resp. DSOF“), ECF No. 29; Def.‘s Statement Facts Resp. Pl.‘s Statement Additional Facts (“Def.‘s Resp. PSOAF“), ECF No. 37; Pl.‘s Statement Resp. Def.‘s Statement Additional Facts (“Pl.‘s Resp. DSOAF“). Accordingly, the Court turns to the question at hand, namely, whether the CGL Policies Mitsui issued to Thermoflex provide coverage for the defense of the Gates lawsuit and indemnification for any damages arising from it. See Mashallah, Inc. v. W. Bend Mut. Ins. Co., 20 F.4th 311, 319 (7th Cir. 2021) (“Under Illinois law, the interpretation of an insurance policy, like any other contract, is a question of law.“).
To do so, the Court must interpret the language of the CGL Policies. “The goal in interpreting an insurance policy is to ascertain and give effect to the intention of the parties, as expressed in the policy language.” Scottsdale Ins. Co. v. Columbia Ins. Grp., Inc., 972 F.3d 915, 919 (7th Cir. 2020) (cleaned up). Under Illinois law, “the burden is initially on the insured party to show that its losses are covered under the policy‘s coverage terms.” Bradley Hotel Corp. v. Aspen Specialty Ins. Co., 19 F.4th 1002, 1006 (7th Cir. 2021).
As between the issues of defense versus indemnity, the Court turns first to the former and asks whether Mitsui has a duty to defend Thermoflex in the underlying suit. This is so because “[a]n insurer‘s duty to defend its insured is much broader than its duty to indemnify.” Outboard Marine Corp. v. Liberty Mut. Ins. Co., 607 N.E.2d 1204, 1220 (Ill. 1992). And, as a corollary, “[b]ecause the duty to defend is broader than the duty to indemnify, if an insurer owes no duty to defend, it owes no duty to indemnify.” Metzger v. Country Mut. Ins. Co., 986 N.E.2d 756, 761 (Ill. App. Ct. 2013) (internal quotation marks omitted).
To “determine whether the insurer‘s duty to defend has arisen, the court must compare the allegations of the underlying complaint to the policy language.” Id. “If the court determines that these allegations fall within, or potentially within, the policy‘s coverage, the insurer has a duty to
But, even then, the insurer can avoid coverage if it can establish that a policy exclusion applies. Bradley Hotel, 19 F.4th at 1006. Of course, “[a]n insurer can only refuse to defend if the allegations of the underlying complaint preclude any possibility of coverage.” Ill. Tool Works, Inc. v. Travelers Cas. & Sur. Co., 26 N.E.3d 421, 428 (Ill. App. Ct. 2015). But a single unequivocal exclusion is sufficient to show that an insurer does not have a duty to defend the insured. See, e.g., Hartford Cas. Ins. Co. v. Dental USA, Inc., No. 13 C 7637, 2014 WL 2863164, at *4 (N.D. Ill. June 24, 2014) (applying Illinois law).
The Court also is mindful that, when interpreting the terms of a policy, provisions that limit coverage are construed in favor of the insured. Founders Ins. Co. v. Munoz, 930 N.E.2d 999, 1004 (Ill. 2010). This rule, however, only applies where the meaning of the exclusionary language is ambiguous. See id. Such “[a]mbiguity exists if the language of the policy is subject to more than one reasonable interpretation as applied to the dispute before the court.” Bradley Hotel, 19 F.4th at 1006.
Here, it is uncontested that the claims Gates asserts in the underlying lawsuit allege “personal and advertising injury,” which, in turn, triggers coverage. As a result, to avoid coverage, Mitsui must establish that at least one of the exclusions precludes its duty to defend.
As noted above, the exclusion in the CGL Policies entitled “Access Or Disclosure Of Confidential Or Personal Information” (“Access/Disclosure exclusion“) states:
This insurance does not apply to . . . [d]amages arising out of . . . any access to or disclosure of any person‘s or organization‘s confidential or personal information, including patents, trade secrets, processing methods, customer lists, financial information, credit card information, health information or any other type of nonpublic information.
DSOF ¶ 18.
The first clause in this provision is unequivocal. “This insurance does not apply to . . . [d]amages arising out of . . . any access to or disclosure of any person‘s . . . personal information[.]” Id. (emphasis added). And the word “any” has a broad meaning. See, e.g., United States v. Gonzales, 520 U.S. 1, 5 (1997) (“Read naturally, the word ‘any’ has an expansive meaning, that is, ‘one or some indiscriminately of whatever kind.‘” (quoting Webster‘s Third New International Dictionary 97 (1976))). Because the language in the exclusion is clear and unambiguous, the Court ascribes to it its plain and ordinary meaning. See Sanders v. Ill. Union Ins. Co., 157 N.E.3d 463, 467 (Ill. 2019).
Thermoflex attempts to circumscribe the phrase “any access to or disclosure of any person‘s . . . confidential or personal information” by pointing to the words that follow the word “including” and invoking the interpretative canon of ejusdem generis (“of the same kind“). Under this doctrine, “general words are construed to embrace only objects similar in nature to those . . . specific words.” 2A N. Singer & S. Singer, Sutherland Statutes and Statutory Construction § 47:17 (7th ed. 2021). But this argument is unpersuasive for several reasons.
First, ejusdem generis does not apply when the language at issue is unambiguous. See Tourdot v. Rockford Health Plans, Inc., 439 F.3d 351, 353 (7th Cir. 2006) (”Ejusdem generis provides guidance on how to interpret language where the meaning is not plain.“). Here, nothing
Second, when items are introduced by the word “including,” the list that follows is not exclusive. See In re Schwartz, 799 F.3d 760, 763 (7th Cir. 2015) (“If you tell your maid to iron your clothes, including your Bond Street tuxedo and its cummerbund, there is no implication that she is not to iron your other clothes.“). In other words, the term “‘[i]nclude’ is a word of illustration, not limitation.” Richardson v. Nat‘l City Bank of Evansville, 141 F.3d 1228, 1232 (7th Cir. 1998). Therefore, the words in the Access/Disclosure exclusion that appear after “including” cannot limit the scope of the preceding clause “any access to or disclosure of any person‘s . . . personal information.”2
Third, “the interpretive canon of ejusdem generis . . . attribute[s] to the last item . . . the same characteristic of discreteness shared by all the preceding items.” Norton v. S. Utah Wilderness All., 542 U.S. 55, 63 (2004). But the canon does not apply when the items “are not sufficiently similar to belong to one identifiable class.” Hugh v. Amalgamated Tr. & Sav. Bank, 602 N.E.2d 33, 38 (Ill. App. Ct. 1992).
Here, the items that are listed have no readily identifiable common thread (at least, not in the way that Thermoflex ascribes). For example, the first items in the list, “patents,” are publicly available information.
Nevertheless, say that the Court were to find the provision‘s language to be ambiguous and, thus, apply the interpretive canon of noscitur a sociis—a broader, more permissive variation of ejusdem generis. See Singer & Singer, supra, § 47.16 (noscitur a sociis “means literally ‘it is known from its associates,’ and means practically that a
For its part, Thermoflex cites BIPA and contends that, because the statute differentiates between “biometric information” and other “confidential and sensitive information,” see
Furthermore, although BIPA provides that “biometric identifier” information does not include a person‘s health care-related information, it does not expressly exclude “biometric identifier” information from the definition of “confidential and sensitive information.” Id. In fact, the opposite is true: “biometric information” and “biometric identifier” information fall squarely within BIPA‘s definition of “confidential and sensitive information“—that is, “personal information that can be used to uniquely identify an individual.” See
The Court next turns to the allegations in the underlying litigation to determine whether they clearly fall within the Access/Disclosure exclusion. In the state-court case, Gates alleges a wide range of BIPA violations. BIPA provides an action for damages against a private entity if it “disclose[s], redisclose[s], or otherwise disseminate[s] a person‘s . . . biometric identifier or biometric information” without the person‘s consent.
[b]iometrics . . . are biologically unique to the individual; therefore, once compromised, the individual has no recourse, is at heightened risk for identity theft, and is likely to withdraw from biometric-facilitated transactions.
Id.
Gates alleges, among other things, that Thermoflex owes damages for disclosing Gates‘s hand-scan information to an out-of-state, third-party vendor without Gates‘s consent. DSOF ¶ 12. Indeed, the Seventh Circuit has described the invasion of privacy as “personal and real,” where, as here, a plaintiff alleges the full panoply of BIPA violations. Fox v. Dakkota Integrated Sys., LLC, 980 F.3d 1146, 1149 (7th Cir. 2020); see id. at 1155 (stating that biometric identifiers “are immutable, and once compromised, are compromised forever“). Simply put, the state-court litigation seeks damages arising out of a third-party‘s access to or Thermoflex‘s disclosure of Gates‘s personal information, placing it clearly within the scope of the exclusion.
Thermoflex also argues that any construction that excludes coverage for damages based on the access to or disclosure of biometric information would consume the coverage grant for “personal and advertising injury,” making the coverage illusory. Pl.‘s Mem. at 5; see Def.‘s SOF ¶ 17. But this is an overstatement. A “policy need not provide coverage against all possible liabilities; if it provides coverage against some, the policy is not illusory.” Nicor, Inc. v. Associated Elec. & Gas Ins. Servs. Ltd., 841 N.E.2d 78, 86 (Ill. App. Ct. 2005), aff‘d, 860 N.E.2d 280 (Ill. 2006); see Liberty Mut. Fire Ins. Co. v. Statewide Ins. Co., 352 F.3d 1098, 1101 (7th Cir. 2003) (rejecting the argument that the limitations were so broad that the
Along these same lines, Thermoflex argues that the Court‘s construction of the Access/Disclosure exclusion would swallow completely any coverage the CGL Policies provide for lawsuits alleging “[p]ersonal and advertising injury . . . arising out of . . . [o]ral or written publication, in any manner, of material that violates a person‘s right of privacy.” But this too is incorrect.
Under Illinois law, the right to privacy encompasses more than a person‘s right to the maintain the confidentiality of their personal information. Take, for example, a person‘s right not to be placed in a false light. Illinois law recognizes this as a privacy right:
One who gives publicity to a matter concerning another that places the other before the public in a false light is subject to liability to the other for invasion of his privacy, if (a) the false light in which the other was placed would be highly offensive to a reasonable person, and (b) the actor had knowledge of or acted in reckless disregard as to the falsity of the publicized matter and the false light in which the other would be placed.
Lovgren v. Citizens First Nat‘l Bank of Princeton, 534 N.E.2d 987, 989 (Ill. 1989) (quoting Restatement (Second) of Torts § 652E (Am. L. Inst. 1977) (cleaned up).
Claims for false light invasion of privacy seek damages arising out of a publication of material that violates a person‘s right of privacy, and, therefore, would satisfy the definition of “personal and advertising injury” in the CGL Policies. Yet, such claims would not fall under the Access/Disclosure exclusion because they would not seek damages arising out of any access to or disclosure of any person‘s confidential or personal information. Therefore, contrary to Thermoflex‘s contention, the Court‘s construction of the Access/Disclosure exclusion would not render coverage illusory.
For all of these reasons, the Court holds that the Access/Disclosure provision in the CGL Policies precludes coverage of the Gates lawsuit.6
IV. Conclusion
For the foregoing reasons, Defendant Mitsui‘s motion for summary judgment is granted as to the CGL Policies, and Plaintiff Thermoflex‘s motion for summary judgment is denied as to the CGL Policies.
IT IS SO ORDERED. ENTERED: 3/30/22
John Z. Lee
United States District Judge
