Seventh Circuit Affirms Dismissal of Data Privacy Class Action on Article III Standing Grounds
Since the United States Supreme Court decided Spokeo, Inc. v. Robins in May 2016, lower courts have struggled to consistently determine whether a plaintiff has standing to sue in federal court, which, as the Spokeo court explained, “requires a concrete injury even in the context of a statutory violation.” That is, even when Congress has made something unlawful and authorized an award of statutory damages for the unlawful act, the mere violation of that law is not itself sufficient to confer standing to sue under Article III of the U.S. Constitution. But precisely what is required to demonstrate sufficient “injury” under Article III remains unclear after Spokeo, especially in the data-breach and data-privacy contexts. In Gubala v. Time Warner Cable, Inc., however, a unanimous Seventh Circuit decision, authored by Judge Posner, held that the defendant’s possible failure to comply with a requirement contained in the Cable Communications Policy Act (requiring the destruction of personally identifiable information (“PII”) if the information is no longer necessary for the purpose for which it was collected) did not afford the plaintiff Article III standing to sue for violation of the statute where his personal information was not released or disseminated in any way. The plaintiff in Gubala had subscribed to Time Warner cable services in 2004, which required him to...