The Class Action Weekly Wire – Episode 76: Illinois Federal Judge Weighs BIPA Class Action Involving “Try-It-On” Software

Duane Morris Takeaway: This week’s episode of the Class Action Weekly Wire features Duane Morris partner Jerry Maatman, special counsel Justin Donoho, and associate Tyler Zmick with their discussion of a BIPA ruling issued in the Northern District of Illinois analyzing the arguments of consumer privacy claims involving virtual “try-on” technology.

Check out today’s episode and subscribe to our show from your preferred podcast platform: Spotify, Amazon Music, Apple Podcasts, Samsung Podcasts, Podcast Index, Tune In, Listen Notes, iHeartRadio, Deezer, and YouTube.

Episode Transcript

Jerry Maatman: Thank you, loyal blog readers for joining us on this week’s installment of our podcast series, entitled The Class Action Weekly Wire. Today I am joined by my colleagues, Justin and Tyler, and we’re going to talk about all things BIPA. Justin and Tyler, welcome to the show.

Justin Donoho: Thanks, Jerry, happy to be here.

Tyler Zmick: Thank you for having me, Jerry.

Jerry: Today we’re discussing a lawsuit brought under the Illinois Biometric Information Privacy Act involving cosmetics manufacturer L’Oréal, and a ruling that emanated from the U.S. District Court for the Northern District of Illinois. Justin, could you give our readers and listeners an overview of the allegations at issue in this lawsuit?

Justin: Yes, Jerry, so this is another challenge under BIPA to virtual try-on software. We’ve seen a number of these filed against cosmetic companies. The way the software works is you’re viewing the cosmetic product on the web page, a pop up then appears, allowing you to use your web or phone cameras to upload a photo to check how the product will work on your face. And then, according to plaintiffs, the virtual try-on software then allegedly captures what the plaintiffs contend is a “scan of facial geometry” in the consumer’s photos – or you know, what that means under BIPA is a scan of sufficient geometry of the face, to be unique to the individual, and to be capable of identifying a person.

Jerry: These sorts of try-on BIPA cases are being litigated more frequently. If we talked about BIPA litigation five years ago, it typically would involve a timekeeping system and workers who checked in and checked out of work through biometric identifiers. Here, however, we’re talking about customers interacting with software. Tyler, you have quite a bit of experience in the BIPA field and space – what did you find significant in the way in which the defendant in this litigation tried to argue its motion to dismiss?

Tyler: Sure. Well, I think there were three main arguments that L’Oréal raised in its motion to dismiss. The first was that it wasn’t really a substantive argument, it was procedural, and the argument was that by using the virtual try-on tool, the plaintiff agreed to the company’s terms of use, which contain an enforceable arbitration provision. And so the argument was that this plaintiff cannot bring a class action, but must bring an individual claim in arbitration. The court rejected that argument, finding that the plaintiff did not get conspicuous enough notice. As for the substantive arguments under BIPA, L’Oréal argued that according to its privacy policy, which was presented to plaintiff, the plaintiff consented to the categories of personal information being collected from users, including plaintiff, who use the virtual try-on tool, and the language said that “if you use one of our virtual try-on features, we may collect and store your images.” And so obviously the court found that language deficient because it did not specifically address biometric information or scans of facial geometry obtained from an image. And finally, as with many defendants moving to dismiss BIPA claims, L’Oréal argued that plaintiff failed to state a claim because the complaint failed to establish the company was in possession of any biometric data, and that their technology only operates locally on users’ devices.

Jerry: I know that facts drive case decisions, but it seems that BIPA cases have gone both ways on this issue or the array of issues you just articulated in the Northern District of Illinois. How did the court rule in this particular situation?

Justin: Yes, Jerry. Interestingly, you say both ways. So yes, at least at the at the motion to dismiss stage, anyway, the courts do seem to be going both ways on these virtual try-on cosmetic cases on the key issue of whether what is being captured is sufficient facial geometry to be a unique biometric identifier. There have been a number of other cases, too, like this that also do not involve facial recognition like interview software, a pornography filter that happens to filter photos that contain a face, passport photo software, COVID screening – basically, if your company has a technology involving a face in any way and some arguable connection to Illinois, then the plaintiffs’ bar is suing, or it may have you in its crosshairs. So in this case, though there was no written decision. But it does appear, though, that this court did not rule on this key issue of whether the software captured a biometric identifier because the parties didn’t argue it in their briefs in this particular case. We’ll have to wait to see how that issue comes out if the parties ever get to the expert discovery and summary judgment stage, where likely this will become the parties main focus. So Tyler mentioned the three kind of main arguments that the defendants made in this case in their motion on. I’ll just do the first one – the main focus was the arbitration clause. By denying the motion to dismiss the court basically ruled that even though this was clickwrap instead of browsewrap, the arbitration clause in this particular instance, was not conspicuous enough for the plaintiffs to be bound, or, in other words, clicking to accept things that plaintiffs may have done was on other things, and too far removed from the terms of the arbitration agreement.

Tyler: And one more point – L’Oréal did not develop this argument – specifically the argument that the technology did not collect unique scans of face geometry – but it was addressed in passing in the briefing on the motion dismiss, and the judge basically rejected that argument, at least at the motion to dismiss stage. And the court ruled that plaintiff sufficiently alleged that the way the try-on tool works is by processing the user’s image and capturing facial geometry to identify their features, and thus the reasonable inferences of the company collected biometric data that is necessary for the tool to work. And so I think, even if the technology does not ultimately work in a way that it can uniquely identify specific individuals, that is an uphill battle to present that argument early at the pleading stage, and summary judgment may be more appropriate for that type of argument.

Jerry: Well, certainly the ruling and the case is incredibly interesting, and it underscores the innovative thinking of the plaintiffs’ bar and attacks on all sorts of customer interfacing software that has anything to do with collection of alleged biometric information. It also underscores how important consent features are in terms of a company interacting with its customers because consent – obviously the bedrock principle under BIPA – to try and get the consent to allow a collection I f there’s any question that biometrics are involved. Well, thank you for your thought leadership, Justin and Tyler, and for lending your expertise to describe this ruling. Thank you, listeners, for joining us on this week’s episode of the Class Action Weekly Wire.

Justin: Thanks, Jerry.

Tyler: Thank you everyone for tuning in.

Speedway Will Have To Take BIPA Claims “Whose Maximum Penalty Reaches The Mesosphere” To Trial

By Ryan T. Garippo, Alex W. Karasik, and Gerald L. Maatman, Jr.

Duane Morris Takeaways:  On September 29, 2024, in Howe, et al. v. Speedway, LLC, No. 19-CV-01374, 2024 U.S. Dist. LEXIS 176263 (N.D. Ill. Sept. 29, 2024), Judge Edmond Chang of the U.S. District Court for the Northern District of Illinois denied Speedway’s two motions for summary judgment and granted Plaintiff’s motion for class certification, meaning this Illinois Biometric Information Privacy Act (the “BIPA”) class action will proceed to trial. 

This decision is significant for employers because it represents another example of a court limiting the sparse defenses available to corporate defendants in BIPA cases.

Case Background

Plaintiff worked as a manager trainee and then as a manager for Speedway, LLC (“Speedway”).   Like many employers, Speedway used finger-scan timeclocks for its employees to clock in and out of work “to avoid the problem of ‘buddy punching’ (clocking in and out for someone else).”  Id.  at *1.  These timeclocks scanned the ridges of an employee’s fingerprint and then created an alphanumeric code.  The parties disagreed as to whether this alphanumeric code could be reverse engineered to reconstruct the scan that it was based on to finger-scans. 

In 2017, Plaintiff filed a lawsuit in the Circuit Court of Cook County (Illinois) alleging violations of the BIPA, which prohibits the possession, collection, and/or disclosure of an individual’s biometric information without notice and consent.  Over the course of the last seven years, Speedway put up a vigorous defense to these claims.  It removed the case to federal court.  Howe, et al. v. Speedway, No. 17-CV-07303, 2018 WL 2445541, at *1 (N.D. Ill. May 31, 2018).  Plaintiff then filed and won a motion to remand, claiming that he himself had not suffered an injury-in-fact.  Id. at *1-7.  But then after the case proceeded for nearly two years in state court, Speedway removed the case again after the Illinois Supreme Court changed its approach to the Article III analysis.  Howe, 2024 WL 4346631, at *3, n. 5.  Speedway also filed two motions for summary judgment, a motion to exclude Plaintiff’s expert witness, and a response in opposition to class certification.  Id. at *3.

The Court’s Opinion

The Court denied Speedway’s motions for summary judgment and motion to exclude Plaintiff’s expert witness, while granting Plaintiff’s motion for class certification.

First, the Court rejected Speedway’s argument, as “a matter of first impression,” that the term “fingerprint” does not include partial prints or partial finger scans.  Id. at *7.  The Court held that the term “fingerprint” means “the ridges of the finger (or a portion of the distinctive pattern of lines on a finger), as long as that portion of the finger’s ridges or pattern is sufficient to be unique to a particular individual and is capable of being used to identify a particular person.”  Id.  As a result, the Court concluded that “[t]here is no reason that particular fingerprint, or scan of a ‘portion of the ridges of a finger’ cannot qualify as a biometric identifier” and by extension that the alphanumeric code was “biometric information under [the] BIPA.”  Id. at *8.

Second, the Court rejected Speedway’s argument that it failed to act negligently, let alone recklessly, sufficient to establish statutory damages under the BIPA.  The Court found “[o]n liability, BIPA is indeed a strict liability statute and requires no proof of particular mental state to establish a violation of the statutes notice and consent or data-retention policy requirements.”  Id. at *10.  Although such states of mind are required to obtain statutory damages, the Court concluded that there was a question of fact as to Speedway’s state of mind because it was undisputed that Speedway did not have BIPA-specific notice forms up to nine years after the BIPA’s enactment.  However, it will be up to a jury to decide whether this conduct was negligent or reckless.

Third, the Court rejected Speedway’s argument that the damages alleged were disproportionate to the harm suffered and would violate the due process clause of the U.S. Constitution.  The Court reasoned that $1,000 per-negligent violation, and $5,000 per-reckless violation, were not inherently unconstitutional damages figures.  Thus, they did not run afoul of the due process clause.  The Court was also unpersuaded by Speedway’s concern that certification of a class action implicates such significant damages.  The Court reasoned that “[s]omeone whose maximum penalty reaches the mesosphere only because the number of violations reaches the stratosphere can’t complain about the consequences of its own extensive misconduct.”  Id. at *17 (quotations omitted).

Fourth, the Court also dispensed with Speedway’s myriad of other affirmative defenses and arguments.  For a variety of reasons, the Court held that each of these defenses failed.  Further, the Court took care to note that “Speedway may still litigate whether there are any factual questions to decide” at trial.  Id. at *10.  But the Court was “skeptical” that such disputed facts exist.  Id.  With all of Speedway’s motions and defenses rejected, the Court granted Plaintiff’s motion for class certification of the “7,246 employees enrolled using its timeclocks in Illinois.”  Id. at *15. 

Implications For Businesses

Unfortunately, the story in Speedway is one that employers who utilize biometric timekeeping systems in Illinois know all too well.  A seemingly routine business decision regarding timekeeping practices evolved into exponential liability, despite a plaintiff’s own admission that he did not suffer an injury-in-fact.

Fortunately, for companies with an Illinois presence that utilize biometrics, reprieve is on the way.  On August 2, 2024, Illinois Governor J.B. Pritzker signed Senate Bill 2979, which amends the draconian penalties under Sections 15(b) and 15(d) of the BIPA.  For businesses caught in the BIPA’s crosshairs, this reform ushers in a welcome era of relief in terms of bet-the-company liability.

EEOC’s FY 2024 Filings End With September Sprint That Doubles Total Filings

By Gerald L. Maatman, Jr., Alex W. Karasik, Jennifer A. Riley, and George J. Schaller

Duane Morris Takeaways:  In FY 2024 (October 1, 2023 to September 30, 2024), the EEOC’s litigation enforcement activity showed a notable decrease in filings in a year of transition for America.  But with an uncertain election season in November 2024, the EEOC’s onslaught of September filings demonstrates the Agency’s principled approach to thwart discrimination in the workplace.

Although the total number of lawsuits filed by the EEOC decreased from 144 in 2023 to 110 in FY 2024, the EEOC’s targeted efforts involve a bevy of September filings concerning discrimination allegations against employers across a myriad of industries.  Each year, the EEOC’s fiscal year ends on September 30, and the final sprint for EEOC-initiated litigation in September 2024 aligned with prior “last-month” enforcement efforts.  This year, 67 lawsuits were filed in September, equal to the 67 filed in September of FY 2023.

Overall, the FY 2024 lawsuit filing data confirms that EEOC litigation continues its steady path in enforcement efforts.  While total filings were down, Employers must recognize the key areas the EEOC continued its litigation including by industry and filing type.  Employers must maintain legal compliance with all EEOC initiatives and this FY 2024 synopsis offers insights into year-over-year EEOC enforcement patterns.

Lawsuit Filings Based On Month

We track the EEOC’s filing efforts across the entire fiscal year with its beginning in October through the anticipated final filings in September.  As with other fiscal years, the EEOC’s filing patterns remained consistent through June 2024, with a slight increase in July 2024, another slight increase in August 2024, and significant jump in September 2024.  Of the 110 total filings this year, more than half – 67 total – were filed in September.  The following chart shows the EEOC’s filing pattern over FY 2024:

Comparing these fiscal filings in FY 2024 to previous years, a significant decrease exists from FY 2023 (144 lawsuits), which was an outlier in terms of EEOC litigation in the post-COVID era.  The following graph shows the EEOC’s year-over-year fiscal year filings beginning in FY 2017 through FY 2024:

Lawsuit Filings Based On EEOC District Offices

In addition to tracking the total number of filings, we closely monitor which of the EEOC’s 15 district offices are most actively filing new cases over the year and throughout September. Some district offices tend to be more aggressive than others, and some focus on different case filing priorities. The following chart shows the number of lawsuit filings by each of the EEOC district offices.

In FY 2024, Philadelphia had the most filings with 14, followed by Atlanta, Chicago, and Indianapolis with 11 each, followed by Phoenix with 9 filings, Charlotte, Houston, and New York with 7 each, and Birmingham, Miami, and San Francisco with 6 filings each.  Dallas, Memphis, and St. Louis had 5 filings.  Notably, Los Angeles had no filings.

While filings across the board were down, the most noticeable trend of FY 2024 is the filing jump in Atlanta (11 lawsuits), compared to FY 2023 where Atlanta had 9 fillings.  In contrast, Philadelphia had a significant decrease in filings (14 lawsuits), compared to FY 2023 where Philadelphia amassed 19 filings. Like FY 2023, Chicago and Indianapolis remained steady near the top of the list again with 11 filings each, down from the 13 filings both districts launched in FY 2023.  On the opposite end of the spectrum, New York filings (7 lawsuits) fell slightly compared to its 10 filings in FY 2023, and Los Angeles (0 lawsuits) significantly fell compared to its 10 filings in FY 2023.

Although filing trends were down for all Districts, the 110 total filings demonstrate the EEOC maintained its litigation strength, both at the national and regional level. 

Lawsuit Filings Based On Type Of Discrimination

We also analyze the types of lawsuits the EEOC filed, in terms of the statutes and theories of discrimination alleged, in order to determine how the EEOC is shifting its strategic priorities.

When considered on a percentage basis, the distribution of cases filed by statute remained roughly consistent compared to FY 2024 and FY 2023. Title VII cases once again made up the majority of cases filed, as they constituted 61% of all filings in FY 2024 (significantly down from 68% of all filings FY 2023, down from the 69% filings in FY 2022, and equal to 61% in FY 2021).

Overall ADA cases also made up a significant percentage of the EEOC’s FY 2024 filings – totaling 41%.  This is an overall increase in previous years where ADA filings amounted to 34% in FY 2023, 29.7% in FY 2022, and just below the 37% in FY 2021.

There was also a downward trend in ADEA filings, as 7 ADEA cases were filed in FY 2024, after 12 age discrimination cases were filed in FY 2023 and 7 age discrimination cases filed in FY 2022.  However, unlike FY 2023, this year the EEOC filed 4 Pregnant Worker’s Fairness Act cases (“PWFA”) after the PWFA went into effect on June 27, 2023.

The first graph below shows the number of lawsuits filed according to the statute under which they were filed (Title VII, Americans With Disabilities Act, Pregnancy Discrimination Act, Equal Pay Act, Age Discrimination in Employment Act, Pregnant Worker’s Fairness Act, and Genetic Information Nondiscrimination Act) and, the second graph, shows the basis of discriminatory allegations.

Lawsuits Filings Based On Industry

In monitoring the EEOC’s filings by industry, FY 2024 has mirrored EEOC-initiated lawsuits in the top three industries compared to FY 2023, demonstrating the Commission’s focus on a few major industries.

Three industries were the primary targets of lawsuit filings in FY 2024:  Hospitality (Restaurants / Hotels / Entertainment) with 23 filings, Healthcare with 22 filings, and Retail with 21 filings. The next set of industries did not amount to double-digit filings, but are still well within the EEOC’s sights, including Manufacturing with 11 filings; Logistics with 7 filings; Construction with 4 filings; and Property Management with 3 filings.  

This aligns with FY 2023, where Hospitality (mainly Restaurants) was the industry at large with 28 filings.  Again in second and third place were Retail and Healthcare, respectively, with 24 filings.  Absent from FY 2024’s industry-based filings were Automotive, Security, and Technology.

Like FY 2023, Hospitality, Retail, and Healthcare employers should continue to monitor their compliance with federal discrimination laws, as the EEOC continues its enforcement against these industries for alleged discriminatory practices.  The industries are regular hotbeds for charges and ultimately lawsuits.  No matter the industry, every employer should recognize they are vulnerable to EEOC-initiated litigation as detailed by the below graph.

Looking Ahead To Fiscal Year 2025

Moving into FY 2025, the EEOC’s budget includes a $33.221 million increase from 2024, and prioritizes five key areas, including advancing racial justice and combatting systemic discrimination on all protected bases, particularly with respect to vulnerable workers; advancing pay equity; addressing the use of artificial intelligence in employment decisions; providing information to assist employers that chose to undertake lawful approaches to fostering diversity, equity, inclusion, and accessibility (DEIA) in their workplaces; and preventing unlawful retaliation and harassment.

The EEOC also maintained its FY 2024 goals for its own Diversity, Equity, Inclusion, and Accessibility (DEIA) program where it seeks to achieve four goals, including workplace diversity, employee equity, inclusive practices, and accessibility. Additionally, the EEOC continues to emphasize and build upon its FY 2021 software initiatives addressing artificial intelligence, machine learning, and other emerging technologies in continued efforts to provide guidance.  The EEOC notably recognized that AI systems may offer new opportunities for employers but cautioned AI’s potential to facilitate discrimination.  Finally, the joint anti-retaliation initiative among the EEOC, the U.S. Department of Labor, and the National Labor Relations Board will continue to address retaliation in American workplaces.

Key Employer Takeaways

In many respects, FY 2024 was a year of targeted enforcement and continued efforts across several discriminatory areas, even if total filings decreased overall.  The EEOC again requested a significant budget increase for its enforcement efforts, and the EEOC’s focus on emerging technologies juxtaposed with discrimination warrants employer recognition. As election season is approaching, the EEOC’s FY 2024 represents the current presidency’s enforcement goals and the Agency’s efforts to combat all areas of discrimination.  We anticipate these figures will grow by next year’s report, so it is more crucial than ever for employers to comply with discrimination laws.

The Class Action Weekly Wire – Episode 75: Key Developments In Name, Image, Likeness Antitrust Class Actions

Duane Morris Takeaway: This week’s episode of the Class Action Weekly Wire features Duane Morris partners Jerry Maatman and Sean McConnell with their analysis of class action litigation in the antitrust space involving student-athletes and their Name, Image, Likeness (“NIL”) claims.

Check out today’s episode and subscribe to our show from your preferred podcast platform: Spotify, Amazon Music, Apple Podcasts, Samsung Podcasts, Podcast Index, Tune In, Listen Notes, iHeartRadio, Deezer, and YouTube.

Episode Transcript

Jerry Maatman: Thank you, loyal blog readers and listeners, for joining us for this episode of the Class Action Weekly Wire. It’s my privilege and honor to introduce Sean McConnell, who chairs Duane Morris’ antitrust group, who’s joining us today to talk about all things antitrust in the class action space. Welcome, Sean.

Sean McConnell: Great to be here. Thanks for having me, Jerry.

Jerry: Today we wanted to discuss a newsworthy lawsuit, the filing of which has been reported wide and far. A federal court lawsuit filed against the NCAA and various universities called Robinson v. NCAA. What should our listeners and readers know about that case? What does it mean?

Sean: Thanks, Jerry. Well, we’ve talked several times about the name, image, and likeness, or NIL, antitrust class actions that have been filed against the National Collegiate Athletic Association, or NC2A, and various athletic conferences. Arguing that past prohibitions by the NCAA preventing athletes from being compensated for their name, image, and likeness and various issues have arisen related to those claims leading to litigation. And this Robinson case is one of the latest in those lines of cases. This case was filed by former University of Michigan football players, who were NCAA student-athletes prior to June 15, 2016 on similar grounds to the House NCAA case. But the House case, that class only went back to 2016. So this this new Robinson case is for student-athletes that played sports for NC2A colleges before 2016, on grounds of a continuing violation theory basically that the settlement proceeds should extend back beyond 2016 and cover their prohibition on compensation dating back before that time, arguing that they should have been compensated for their name, image, and likeness, as well as the plaintiffs in the House case.

Jerry: These types of NIL cases seem to be at the forefront of antitrust class action litigation involving universities. And it seemed like when the NCAA lifted the restrictions on compensation for student-athletes, it opened, so to speak, the floodgates of litigation. Is that what you’re seeing in terms of the poll side of the courthouse?

Sean: That’s exactly right, Jerry. Now that student-athletes are able to be compensated for their name, image, and likeness – which athletes were not able to do so, for you know, over a hundred years – we’re now seeing, you know, several antitrust class actions being filed against member institutions of the NCAA and the NCAA itself for money that they believe they should have been able to earn, whether it’s from television revenue sharing, from their name, image, and likeness being sold on jerseys and other memorabilia that was sold by the schools and by other third parties. So that is certainly the current trend.

Jerry: There’s certainly a lot of money at issue. If you become a little more granular and drill down into the theories of recovery in the Robinson lawsuit that has just been filed, what is it exactly that the plaintiffs are trying to recover?

Sean: Sure. So the theory of the case in Robinson is that the NCAA, its member institutions, and then, you know, networks such as the Big 10 Network that profited off of the name, image, and likeness of student-athletes by selling television rights and broadcasting games in which those players played – that much like players in professional leagues are compensated through revenue-sharing programs from television rights – that the plaintiffs in the Robinson case believe that they are entitled to a revenue share from the use of their name, image, and likeness, from television distribution, as well as from various products sold by those institutions.

Jerry: Well, thanks for that update and that analysis. I’m sure we’ll be circling back to you when the litigation proceeds to the class action certification stage – obviously, the Holy Grail in any class action that the plaintiffs are seeking. Also wanted to talk a little bit about the recent ruling a few weeks ago, where a federal district court judge declined to approve a class action settlement on antitrust theories against the NCAA to the tune of a $2.78 billion class-wide settlement. Tell our readers and listeners a little bit about how that came about?

Sean: Sure. So that’s the House antitrust case that I that I mentioned earlier, which covers student athletes from 2016 to the present. And as you as you referenced Jerry, I mean the settlement amount was quite large at first blush. I mean the notion that student-athletes would now be entitled to, you know, almost $3 billion in compensation from member institutions and conferences. But the problem with the settlement, as some objectors raised, and as the court took note of, was that apportioning different amounts of the revenue share by conference by school still amounted to seemingly price-fixing, because when you’re setting the limits on how much revenue can be shared with different student athletes, even as part of a settlement, those revenue sharing programs and limits on what certain conferences or certain schools could do from a revenue perspective, how different collectives organized by school could compensate student athletes, even as part of the settlement still amounted to, you know, apparently price-fixing, and that’s what the court was concerned with those limits, and whether that still constituted a Sherman Act violation. And so the judge told the parties to go back to the drawing board and try to work out a fix that was a little bit you know more in line with the antitrust laws.

Jerry: That’s so interesting, and certainly a blockbuster settlement in 2024. And one would think that the parties are going to reboot, do a 2.0 settlement, so to speak, and put that before the court – apt to be one of the largest settlements that we report on this coming January, when we publish the Duane Morris Class Action Review, as well as the mini-book on antitrust class action litigation that you’re an author of. Well, thank you so much for Sean, for joining us and lending your thought leadership and expertise. It’s been great to speak with you.

Sean: Thank you, Jerry. It’s been great to be here again.

New York Federal Court Grants Class Certification To FDNY Emergency Medical Services First Responders In Pay Discrimination Suit Against New York City

By Gerald L. Maatman, Jr., Jennifer A. Riley, and Gregory S. Slotnick

Duane Morris Takeaways: On September 24, 2024,in Local 2507 et al. v. City of New York, No. 22-CV-10336, (S.D.N.Y. Sep. 24, 2024), Judge Analisa Torres of the U.S. District Court for the Southern District of New York granted class certification in a suit accusing the City of New York (the “City”) and the Fire Department of the City of New York (“FDNY”) of discriminatory pay practices, suppression of wages, and denial of employment opportunities based on sex, gender, and/or race, in violation of: (i) Title VII of the Civil Rights Act of 1964, 42 U.S.C. § 2000e-1 et seq. (“Title VII”); (ii) the New York State Human Rights Law, New York Executive Law § 290 et seq.; and (iii) the New York City Human Rights Law, N.Y.C. Admin. Code § 8-101 et seq.  The Court certified a class of all persons employed by the City in the Emergency Medical Services (“EMS”) Bureau of the FDNY working as an Emergency Medical Technician, Paramedic, Lieutenant, Captain, Deputy Chief, and Division Commander/Chief at any time from December 2019 through present (the “Class”), as well as a sub-class of workers who identify as non-white, and another sub-class of employees who identify as female (the “Sub-classes”).  Plaintiffs – current and former members of the FDNY’s EMS Bureau and their representative unions – generally alleged that the City discriminates in its pay practices against members of the Class and Sub-classes (which they claim are much more demographically diverse) in favor of its mostly white, male Fire Bureau employees. 

In her order certifying the Class and Subclasses, Judge Torres explained that the plaintiffs satisfied their burden to meet the numerosity, commonality, typicality, and adequacy requirements of Rule 23, relying heavily on plaintiffs’ expert testimony and statistical analyses filed in support of their motion.  The Court was unpersuaded by the City’s arguments that variations in job title, compensation, tenure, and supervisory responsibility should preclude class certification, and stated that it would not engage in “free-ranging merits inquiries” at this stage.  Instead, the Court held that plaintiffs had offered significant proof that the City operated under a general policy of discrimination, including substantial (and sometimes unrebutted) evidence of common policies disparately impacting members of the Class and Sub-classes, and statistics confirming that EMS First Responders were more diverse by race and sex/gender, and paid significantly less, than Fire First Responders.

Case Background

Since 1996, the FDNY has functioned as an integrated department with two bureaus of first responders, including: (1) EMS (employing emergency medical technicians and paramedics, as well as their supervisors and commanding officers); and (2) Fire (employing firefighters, as well as their supervisors and commanding officers).  Id. at 2.  Plaintiffs claim that the core of the work of both EMS and Fire First Responders is the same, with their jobs substantially equal in required skill, effort, responsibility, and working conditions.  Id.  Plaintiffs contended that the City pays EMS First Responders substantially lower salaries than it pays Fire First Responders, and that Fire First Responders also receive more generous overtime, pension, disability, medical, dental, line of duty death, and educational benefits compared to EMS First Responders.  Id.  Plaintiffs also asserted that these differences in compensation result from the “pronounced difference in demographics” between EMS and Fire First Responders – specifically alleging that while EMS First Responders are “at least 55% non-white and approximately 24% female,” only “14% of Fire First Responders are non-white” and “less than 1%” are female.”  Id. at 2-3. 

The Court noted had previously denied a motion to dismiss the Complaint by the City, finding that plaintiffs’ claims were timely filed and that plaintiffs sufficiently pleaded their discrimination claims against the City.  Id. at 3. 

The Court’s Decision

The Court first set forth the applicable legal standard for class certification, including confirmation that the proposed Class must meet each of the numerosity, commonality, typicality, and adequacy requirements of Rule 23(a) by a preponderance of the evidence.  Id. at 4.       

The Court addressed the numerosity and ascertainability standards of Rule 23 together, concisely confirming that plaintiffs met their burden of a proposed class exceeding 40 members.  Id.  Moreover, the City did not contest that plaintiffs satisfied this burden, as plaintiffs asserted that the Class included approximately 4,500 to 5,000 members, with each Sub-class including well over 1,000 members, through expert analysis of pre-2023 City employment data.  Id. at 5.  The City also did not contest that the members of the Class and Sub-classes were readily identifiable and ascertainable.  Id.

Most of the Court’s analysis focused on the commonality, predominance, and typicality requirements of Rule 23 class certification.  The Court set forth the commonality standard, requiring that the action present at least one question capable of generating a “common answer apt to drive the resolution of the litigation,” but which does not mandate that the claims need be identical amongst the plaintiffs.  Id. at 5-6.  The Opinion confirmed that the commonality standard is satisfied where plaintiffs identify a unifying thread among class members’ claims warranting class treatment, and where plaintiffs show that their alleged injuries “derive from a unitary course of conduct by a single system.”  Id. at 6.  Finally, the Court confirmed that a proposed class satisfied the predominance standards “if resolution of some of the legal or factual questions that qualify each class member’s case as a genuine controversy can be achieved through generalized proof, and if these particular issues are more substantial than the issues subject only to individualized proof,” even if other matters within a case must be tried separately (i.e., damages).  Id.  The Court noted that typicality requires each member’s claim arise from the same course of events, with similar legal arguments made to prove defendant’s liability.  Id. at 7.

Judge Torres next examined plaintiffs’ arguments in support of class certification.  Plaintiffs contended that they alleged a “unitary” course of conduct in the form of three “centralized” discriminatory policies and practices applying to all Class and Sub-class members equally, claiming the City: (1) failed to assess whether FDNY’s Fire and EMS First Responders are similarly situated for purposes of compensation; (2) as a result, failed to ensure that the occupational segregation of EMS and Fire First Responders does not disparately impact the compensation of protected groups; and (3) took affirmative steps to suppress the compensation of the more diverse EMS First Responder workforce by refusing to grant EMS personnel the “uniformed” pattern increase in collective bargaining.  Id.  In response, the City argued that the Class and Sub-classes fail to account for differences in job duties and responsibilities amongst EMS First Responders, including the fact that some respond to calls in the field while others work in dispatch or training and instruction, and different field training and tasks, such as some working as rescue paramedics, with others working advanced services.  Id. at 7-8.  The City also pointed out differences in that some EMS First Responders receive percentage increases in salary to account for additional training and responsibility, and that these variances, plus dissimilar rank and tenure, undermine plaintiffs’ commonality and typicality arguments.  Id. at 8.

The Court, however, was not persuaded by the City’s claimed distinctions based on rank and job responsibility, citing to plaintiffs’ arguments that the City took action or failed to act “in a centralized manner and on a Bureau-wide scale, uniformly suppressing the compensation of EMS First Responders regardless of rank, tenure, title, training, or assignment.”  Id.  The Court also held that questions of whether the alleged policies exist and violate federal and state law are common to all Class members, regardless of potential differences in ultimate damages owed amongst Class members.  Id.  The Court further ruled that for the same reason, the lead plaintiffs satisfied typicality because they all alleged they are paid less than their Fire counterparts due to the same policies, regardless of specific position, supervisory duties, and whether field-assigned or non-field-assigned.  Id. at 8-9. 

As for the City’s claim that plaintiffs failed to show EMS and Fire First Responders were adequate comparators for Title VII purposes, the Court opined that the City’s argument sought to turn the class certification motion into a summary judgment motion, and that Rule 23 “does not grant the court a license to engage in free-ranging merits inquiries.”  Id. at 9.  Moreover, through experts, Judge Torres found that plaintiffs offered statistical evidence in support of their disparate impact claims of racial, sex/gender, and compensation disparities among EMS and Fire First Responders, which the City did not dispute.  The Court held that at least one of the policies plaintiffs sought to substantiate—the City’s refusal to grant EMS First Responders the uniformed pattern increase in collective bargaining—was not disputed by the City’s 30(b)(6) deposition witnesses.  Id. at 9-10.  Plaintiffs further provided abundant statistical evidence and expert analysis “of a kind and degree sufficient to reveal a causal relationship” between the challenged policies and the observed racial, gender, and compensation disparities.  Id. at 10.

In summary, the Court found that plaintiffs offered significant proof that the City has “operated under a general policy of discrimination” through: (i) substantial (and in some cases unrebutted) evidence of common policies disparately impacting the Class and Sub-classes; (ii) statistical analyses showing EMS First Responders are more diverse by race and sex/gender than Fire, and are paid significantly less; and (iii) expert analyses showing EMS and Fire First Responders perform similar jobs and no job-relevant rationale explaining the difference in compensation.  Id. at 11.  The Court also very briefly confirmed that in this case, a class action is superior to individual actions, as plaintiffs alleged that individual Class members were relying on membership in the Class to vindicate their rights – another point not disputed by the City.  Finally, the Court found that the lead plaintiffs were adequate representatives, since their interests aligned with those of the Class and Subclasses, and the City did not contest this position.

Implications For Employers

The Court’s grant of class certification for the Class and Sub-classes against the City and the FDNY serves as an important reminder that employers should not necessarily count on defeating class-wide claims by pointing to different job titles and roles, salary levels, or even departments.  While this case concerns a very large employer and workforce, the Court’s opinion provides businesses with a roadmap of how courts in the Second Circuit tend to address class certification motions – particularly where plaintiffs rely heavily on expert testimony and statistical analyses to support their allegations. 

Perhaps most importantly, companies operating in New York and within the Second Circuit must remain alert and monitor potential compensation variations amongst employees performing jobs that could be considered “similar” in nature.  If they find any such variations, employers should ensure that they can pinpoint valid job-based justifications for the differences, particularly where one section of the workforce may be more demographically diverse than another.  This is especially so when businesses are applying common policies and practices to all such workers, since courts will address common questions of law and fact for all proposed class members, rather than engage in the underlying factual merits at class certification. 

Employers should heed this Opinion as a lesson on how courts evaluate class-wide claims and certification motions even where there may be concrete differences in job title, compensation, rank, the field or non-field nature of work, and the presence or absence of supervisory responsibilities.  Moreover, although situation-dependent, businesses should always be weary of not contesting allegations made by plaintiffs and their experts in all motions filed with the court, or else risk surrendering possible defenses the court would otherwise consider!

A Bite Of The Biscuit: North Carolina Federal Court Limits FLSA Collective Action Against Bojangles To North Carolina-Based Employees Only

By Gerald L. Maatman, Jr., Alex W. Karasik, and Zachary J. McCormack

Duane Morris TakeawaysIn Andrews v. Bojangles OpCo, LLC, No. 3:23-CV-00593, 2024 U.S. Dist. LEXIS 163824 (W.D.N.C. Sept. 11, 2024), Judge Robert J. Conrad of the U.S. District Court for the Western District of North Carolina granted in part Plaintiffs’ motion for conditional certification of an FLSA collective action accusing Bojangles Restaurants, Inc. and Bojangles OPCO, LLC (collectively, “Bojangles”) of misclassifying Assistant General Managers (“AGM”) as exempt, which allegedly resulted in overtime violations. Plaintiffs sought to certify a nationwide collective action. While Judge Conrad granted the certification bid brought by two former AGMs, the Court limited the grant of conditional certification to workers within the State of North Carolina since the pleadings alleged unfair practices in nine Bojangles locations – all located within North Carolina.

This decision provides an excellent roadmap for employers to defend motions for conditional certification of FLSA collective actions in terms of how to limit the geographic scope of the putative collective action and therefore limit the size of the case.

Case Background

Bojangles is a chain of fast food restaurants, operating approximately 300 locations primarily in the Southeastern United States. On September 19, 2023, two former Bojangles AGMs filed a complaint alleging that Bojangles willfully violated the FLSA by classifying AGMs as overtime-exempt administrators while simultaneously requiring them to spend the bulk of their job on tasks typically assigned to hourly employees. Id. at *2. After Plaintiffs filed their complaint, two additional AGMs filed consents to join the lawsuit. Id.

In their attempt to conditionally certify the collective action, Plaintiffs argued that the putative collective members performed the same or substantially similar primary job duties, including the non-exempt tasks of cashiering, cooking, cleaning, and restocking products. Id. Furthermore, AGMs were required to cover hourly associates’ shifts when they were absent from work and that approximately 90% of AGMs’ time was spent doing manual work and customer service duties — the same tasks assigned to hourly associates. Id. at *8. Plaintiffs also claimed they lacked authority over personnel decisions, considering General Managers were required to make final decisions on employment matters. Id. at *9. Even though the AGMs were classified as salaried employees and did not receive overtime compensation for any hours worked over forty hours per week, they were scheduled to work a fifty-hour workweek, which often resulted in working more than fifty hours. Id. at *9. Furthermore, AGMs who worked at more than one Bojangles location expressed that the job duties performed as an AGM did not change from one location to another. Id. at *10.

The Court’s Decision

The Court granted in part Plaintiffs’ motion for conditional certification. Plaintiffs sought conditional certification for all AGMs who worked at any Bojangles location nationwide since September 19, 2020. Id. at *6. In response, Bojangles argued that Plaintiffs’ evidence to support its nationwide collective relates to only a small fraction of the geographic areas in which Bojangles operates. Id. at *12. Specifically, Bojangles observed that of approximately 300 Bojangles restaurant locations in multiple states, only nine North Carolina locations were represented in Plaintiffs’ pleadings. Id. Other AGMs mentioned by the Plaintiffs also worked at locations within North Carolina. Id.

Plaintiffs attempted to further persuade the Court of the nationwide collective by pointing to previous conditional certification orders by the Court which did not limit the scope of notice or require evidence to have a minimum threshold of geographic representation at the conditional certification stage. Id. at *15. The Court rejected this argument, holding that, “Plaintiffs fail to identify any authority where a nationwide class was certified on a similar record to the one currently before the Court . . . [A]lleging mere misclassification is not sufficient for collective certification, even at this stage.” Id. Accordingly, the Court held that while Plaintiffs’ evidence regarding AGMs in North Carolina warranted that conditional certification was appropriate within the State, Plaintiffs did not establish that conditional certification was appropriate nationwide.

The Court authorized a 90-day opt-in period including the establishment of a website and text messages for potential plaintiffs whose initial notice by mail and email were returned as undeliverable. Id. The Court also authorized reminder notices, as requested by Plaintiffs and ordered Bojangles to provide the names, dates of employment, addresses, and email addresses of potential plaintiffs. Id. Further, if any potential plaintiffs’ notice by mail and email become returned as undeliverable, Bojangles must provide their telephone number of the potential plaintiff. Id.

Implications For Employers

This decision provides a blueprint for one avenue to attack collective certification — limit the geographical scope of the putative collective action. Here, Plaintiffs failed to establish that nationwide conditional certification was appropriate where Plaintiffs did not provide evidence regarding putative collective members outside the State of North Carolina. Accordingly, employers should carefully examine representative evidence when crafting their opposition to motions for conditional certification.

Louisiana Federal Court Rules The Hospital Operator’s Attempt To Disband A Collective Action Is Untimely

By Gerald L. Maatman, Jr., Bernadette Coyne, and Zachary J. McCormack

Duane Morris Takeaways: On September 6, 2024, in Hamm v. Acadia Healthcare Co., Inc., No. 20-CV-1515, 2024 U.S. Dist. LEXIS 160319 (E.D. La. Sept. 6, 2024), Judge Susie Morgan of the U.S. District Court for the Eastern District of Louisiana denied Acadia LaPlace Holdings, LLC and Oschner-Acadia, LLC’s (“Acadia”) motion to decertify Plaintiffs’ Fair Labor Standards Act (“FLSA”) collective action in a suit accusing the hospital operator of failing to pay nurses for interrupted meal breaks. After the Court previously certified the collective action by applying the rigorous standard from Swales v. KLLM Transport Services, LLC, 985 F.3d 430, 441 (5th Cir. 2021), Acadia moved to decertify the collective by claiming the workers are too dissimilar for collective-wide treatment. However, the Court ruled that Acadia’s request to decertify was improper at this late stage in the litigation considering that the Court previously certified the collective action after providing the parties with the opportunity to conduct preliminary discovery and fully brief the issue. This ruling indicates that, although the Fifth Circuit has not ruled on whether a defendant can bring a motion to decertify after certification has been granted, this issue is becoming ripe for appellate review.

Case Background

Acadia is a leading provider of behavioral healthcare services that operates a network of approximately 250 facilities in thirty-eight states and Puerto Rico. Acadia previously employed Plaintiffs Amy Hamm and Joye Wilson as nurses at hospitals it operated in Texas and Louisiana. Hamm, 2024 U.S. Dist. LEXIS 160319, at *3. On May 22, 2020, Plaintiffs filed a complaint alleging Acadia violated the FLSA and Louisiana state law by failing to pay overtime compensation for on-duty meal periods and off-the-clock work. Id. Specifically, the two former workers claimed the hospital operator automatically deducted 30 minutes from the nurses’ paychecks for meal breaks despite constant interruptions and the requirement to remain on call to respond to potential emergencies during the breaks. Id.

On March 7, 2022, Plaintiffs moved for certification of their FLSA claims as a collective action, but prior to hearing Plaintiffs’ motion, the Court found that “limited discovery [was] needed” to evaluate “whether the employees in [the] proposed collective action [were] similarly situated” within the meaning of Section 216(b) of the FLSA. Id. Ultimately, after conducting the limited discovery, the Court partially granted Plaintiffs’ motion to certify, and on July 13, 2022, defined the collective action to include all current and former hourly, non-exempt employees directly involved with patient care — such as nurses, nursing staff, aides and technicians — who worked for Acadia between May 2017 through the date of the dispute’s resolution. Acadia later filed its motion to decertify Plaintiffs’ collective action, arguing that the named and opt-in plaintiffs were not sufficiently similar to be combined into a collective action because of differences between the jobs, meal break experiences, and the claims alleged by the Plaintiffs and the potential opt-in members. Id. at *4.

The Court’s Decision

Until January 2021, district courts within the Fifth Circuit generally applied the test derived from Lusardi v. Xerox Corp., 118 F.R.D. 351 (D.N.J. 1987),during the certification process for FLSA collective actions. The Lusardi test divided the notice and class certification process into two steps. In the first step, referred to as “conditional certification,” the court determined whether the proposed opt-in plaintiffs and the named plaintiffs were similarly situated. Hamm, 2024 U.S. Dist. LEXIS 160319, at *5. The plaintiff’s burden at this step was minimal, and as such, most collective actions are typically certified. Id. The second step, which occurrs at the conclusion of discovery, and was often prompted by a motion to decertify by the defendant, requires a more rigorous determination of whether the named plaintiffs and the opt-in plaintiffs were similarly situated. Id. If not, the named plaintiffs could only bring the lawsuit on their individual behalf, not on behalf of the opt-in plaintiffs. Id. at *6.

The Fifth Circuit rejected the Lusardi approach in Swales, and now district courts within the Fifth Circuit are instructed to “rigorously scrutinize” whether the named plaintiffs and potential opt-in plaintiffs are sufficiently similar to each other at the outset of litigation, before potential opt-in plaintiffs can be notified of the FLSA action. Id. Courts in the Fifth Circuit now identify what facts and legal considerations are material to making the “similarly situated” determination and authorize preliminary discovery accordingly. Id. The Swales decision further directs courts to make the certification decision “as early as possible.” Id.

In Acadia’s motion to decertify, it asked the Court to undertake a post-discovery decertification inquiry reminiscent of the second stage of the Lusardi test. Id. at *9. Specifically, Acadia argued that evidence obtained during the preliminary discovery phase revealed differences between the jobs, meal break experiences, and claims of Plaintiffs and opt-in members, and established that the members of the collective action were not “similarly situated” under Section 216(b). Id. at *10. In response, Plaintiffs argued that Acadia’s motion was moot because the Court already declared Plaintiffs were similarly situated under the rigorous Swales approach, and certified the FLSA collective action. Id. at *11. In its reply, Acadia advanced a proposition that “[a]t the decertification stage, even post-Swales, it is still Plaintiffs’ burden to prove and maintain through the litigation that the collective members are similarly situated.” Id. Acadia argued that using the Swales framework in lieu of the Lusardi two-step process does not mean defendants forfeit their ability to later seek decertification. Id. at *13.

Ultimately, Judge Morgan ruled that Acadia’s motion to decertify came too late and that “to allow such a motion would be a waste of judicial resources.” Id. The Court reasoned that once certified under the Swales framework, after an opportunity to conduct preliminary discovery and fully brief the issues, there is no justification for a motion to decertify. Id. Although the Fifth Circuit has not yet ruled on whether a defendant may bring a motion to decertify after the initial certification of an FLSA collective action under the Swales framework, Judge Morgan opined that the Swales decision was not intended to allow this. Id. at *14. 

Implications For Employers

The Hamm ruling provides guidance to employers with operations in the Fifth Circuit as to how a court will treat a motion to decertify filed after the court has granted certification utilizing the Swales standard. Moving forward, employers in the Fifth Circuit should aim to break up a proposed collective action during the fact-intensive certification process conducted towards the beginning of the litigation. Courts are unlikely to require plaintiffs to maintain, throughout the litigation, that collective members are similarly situated. Corporate counsel should take note that “conditional certification” remains non-existent in the Fifth Circuit, and once a court considers all available evidence to grant Section 216(b) certification, it is unlikely to revisit the issue.

The Class Action Weekly Wire – Episode 74: $65 Million Data Breach Settlement Tops 2024 Class Action Charts

Duane Morris Takeaway: This week’s episode of the Class Action Weekly Wire features Duane Morris partner Jerry Maatman, special counsel Justin Donoho, and associate Ryan Garippo with their analysis of a major settlement in the data breach class action space, and what it signifies for trends in this area as well as data security best practices for companies.

Check out today’s episode and subscribe to our show from your preferred podcast platform: Spotify, Amazon Music, Apple Podcasts, Samsung Podcasts, Podcast Index, Tune In, Listen Notes, iHeartRadio, Deezer, and YouTube.

Episode Transcript

Jerry Maatman: Thank you, loyal blog readers for joining us for this week’s installment of our podcast series called the Class Action Weekly Wire. I’m joined today by my colleagues, Justin and Ryan, and the topic of the day is one of the most significant data breach class action settlements of 2024. Welcome, Justin and Ryan.

Justin Donoho: Hi, Jerry, thank you for having me.

Ryan Garippo: Thanks, Jerry. Happy to be here.

Jerry: So specifically, what we wanted to do was talk about the ins and outs of the $65 million class action settlement announced in a data breach lawsuit entitled Doe v. Lehigh Valley Health Network. Justin, can you set the stage for our listeners and readers about what this case is about and why it’s significant?

Justin: Yes, Jerry. In this case the plaintiffs are cancer patients. They filed a class action against Pennsylvania, based healthcare company, Lehigh Valley Health Network, for its alleged failure to protect their nude photographs taken during their cancer treatments from cybercriminals who hacked into the company servers, stole the photographs, and leaked them to the public in February 2023. The plaintiffs brought claims for negligence, breach of fiduciary duty, publicity of private matters, and other claims. The plaintiffs also sought punitive damages based on their assertion that, despite being told by the criminal hackers that the nude photos and other sensitive data would be released publicly if a ransom were not paid, the health system declined to take any action, and therefore allegedly made a knowing, reckless, and willful decision of their own to allow the criminal hackers to post their nude images on the internet.

Jerry: Most data breach class actions involve infiltration of systems involving social security information, payroll data, and like. Very unusual that would include photographs, let alone photographs of patients receiving treatment. Ryan, what were some of the particulars of the settlement agreement that plaintiffs’ counsel and defense counsel for the defendant had negotiated to get this case resolved?

Ryan: Well, Jerry, the breach affected over a 135,000 patients and employees, more than 600 of whom had their medical images posted online. So the class members will receive payouts ranging from $50 to $70,000. But the higher amounts going to those who actually had their new photos published on the internet, and the lower amounts being for those who suffered a less invasive invasion of their personal information. And, as you’ve mentioned overall, the company will pay a total of $65 million to sell those claims.

Jerry: So our Class Action Review tracks settlements in all substantive areas, including data breach, and over the last 36 months, anecdotally, data breach class actions just keep getting bigger and bigger and bigger. And this is a manifestation of that trend. How do you believe this will impact the price or the going rate of data breach class action settlements going forward in Corporate America?

Ryan: Well, Jerry, I think it’s only likely to go up. The Duane Morris Class Action Review analyzed the largest data breach settlements, and in 2023 plaintiffs secured about $515 million dollars in total for the top 10 settlements. The largest settlement being $350 million in the In Re T-Mobile Customer Data Security Breach Litigation, which accounted for the majority of that number, and the next largest settlement was $49.5 million in the In Re Blackbaud Inc. Customer Data Security Breach Litigation as well. So, this is settlement is very large for a data breach class action settlement overall, and healthcare institutions continue to be a favorite target for the plaintiffs’ bar in the cybersecurity space.

Justin: Thank you, Ryan. This settlement looks like it will likely be one of the largest data breach class action settlements in 2024 for sure. This case also continues the massive growth of data breach litigation in general over the past few years. Cybercrime is on the rise – companies need to likewise raise their own levels of data security practices to mitigate risks associated with these types of incidents. In fact, a number of data security practices including involvement of Board of Directors data encryption and password reset policies were included in some level of detail in this settlement as measures the healthcare company agreed to adopt in addition to paying out all that money to the plaintiffs. These are types of data security measures all companies should consider as they design and work to continuously improve their cybersecurity programs.

Jerry: Well, thanks so much, Justin and Ryan, for your analysis of this settlement and its implications for Corporate America. The newest edition, the 2025 Duane Morris Class Action Review, will come out in the first week of January of 2025, and my prediction would be this particular settlement certainly going to be on that top 10 list. Well, thank you loyal blog readers and listeners for tuning into this week’s installment of the Class Action Weekly Wire, and thank you, Justin and Ryan, for providing your thought leadership.

Ryan: Thanks, Jerry, and thank you to the listeners.

Justin: Thank you, Jerry. Thanks everyone.

Georgia Supreme Court Confirms Denial Of Class Certification In Data Breach Lawsuit

By Alex W. Karasik, Gerald L. Maatman, Jr., and Jennifer A. Riley

Duane Morris TakeawaysIn Vest Monroe, LLC v. Doe, No. S23G1224, 2024 Ga. LEXIS 187 (Ga. Sept. 4, 2024), the George Supreme Court reversed the Georgia Court of Appeals and held that a trial court did not abuse its discretion when it denied class certification in a data breach class action lawsuit alleging that a health facility failed to protect patients’ sensitive information.  The trial court originally ruled that Plaintiff failed to establish the elements of typicality and commonality, since the named Plaintiff did not suffer the same harm as the putative class that he sought to represent. The Georgia Supreme Court vacated a holding by the Georgia Court of Appeals that parted ways with the trial court.

For businesses that are embroiled in the rapidly evolving data breach class action litigation arena, this case provides valuable insight regarding how companies can oppose motions for class certification.

Case Background

Plaintiff received treatment at Ridgeview Institute – Monroe, a behavioral health and addiction treatment facility.  After an employee at the facility was terminated, the employee contacted Plaintiff’s counsel of record in a medical malpractice case pending against Ridgeview and provided the attorney with digital copies of documents and recordings that she obtained from Ridgeview.  Id. at *3.  After becoming aware of the disclosure of the patient information, Ridgeview discovered that information pertaining to nearly 2,000 patients was compromised.

In March 2020, Defendants filed a lawsuit against the former employee in federal court, which ultimately enjoined the former employee and her counsel from further dissemination of the Ridgeview documents, and ordered her to delete the material in her possession.  Defendants also notified all potentially affected individuals of the incident.  In November 2020, after receiving notice of the incident, Plaintiff filed a class action complaint against Defendants, asserting a number of claims related to the unauthorized disclosure of patient information. 

Plaintiff moved for class certification in March 2022.  The trial court denied Plaintiff’s motion for class certification on the grounds that Plaintiff failed to establish either the required elements of commonality or typicality under OCGA § 9-11-23 (a).  In finding a lack of commonality, the trial court noted the differences in the type of documents disclosed with respect to members of the proposed class, as some contained diagnosis and treatment information, while others did not.  Id. at *4.  Relatedly, the trial court concluded that Plaintiff’s claims did not satisfy the element of typicality because some members of the proposed class had clinical information revealed, while Plaintiff did not.

Plaintiff appealed, and the Georgia Court of Appeals reversed the trial court’s decision.  The Court of Appeals rejected the trial court’s findings on commonality and typicality,  and instead concluded that with respect to typicality, Plaintiff’s claims and those of the putative class arose “from the same alleged events” and were “based on the same legal theories.”  Id. at *6. 

The Georgia Supreme Court thereafter granted review to consider whether the trial court abused its discretion by finding that the putative class lacked commonality and typicality under OCGA § 9-11-23 (a).

The Georgia Supreme Court’s Decision

The Georgia Supreme Court reversed the Court of Appeals’ decision and held that the trial court acted within its discretion in finding a lack of typicality. 

First, the Georgia Supreme Court opined that the trial court’s order reflected that it conducted the rigorous analysis contemplated by OCGA § 9-11-23.10.  For instance, in its order denyingclass certification, the trial court explained that the OCGA § 9-11-23 (a)(3) typicality requirement directs that the class representative “possess the same interest and suffer the same injury as the classmembers,” and that the pertinent inquiry is “whether asufficient nexus exists between the claims of the namedrepresentatives and those of the class at large.”  Id. at *9-10.  The trialcourt further recognized that it was Plaintiff’s burden to prove that class certification wasappropriate and must do so by introducing affirmative evidence.  Agreeing with the trial court, the Georgia Supreme Court held that Plaintiff failed to fulfill this burden.

Second, the Georgia Supreme Court held that the trial court did not rely on incorrect facts in determining that typicality was lacking.  Pertinent to its assessment of typicality, the trial court found that the former employee who was responsible for the breach had access to information that had no relationship to her job duties, including patient files, many of which contained significant sensitive medical information.  Id. at *10-11.  The trial court also highlighted the undisputed fact that no diagnosis or treatment information related to Plaintiff was revealed.  Accordingly, the Georgia Supreme Court reasoned that the trial court properly concluded that Plaintiff’s claims “do not represent the claims of all of the proposed class members because some of [the patients had] clinical information revealed whereas [Plaintiff] has not” which “leads to factual and legal differences between the claims in the case.”  Id. at *13.

Finally, the Georgia Supreme Court noted that in reviewing the trial court’s findings with respect to typicality, the question before the Court of Appeals was whether the trial court’s analysis as to typicality fell “within the range of possible outcomes” permissible on abuse-of-discretion review “in which there could be room for reasonable and experienced minds to differ.”  Id. at *16 (citations omitted).  The Georgia Supreme Court held that, “because the trial court’s typicality determination was made in conformity with the governing legal principles, was not based on incorrect or irrelevant facts, and was within the reasonable range of possible outcomes, we cannot say that the trial court abused its discretion by finding a lack of typicality and denying [Plaintiff’s] motion for class certification on that basis.”  Id. at *16-17.  Accordingly, it held that the Court of Appeals erred in determining that the trial court wrongly failed to certify the class on the basis of typicality, and reversed the Court of Appeals’ decision. 

Implications For Businesses

For employers and consumer-facing businesses, data breach class action litigation is near or at the top of nearly every company’s “biggest risk” list.  When breaches do occur, there is a strong likelihood that a class action lawsuit will follow.

Fortunately, this decision provides a blueprint for one avenue to attack class certification — the element of typicality.  It is conceivable that many other data breach class action named plaintiffs, like Plaintiff here, will not have suffered the same harm as the putative class.  Accordingly, data breach class action defendants would be prudent to explore the potential factual differences between the named Plaintiff and the putative class to strengthen this defense.

Sixth Circuit Leaves Class Certification Order Intact In Securities Fraud Case And Denies Rule 23(f) Petition To Appeal

By Gerald L. Maatman, Jr., Jennifer A. Riley, and Kathryn Brown

Duane Morris Takeaways: On September 10 2024, in In Re Tivity Health Inc., et al., No. 23-0504 (6th Cir. Sept. 10, 2024), the U.S. Court of Appeals for the Sixth Circuit denied the defendants’ petition to appeal the U.S. District Court for the Middle District of Tennessee’s order granting class certification to plaintiffs in a securities fraud case. The ruling closes the door to an immediate appeal of the class certification ruling, leaving proceedings to continue in the district court. The decision is a must read for class action defendants seeking to overturn a district court’s Rule 23 class action certification ruling and exercising appellate options.

Case Background

In the underlying lawsuit, the plaintiff filed a lawsuit on behalf of a putative class of investors against Tivity Health and three individual defendants. The lawsuit asserted claims of violations of Sections 10(b) and 20(a) of the Securities and Exchange Act arising from disclosures the company made to investors about its acquisition of Nutrisystem, a prominent diet and nutrition company.

On June 7, 2022, the district court granted the motion of the lead plaintiff, Sheet Metal Workers Local No. 33, Cleveland District, Pension Fund, for Rule 23(a) class certification. The court certified a class of persons who purchased or otherwise acquired the common stock of Tivity Health between March 8, 2019 and February 19, 2020. The defendants filed a Rule 23(f) petition seeking permission to appeal the ruling. The Sixth Circuit granted the petition on November 21, 2022, concluding the district court had not undertaken a “rigorous” analysis of the Rule 23(a) factors. See In Re Tivity Health Inc., et al., No. 22-0502 (6th Cir. Nov. 21, 2022). The Sixth Circuit remanded the case to the district court.

Following remand, the district court again granted class certification pursuant to Rule 23(a). Thereafter, on June 22, 2023, the defendants filed a second Rule 23(f) petition, requesting permission to appeal the second class certification decision. The defendants primarily argued that the district court erroneously decided an open question of law about the scope of “scheme liability” under Section 10(b) of the Securities and Exchange Act.

On July 10, 2023, lead plaintiff Sheet Metal Workers Local No. 33 responded in opposition to the request. In the opposition, the plaintiff contended that the U.S. Supreme Court had ruled definitely on the “open” question in Lorenzo v. Sec. & Exch. Comm’n, 587 U.S. 71 (2019). In Lorenzo, the Supreme Court ruled that Section 10(b) of the Securities and Exchange Act encompassed a wide range of conduct, rejecting the argument that “scheme liability” was limited to deceptive acts. Consequently, the plaintiff argued there was no open question of law warranting interlocutory appeal of the district court’s (second) grant of class certification.

The Sixth Circuit’s Ruling

First, the Sixth Circuit articulated the Rule 23(f) standard for review of a petition to appeal immediately from an order granting or denying class certification. It explained the analysis under Rule 23(f) considers several factors, including: (1) the petitioner’s likelihood of success on the merits; (2) whether the certification decision turns on a novel or unsettled question of law; (3) whether the costs of continuing litigation may present such a barrier that later review is hampered; and (4) the posture of the case as it is pending before the district court.

In applying the Rule 23(f) standard, the Sixth Circuit addressed only the second factor. It roundly rejected the defendants’ argument that the district court’s ruling turned on a novel or unsettled question of law. The Sixth Circuit reasoned that the plaintiffs’ claim appeared to involve a “straightforward application” of the Supreme Court’s ruling on “scheme liability” in Lorenzo. The Sixth Circuit declined to address any of the other factors in the Rule 23(f) analysis.

Accordingly, finding no basis for interlocutory appeal, the Sixth Circuit entered a judgment denying the defendants’ petition for permission to challenge the grant of class certification at this stage of the litigation.

Implications For Class Action Defendants

As any corporation in a class action knows, a district court’s grant of class certification is among the most significant inflection points in the litigation. Rule 23(f) is a tool for litigants to challenge a class certification ruling at the earliest possible stage, before the parties spend years engaging in costly and needless litigation. Similar to the Supreme Court’s decision whether to grant a petition for certiorari, an appellate court has full discretion to grant or deny a Rule 23(f) petition. The Sixth Circuit’s ruling in In Re Tivity Health, Inc. illustrates the exceptionally high hurdle defendants face in overturning a district court’s grant of class certification.

© 2009-2025 Duane Morris LLP. Duane Morris is a registered service mark of Duane Morris LLP.

The opinions expressed on this blog are those of the author and are not to be construed as legal advice.

Proudly powered by WordPress