Finch v. Xandr, Inc.

CourtDistrict Court, S.D. New York
DecidedDecember 14, 2021
Docket1:21-cv-05964
StatusUnknown

This text of Finch v. Xandr, Inc. (Finch v. Xandr, Inc.) is published on Counsel Stack Legal Research, covering District Court, S.D. New York primary law. Counsel Stack provides free access to over 12 million legal documents including statutes, case law, regulations, and constitutions.

Bluebook
Finch v. Xandr, Inc., (S.D.N.Y. 2021).

Opinion

USDC SDNY UNITED STATES DISTRICT COURT DOCUMENT SOUTHERN DISTRICT OF NEW YORK ELECTRONICALLY FILE DOC #: DIANA FINCH, on behalf of herself DATE FILED: □□□□□□□□□□□ and all others similarly situated, 21 Civ. 5964 (VM) Plaintiff, DECISION AND ORDER - against - XANDR, INC., Defendant.

VICTOR MARRERO, United States District Judge. Plaintiff Diana Finch (“Finch”) brings this purported class action, on behalf of herself and all others similarly Situated, against defendant Xandr, Inc. (“Xandr”), alleging violations of the United Kingdom’s General Data Protection Regulation (“UK GDPR”). (See “Complaint,” Dkt. No. 1.) Now before the Court are Xandr’s letter motion seeking leave to file a motion to dismiss on the grounds of forum non conveniens and international comity (see “Letter Motion,” Dkt. No. 19) and Finch’s letter in opposition. (See “Opposition,” Dkt. No. 20.) The Court now denies Xandr’s motion for a conference, (see Dkt. No. 21), and deems Xandr’s Letter Motion aS a motion to dismiss the complaint due to

forum non conveniens and international comity.1 For the reasons discussed below, the motion to dismiss is granted. I. BACKGROUND A. BACKGROUND2 Xandr3 is a digital technology company that helps digital

publishing and advertising companies reach their target audiences through “the use and dissemination of personal data.” (Complaint ¶ 1.) Its business involves providing companies with the necessary technology for websites, apps, and other internet-connected platforms to show advertisements to its users. Relatedly, Xandr’s technology allows advertisers to show their ads to individuals who may be interested in their product — so-called “targeted ads.” Xandr’s product hinges on its creation and placement of unique

1 See Kapitalforeningen Lægernes Invest v. United Techs. Corp., 779 F. App’x 69, 70 (2d Cir. 2019) (affirming the district court ruling deeming an exchange of letters as a motion to dismiss).

2 These facts are drawn from the Complaint. Because the Court is reviewing a motion to dismiss on the grounds of forum non conveniens, the Court will accept the facts alleged in the complaint as true. See Aguas Lenders Recovery Grp. LLC v. Suez, S.A., 585 F.3d 696, 697 (2d Cir. 2009). Except where specifically quoted below, no further citation will be made to the Complaint or the documents discussed therein.

3 Xandr is a wholly owned subsidiary of AT&T, Inc. It is incorporated in Delaware, with its principal place of business in New York, New York. Finch is a citizen of, and domiciled in, the United Kingdom, and all putative class members are domiciled in the United Kingdom. While the Court has subject matter jurisdiction pursuant to the Class Action Fairness Act, 28 U.S.C. § 1332(d), it also has jurisdiction over these claims pursuant to 28 U.S.C. § 1332(a) because the requirements of complete diversity are satisfied. identifiers known as “cookies” on internet users’ devices.4 When a cookie is placed on a device, Xandr is able to read, collect, and share personal data about the user. Finch and other purported class members visited third- party websites that used Xandr technology. Upon their visit,

Xandr placed unique cookies on each user’s device, enabling it to track the user’s internet behavior across websites. The users have no direct interaction with Xandr, but Xandr is able to record information about their internet usage. Xandr collects a multitude of information including the user’s IP address, location information, browsing and search history, and whether a user has clicked on any targeted ads. This personal data is then shared with advertisers, who consider the data when bidding on potential ad space. The precise mechanics of the bid process are not relevant to the motion before the Court today, but Xandr has almost 2,000 third- party partners with which it shares users’ personal data and

over one-third of United Kingdom websites use Xandr’s identification and tracking services.

4 Xandr cookies are static text files stored in the user’s browser. The file itself does not create a legal injury, but the subsequent setting and reading of the file without user consent allegedly breaches the UK GDPR. Each cookie has a unique identification number (“the cookie ID”) that is created when Xandr places a cookie on a device. The cookie ID identifies the user and qualifies as personal data under the UK GDPR. The United Kingdom has taken steps to protect internet users’ personal data and privacy, most notably through the UK GDPR, which implemented the European Union’s General Data Protection Regulation (“EU GDPR”) within the United Kingdom. The UK GDPR is a complex, broad statute, but to put things

simply for the purposes of the dispute at hand, it applies to the automated processing of personal data of individuals in the United Kingdom. The law requires companies to gain user consent prior to processing any personal data from that user, which includes placing any sort of online identifier, such as cookies or a cookie ID, on a user’s device and collecting data. Consent must be freely given, specific, informed, and unambiguous. Users must also be notified of the purpose and basis for a cookie ID prior to the ID’s creation and placement on a user’s device. Finch alleges Xandr violates the UK GDPR in several ways, including in its process for setting cookie IDs, the

monitoring of data that follows, and its failure to obtain timely and informed user consent. Xandr does not dispute that it is subject to the UK GDPR or that cookie IDs are personal data under the UK GDPR. B. PROCEDURAL HISTORY The UK GDPR provides a private right of action for users who believe that their rights were infringed by improper processing of their personal data. While the EU GDPR requires complaints to be filed in a European court, the UK GDPR, which is “materially identical” to its counterpart in all other regards (Complaint ¶ 32), allows plaintiffs to file a complaint in any court, including those in the United States.

Finch filed this suit in the Southern District of New York on behalf of herself and “[a]ll persons residing or who resided in England and Wales who used Chrome, Edge, or Internet Explorer browsers and have had a Xandr cookie placed on their device [from May 25, 2018 through present].” (Complaint ¶ 238.) Xandr filed the Letter Motion expressing its intent to file a motion to dismiss due to forum non conveniens and international comity. Finch opposed the motion, in part because the terms of use on Xandr’s website (hereinafter, “the Terms of Use”) state that the user agrees “that any legal action or proceeding between Xandr and [the user] for any purpose concerning these Terms or the parties’

obligations hereunder shall be brought exclusively in a federal or state court of competent jurisdiction sitting in New York.” (Opposition at 1.) On November 29, 2021, the Court requested supplemental letter briefs from each party addressing the question of whether an enforceable forum-selection clause covered the claims at issue. (See Dkt. No. 23.) The parties responded on December 6, 2021. (See Dkt. Nos. 24, 26.) II. LEGAL STANDARD The doctrine of forum non conveniens allows a court to “resist imposition upon its jurisdiction even when

jurisdiction is authorized by the letter of a general venue statute.” Gulf Oil Corp. v. Gilbert, 330 U.S. 501, 507 (1947). The decision whether to grant a motion to dismiss on grounds of forum non conveniens rests “wholly within the broad discretion of the district court.” Iragorri v.

Free access — add to your briefcase to read the full text and ask questions with AI

Related

Gulf Oil Corp. v. Gilbert
330 U.S. 501 (Supreme Court, 1947)
Piper Aircraft Co. v. Reyno
454 U.S. 235 (Supreme Court, 1982)
Aguas Lenders Recovery Group LLC v. Suez, S.A.
585 F.3d 696 (Second Circuit, 2009)
Martinez v. Bloomberg LP
740 F.3d 211 (Second Circuit, 2014)
Alnwick v. European Micro Holdings, Inc.
29 F. App'x 781 (Second Circuit, 2002)
Fasano v. PEGGY YU YU
921 F.3d 333 (Second Circuit, 2019)

Cite This Page — Counsel Stack

Bluebook (online)
Finch v. Xandr, Inc., Counsel Stack Legal Research, https://law.counselstack.com/opinion/finch-v-xandr-inc-nysd-2021.