Christine Bryant v. Compass Group U.S.A., Inc.

958 F.3d 617
Court of Appeals for the Seventh Circuit·Decided May 5, 2020·No. 20-1443·Published·Cited by 107 cases

Opinion

In the

United States Court of Appeals For the Seventh Circuit ____________________ No. 20-1443 CHRISTINE BRYANT, Plaintiff-Appellee, v.

COMPASS GROUP USA, INC., Defendant-Appellant. ____________________

Appeal from the United States District Court for the Northern District of Illinois, Eastern Division. No. 19 C 6622 — Virginia M. Kendall, Judge. ____________________

ARGUED APRIL 24, 2020 — DECIDED MAY 5, 2020 ____________________

Before WOOD, Chief Judge, and RIPPLE and ROVNER, Circuit Judges. WOOD, Chief Judge. Section 15(b) of Illinois’s Biometric In- formation Privacy Act (BIPA), 740 ILCS 14 (2008), regulates the collection, use, and retention of a person’s biometric iden- tifiers or information. It requires collectors of this material to obtain the written informed consent of any person whose data is acquired. This regime is designed to protect consumers against the threat of irreparable privacy harms, identity theft, 2 No. 20-1443

and other economic injuries arising from the increasing use of biometric identifiers and information by private entities. As a matter of state law, anyone “aggrieved” by a violation of the disclosure and informed consent obligations is entitled to bring a private action against the alleged offender. The ques- tion now before us is whether, for federal-court purposes, such a person has suffered the kind of injury-in-fact that sup- ports Article III standing. We conclude that a failure to follow section 15(b) of the law leads to an invasion of personal rights that is both concrete and particularized. See Spokeo, Inc. v. Rob- ins, 136 S. Ct. 1540 (2016). We therefore reverse the district court’s order remanding this case to state court and remand for further proceedings. I The underlying facts of the case are straightforward. Christine Bryant worked for a call center in Illinois. As a con- venience for its employees, the center had a workplace cafe- teria, in which it had installed Smart Market vending ma- chines owned and operated by Compass Group USA, Inc. The machines did not accept cash; instead, a user had to establish an account using her fingerprint. Accordingly, during her ori- entation Bryant and her coworkers were instructed by their employer to scan their fingerprints into the Smart Market sys- tem and establish a payment link to create user accounts. Once their accounts were active, employees could purchase items and add money to their balance using just their finger- prints. Their fingerprints are “biometric identifiers” within the meaning of the Act. 740 ILCS 14/10. In violation of section 15(a) of BIPA, id. § 15(a), Compass never made publicly available a retention schedule and No. 20-1443 3

guidelines for permanently destroying the biometric identifi- ers and information it was collecting and storing. In addition, in violation of section 15(b), Compass never: (1) informed Bry- ant in writing that her biometric identifier (fingerprint) was being collected or stored, (2) informed Bryant in writing of the specific purpose and length of term for which her fingerprint was being collected, stored, and used, or (3) obtained Bryant’s written release to collect, store, and use her fingerprint. Id. § 15(b). Bryant does not assert that she did not know that her fin- gerprint was being collected and stored, nor why this was happening. She voluntarily created a user account for the Smart Market vending machines and regularly made use of the fingerprint scanner to purchase items from the machines. She contends simply that Compass’s failure to make the req- uisite disclosures denied her the ability to give informed writ- ten consent as required by section 15(b). Compass’s failure to comply with the Act resulted, both for her and others simi- larly situated, in the loss of the right to control their biometric identifiers and information. Seeking redress for that invasion of her personal data, on August 13, 2019, Bryant brought a putative class action against Compass in the Circuit Court of Cook County, pursu- ant to BIPA’s provision providing a private right of action in state court to persons “aggrieved” by a violation of the stat- ute. See 740 ILCS 14/20; Rosenbach v. Six Flags Entm’t Corp., 432 Ill. Dec. 654 (Ill. 2019). Bryant seeks to represent a class of Illi- nois citizens who used Compass’s Smart Market biometric- enabled vending machines after August 2014. She alleges that Compass violated her and class members’ statutory rights un- der BIPA when it collected users’ fingerprints without first 4 No. 20-1443

making the required written disclosures about use and reten- tion and without written authorization. See 740 ILCS 14/15(a)–(b). For purposes of the standing issue before us, we accept Bryant’s allegations as true. Compass removed the action to federal court under the Class Action Fairness Act (CAFA), 28 U.S.C. § 1332(d), on the basis of diversity of citizenship and an amount in controversy exceeding $5 million. Compass is incorporated in Delaware and has its principal place of business in North Carolina; Bry- ant is a citizen of Illinois. This is enough to assure the minimal diversity required by CAFA. The requisite amount in contro- versy is also secure: claims of individual class members are aggregated for purposes of CAFA, see 28 U.S.C. § 1332(d)(6), and here, BIPA authorizes statutory damages of $5,000 for each intentional or reckless violation. 740 ILCS 14/20(1)–(2). Compass asserts, and Bryant does not contest, that the alleged class has at least 1,000 members. Bryant moved to remand the action to the state court, claiming that the district court did not have subject-matter ju- risdiction because she lacked the concrete injury-in-fact nec- essary to satisfy the federal requirement for Article III stand- ing. (State law apparently poses no such problem, we note, as the Illinois Supreme Court pointed out in Rosenbach.) The district court found that Compass’s alleged violations of sections 15(a) and (b) were bare procedural violations that caused no concrete harm to Bryant; accordingly, it remanded the action to the state court. Compass petitioned this court for permission to appeal the remand order under 28 U.S.C. § 1453(c); on March 13, 2020, we accepted the appeal. No. 20-1443 5

II A As the party invoking federal jurisdiction, Compass bears the burden of establishing Bryant’s Article III standing. See Collier v. SP Plus Corp., 889 F.3d 894, 896 (7th Cir. 2018) (per curiam). This fact has occasioned a role reversal in the argu- ments we normally see in these cases, with the defendant in- sisting that Article III standing is solid, and the plaintiff cast- ing doubt on it. For Bryant to have Article III standing, three requirements must be satisfied: (1) she must have suffered an actual or im- minent, concrete and particularized injury-in-fact; (2) there must be a causal connection between her injury and the con- duct complained of; and (3) there must be a likelihood that this injury will be redressed by a favorable decision. Lujan v. Defs. of Wildlife, 504 U.S. 555, 560–61 (1992).

Free access — add to your briefcase to read the full text and ask questions with AI

Christine Bryant v. Compass Group U.S.A., Inc., 958 F.3d 617 (7th Cir. 2020).

958 F.3d 617 (Christine Bryant v. Compass Group U.S.A., Inc.) — published by Counsel Stack Legal Research, free access to 12M+ legal documents.

Related

Clayton Zellmer v. Meta Platforms, Inc.
104 F.4th 1117 (Ninth Circuit, 2024)
Petta v. Christie Business Holding Co.
2023 IL App (5th) 220742 (Appellate Court of Illinois, 2023)
Mary Nabozny v. Optio Solutions LLC
84 F.4th 731 (Seventh Circuit, 2023)
Ji v. Naver Corporation
N.D. California, 2023
J.C. v. Google, LLC
C.D. Illinois, 2023
Zellmer v. Facebook, Inc.
N.D. California, 2022
Kim v. McDonald's USA, LLC
N.D. Illinois, 2022
Horn v. Method Products, PBC
N.D. Illinois, 2022
Garner v. Buzz Finco LLC
N.D. Illinois, 2022
Woods v. Fleetpride, Inc.
N.D. Illinois, 2022