CONSUMER DATA INDUSTRY ASS'N v. King

678 F.3d 898, 2012 WL 1573563, 2012 U.S. App. LEXIS 9250
CourtCourt of Appeals for the Tenth Circuit
DecidedMay 7, 2012
Docket11-2085
StatusPublished
Cited by32 cases

This text of 678 F.3d 898 (CONSUMER DATA INDUSTRY ASS'N v. King) is published on Counsel Stack Legal Research, covering Court of Appeals for the Tenth Circuit primary law. Counsel Stack provides free access to over 12 million legal documents including statutes, case law, regulations, and constitutions.

Bluebook
CONSUMER DATA INDUSTRY ASS'N v. King, 678 F.3d 898, 2012 WL 1573563, 2012 U.S. App. LEXIS 9250 (10th Cir. 2012).

Opinion

O’BRIEN, Circuit Judge.

I. INTRODUCTION

New Mexico enacted a law making it easier for victims of identity theft to expunge negative information from them credit reports. Before the law took effect, the Consumer Data Industry Association (“CDIA”), a trade group comprised of hundreds of consumer-data companies, brought a pre-enforcement challenge contending the law is preempted by the federal Fair Credit Reporting Act (“FCRA”). The CDIA sought declaratory and injunctive relief against the New Mexico Attorney General, who, along with aggrieved consumers, has authority to enforce the law through civil suit. Concluding equitable relief against the Attorney General would not adequately redress CDIA’s injuries, the district court dismissed the case as non-justiciable. We vacate the district court’s judgment and remand for further proceedings.

II. BACKGROUND

Congress enacted the FCRA in 1970 with the aim of protecting the banking system from inaccuracy and abuse in credit reporting. The FCRA creates a uniform set of rules governing the content of consumer reports and the responsibilities of those who maintain them. 15 U.S.C. § 1681 et seq. Together with the Fair Debt Collection Practices Act, the FCRA is the source of most consumer credit rights in the United States.

Congress amended the FCRA in 2003 to add safeguards for victims of identity theft. See Fair and Accurate Credit Transactions Act, Pub.L. No. 108-159, 117 Stat.1952 (2003). Under the amendments, consumer reporting agencies (“CRAs”) must, upon a good-faith request from a consumer, include a fraud alert in the con *901 sumer’s file limiting the extent to which creditors can extend credit to an applicant using the consumer’s name without first verifying the applicant’s identity. 15 U.S.C. § 1681c-l(a) & (h). They must also block the reporting of any information identified by the consumer as resulting from identify theft. Id. § 1681c-2. The block must generally take effect upon proof of the consumer’s identity and receipt of an identity-theft report, but, as a concession to the consumer-data industry, Congress allowed CRAs to override the block if they reasonably determine it was requested in error or on the basis of a misrepresentation. Id. § 1681c-2(c).

The FCRA leaves no room for overlapping state regulations. Congress set out to create uniform, national standards in the area of credit reporting, and the FCRA expressly preempts any state requirement or prohibition relating to, among other things, matters regulated under § 1681i (concerning the time by which CRAs must take certain actions) and § 1681c (concerning the content of consumer reports and a CRA’s duties in addressing reports of identity theft). Id. §§ 1681t(b)(l)(B) & (E), 1681t(b)(5)(C).

In 2010, the New Mexico legislature enacted its own identity-theft requirements for CRAs operating in state. See Fair Credit Reporting and Identity Security Act (“FCRISA”), N.M. Stat. Ann. § 56-3A-1. The law contains several apparent conflicts with the FCRA, but most notable for the purposes of this appeal are sections 56-3A-3.KD) & (E), which govern CRAs’ required response when presented with requests to remove information resulting from identity theft. Federal law permits a CRA to decline such a request if it reasonably determines the request to be fraudulent or erroneous, 15 U.S.C. § 1681c-2(c). New Mexico law, on the other hand, requires a CRA to oblige the request until a court or the affected consumer says otherwise. N.M. Stat. Ann. § 56-3A-3.1(D) & (E). New Mexico’s block-first-ask-later rule is therefore in tension with one of the key legislative compromises of the FCRA — the requirement that CRAs be given an opportunity to investigate suspicious block requests before acceding to them.

If a CRA violates the FCRISA, both the affected consumer and the Attorney General have the right to bring a civil action against the CRA. Id. § 56-3A-5. Relief can take the form of an injunction to prevent further violations, actual damages sustained by the consumer, and civil penalties. Id.

CDIA brought this suit in federal court for declaratory and injunctive relief. It contends certain provisions of the FCRISA are preempted by the FCRA and must give way to federal law under the Supremacy Clause. Asserting associational standing on behalf of some two-hundred-plus members, CDIA contends the preempted law places consumer data companies in an unenviable double-bind: submit to the preempted law and endure the costs of modifying otherwise uniform procedures, or violate the law and face the likelihood of lawsuits and penalties. CDIA obtained' a temporary restraining order (TRO) enjoining New Mexico from enforcing sections 56-3A-3.KD) & (E). The TRO had a nine-month shelf life during which CRAs had no obligation to comply with the challenged provisions or defend suits alleging violations.

Several months later, following briefing from both sides, the district court dissolved the TRO and dismissed the case, asserting the CDIA had failed to prove redressability, an element of constitutional standing. It reasoned that enjoining the Attorney General from enforcing the New Mexico law would redress only part of *902 CDIA’s injury; CDIA members would still be exposed to consumer-driven suits, and therefore would still face the dilemma of either paying the costs of complying with the New Mexico law or exposing themselves to liability for violating it. Relying on our decision in Nova Health Sys. v. Gandy, 416 F.3d 1149 (10th Cir.2005), the court concluded that neither an injunction nor a declaratory judgment against the Attorney General would “materially reduce the coercive effect of’ the FCRISA, because in either case consumers could still bring private lawsuits in state court.

III. DISCUSSION

A. Whether CDIA has standing to seek injunctive relief against the Attorney General

There are three components to Article III standing — injury, causality, and redressability — and each must be established before a federal court can review the merits of a case. Summers v. Earth Island Inst., 555 U.S. 488, 492-93, 129 S.Ct. 1142, 173 L.Ed.2d 1 (2009). Although CDIA had not yet been injured when it filed suit, the existence of a statute implies the threat of its enforcement, and the association was entitled to bring a preenforcement challenge based on the probability of future injury. See Shaw v. Delta Air Lines, Inc., 463 U.S. 85, 96 n. 14, 103 S.Ct. 2890, 77 L.Ed.2d 490 (1983); Abbott Labs. v. Gardner, 387 U.S. 136

Free access — add to your briefcase to read the full text and ask questions with AI

Related

United States v. Iski
E.D. Oklahoma, 2025
We the Patriots v. Grisham
119 F.4th 1253 (Tenth Circuit, 2024)
Free Speech Coalition v. Anderson
119 F.4th 732 (Tenth Circuit, 2024)
Baker v. Watson
D. Kansas, 2024
Cole v. Crow
W.D. Oklahoma, 2021
Baker v. USD 229 Blue Valley
979 F.3d 866 (Tenth Circuit, 2020)
Weingarten v. Devos
District of Columbia, 2020
Renewable Fuels Association v. EPA
948 F.3d 1206 (Tenth Circuit, 2020)
W. Watersheds Project v. Christiansen
348 F. Supp. 3d 1204 (D. Wyoming, 2018)
Knight First Amendment Inst. At Columbia Univ. v. Trump
302 F. Supp. 3d 541 (S.D. Illinois, 2018)
South Carolina v. United States
221 F. Supp. 3d 684 (D. South Carolina, 2016)
Shaw v. Patton
823 F.3d 556 (Tenth Circuit, 2016)
Planned Parenthood Gulf Coast, Inc. v. Kliebert
141 F. Supp. 3d 604 (M.D. Louisiana, 2015)

Cite This Page — Counsel Stack

Bluebook (online)
678 F.3d 898, 2012 WL 1573563, 2012 U.S. App. LEXIS 9250, Counsel Stack Legal Research, https://law.counselstack.com/opinion/consumer-data-industry-assn-v-king-ca10-2012.