On Monday, the Supreme Court issued its decision in Spokeo v. Robins, which posed the question of whether Article III standing requires a plaintiff to have a concrete injury when alleging a statutory violation under the Fair Credit Reporting Act (“FCRA”). The decision is likely to have broad implications for financial services companies and others who face civil actions alleging bare statutory violations under the FCRA and other laws.
In the case, Thomas Robins alleged that Spokeo, an online people-search database, had gathered and disseminated incorrect information about him in violation of the FCRA, which imposes certain requirements on “consumer reporting agencies”—including numerous procedural requirements—concerning the creation and use of “consumer reports.” The FCRA provides for per-violation statutory and other civil damages under some circumstances. After his claim was dismissed by the district court, the Ninth Circuit held that Robins's alleged violations of the FCRA were sufficient to meet the “injury-in-fact” requirement for Article III standing.
The Supreme Court reversed, holding that the Ninth Circuit had improperly failed to consider whether Robins's alleged injury was “concrete.” To meet Article III's injury-in-fact requirement, the Court explained, a plaintiff must allege a violation that is both “particularized” and “concrete”: “[A] bare procedural violation, divorced from any concrete harm” does not suffice. The Court further explained, however, that “intangible injuries can nevertheless be concrete,” and the “risk of real harm” may satisfy the concreteness requirement. The Court cited libel, slander per se, and actions involving voters' “inability to obtain information” to which they were statutorily entitled as examples of injuries sufficiently concrete to confer standing. The Court remanded for the Ninth Circuit to decide in the first instance whether Robins's alleged injury met the test of concreteness. The Court provided guidance, observing that “even if a consumer reporting agency fails to provide the required notice to a user of the agency's consumer information, that information regardless may be entirely accurate” and thus would cause no concrete harm sufficient to create Article III standing. “In addition,” the Court continued, “not all inaccuracies cause harm or present any material risk of harm. An example that comes readily to mind is an incorrect zip code. It is difficult to imagine how the dissemination of an incorrect zip code, without more, could work any concrete harm.”
While it remains for the Ninth Circuit and other courts to implement Spokeo,1 the decision appears likely to have a significant effect on future civil litigation under consumer financial laws. In addition to the FCRA, numerous other federal banking statutes, as well as some state consumer protection laws, provide for both detailed procedural requirements and private rights of action with potential statutory damages for violations—federal examples include the Real Estate Settlement Procedures Act, Truth In Lending Act, Telephone Consumer Protection Act, Electronic Fund Transfer Act, and Fair Debt Collection Practices Act. Spokeo is likely to curtail significantly the ability of plaintiffs to pursue class actions for mere procedural or other “technical” violations under such laws and to reduce the in terrorem effect such suits can frequently have.