In re Facebook Biometric Information Privacy Litigation

Opinion

1 2 3 4 UNITED STATES DISTRICT COURT 5 NORTHERN DISTRICT OF CALIFORNIA 6 7 IN RE FACEBOOK BIOMETRIC Case No. 15-cv-03747-JD INFORMATION PRIVACY LITIGATION 8 ORDER GRANTING PRELIMINARY 9 APPROVAL OF CLASS ACTION SETTLEMENT 10 Re: Dkt. Nos. 445, 468 11

12 Plaintiffs Nimesh Patel, Adam Pezen and Carlo Licata brought this consolidated class 13 action lawsuit against defendant Facebook, Inc., for violations of the Illinois Biometric 14 Information Privacy Act (BIPA), 740 Ill. Comp. Stat. 14/1 et seq. (2008). On the eve of a trial 15 setting conference in February 2020, the parties reported that a settlement in principle had been 16 reached between the class and Facebook. After an extended hearing, the Court denied plaintiffs’ 17 initial motion for preliminary approval of the class action settlement over serious concerns about 18 the fairness of several terms to class members and the overall adequacy of proposed relief, 19 including the amount of damages to be paid to the victims of Facebook’s conduct. 20 The parties filed supplemental briefs renewing their preliminary approval request, and 21 negotiated revisions to the proposed settlement to address the Court’s concerns. The Court held 22 another hearing in July 2020, and took live testimony from Facebook’s Face Recognition Product 23 Manager on several issues related to the adequacy of the proposed notice to the class and the class 24 definition. The revised settlement agreement and additional information presented by the parties 25 have resolved the Court’s concerns. Consequently, preliminary approval of the class action 26 settlement is granted.

27 1 BACKGROUND 2 The consolidated complaint in this case alleges that Facebook violated Sections 15(a) and 3 15(b) of BIPA by collecting and storing the class members’ biometric data in the form of scans of 4 their faces without prior notice or consent. Dkt. No. 40. Facebook harvested the scans in 5 connection with its “Tag Suggestions” program, which looks for and identifies people’s faces in 6 photographs uploaded to Facebook to promote user tagging. Id. 7 The case was litigated fiercely for over five years, with no legal pebble left unturned. 8 Early on, Facebook sought to terminate the case on choice-of-law grounds, saying that California 9 and not Illinois law applied to the class’s claims. Dkt. No. 69. After an evidentiary hearing, the 10 Court determined that Illinois law applied and that plaintiffs had stated a claim under BIPA. Dkt. 11 No. 120. Facebook then sought to dismiss the case under Rule 12(b)(1) for lack of Article III 12 standing under Robins v. Spokeo, Inc., 867 F.3d 1108, 1112 (9th Cir. 2017). Dkt. No. 227. The 13 Court concluded that plaintiffs had alleged a concrete and actual injury in fact under BIPA that 14 was sufficient to confer standing. Dkt. No. 294. After that, the parties vigorously contested 15 plaintiffs’ motion to certify a class, which the Court resolved by granting certification. Dkt. No. 16 333. The Court then took up the parties’ cross-motions for summary judgment, which were 17 denied pursuant to the Court’s previous interpretations of BIPA and other points of Illinois law, 18 and the presence of multiple genuine disputes of material fact. Dkt. No. 372. After the Court 19 ordered pre-trial notice to the certified class, Dkt. No. 402, but before the notice had gone out, the 20 Ninth Circuit granted Facebook permission to appeal the class certification decision, and the 21 district court proceedings were stayed in the interim. Dkt. No. 406. In August 2019, the Ninth 22 Circuit published an opinion affirming the class certification order. Dkt. No. 416. While these 23 events were unfolding, the Illinois Supreme Court published a decision interpreting BIPA that 24 largely adopted the Court’s construction of the statute. See Rosenbach v. Six Flags Entm’t Corp., 25 129 N.E.3d 1197 (Ill. 2019). 26 Just as the case was about to be set for a jury trial, the parties advised the Court that a 27 settlement in principle had been reached. Dkt. No. 427. A motion for preliminary approval of 1 denied preliminary approval without prejudice for multiple reasons, including concerns about an 2 unduly steep discount on statutory damages under the BIPA, a conduct remedy that did not appear 3 to require any meaningful changes by Facebook, over-broad releases by the class, and the 4 sufficiency of notice to class members. Dkt. No. 456. The parties went back to negotiations, 5 which yielded a substantially revised proposed settlement agreement for which the parties now 6 request preliminary approval. Dkt. Nos. 462, 465, 468. The Court held another approval hearing 7 on July 23, 2020, which also featured live testimony by Gary McCoy, the current Product 8 Manager of Facebook’s Face Recognition product team. See Dkt. No. 470. 9 In addition to other changes in the revised agreement, Facebook will pay $650,000,000.00 10 (six hundred and fifty million dollars) into a non-reversionary cash fund. Dkt. No. 468, Ex. A at 9 11 (¶ 1.30). From this fund, settlement administration expenses, taxes, and any class representative 12 incentive awards and counsel fee awards will be paid, and then the balance will be distributed on a 13 pro rata basis to each class member who submits an approved claim. Id. at 10 (¶ 1.31). The $650 14 million amount is $100 million more than the $550 million Facebook had previously agreed to 15 pay. See Dkt. No. 445. 16 For a conduct remedy, Facebook has agreed to set the Face Recognition default user 17 setting to “off” and to delete all existing and stored face templates for class members unless 18 Facebook obtains a class member’s express consent after a separate disclosure about how 19 Facebook will use the face templates. Dkt. No. 468, Ex. A at 13 (¶ 2.9). Facebook has proposed 20 an exception to this for class members who signed up for Facebook after September 3, 2019, 21 because it has already implemented these practices for such newer users. Id. at 14 (¶ 2.9(b)); Dkt. 22 No. 470 at 9:20-10:4. It also proposes to except users who have manually enabled Face 23 Recognition for themselves, for obvious reasons. Dkt. No. 468, Ex. A at 14 (¶ 2.9(b)). Silence or 24 inaction by the user will be deemed a withholding of consent, and the Face Recognition function 25 will be set on “off,” and face templates deleted. Id. at 13 (¶ 2.9(a)). Facebook will also delete the 26 face templates of any class members who have had no activity on Facebook for three years. Id. at 27 14 (¶ 2.9(c)). 1 DISCUSSION 2 I. PRELIMINARY APPROVAL 3 Under Federal Rule of Civil Procedure 23(e), the claims of a certified class may be settled 4 only with the Court’s approval. Rule 23(e)(2) states that a settlement proposal that would bind 5 class members may be approved “only after a hearing and only on finding that it is fair, 6 reasonable, and adequate.” The Court is to consider whether “(A) the class representatives and 7 class counsel have adequately represented the class; (B) the proposal was negotiated at arm’s 8 length; (C) the relief provided for the class is adequate, taking into account: (i) the costs, risks, and 9 delay of trial and appeal; (ii) the effectiveness of any proposed method of distributing relief to the 10 class, including the method of processing class-member claims; (iii) the terms of any proposed 11 award of attorney’s fees, including timing of payment; and (iv) any agreement required to be 12 identified under Rule 23(e)(3); and (D) the proposal treats class members equitably relative to 13 each other.” Preliminary approval of a class settlement is appropriate when the proposed 14 settlement “appears to be the product of serious, informed, noncollusive negotiations,” “has no 15 obvious deficiencies,” “does not improperly grant preferential treatment to class representatives or 16 segments of the class,” and “falls with the range of possible approval.” Stokes v. Interline Brands, 17 Inc., No. 12-cv-05527-JD, 2014 WL 5826335, at *3 (N.D. Cal. Nov. 10, 2014) (citations omitted). 18 A. Class Definition, Representatives and Counsel 19 The Court certified a class of Facebook users located in Illinois for whom Facebook 20 created and stored a face template after June 7, 2011, Dkt. No. 333, and the class definition is the 21 same for purposes of settlement. Dkt. No. 468, Ex. A at 5-6 (¶ 1.7). The parties have in effect 22 withdrawn some proposed modifications to the definition that gave the Court pause. Nothing has 23 changed to require the Court to revisit the Rule 23 analysis in the class certification order, and the 24 same is true of the adequacy of the class representatives and class counsel. Consequently, the 25 Court approves the class definition in the settlement agreement, and the appointment of Nimesh 26 Patel, Adam Pezen and Carlo Licata as class representatives, and Edelson PC, Robbins Geller 27 Rudman & Dowd LLP, and Labaton Sucharow LLP as class counsel. The proposed exclusion of 1 persons from the settlement class including judicial staff and other potentially interested persons is 2 approved. Id. 3 B. Arm’s Length Negotiations 4 The Court is satisfied that the proposed settlement was the product of serious, informed 5 and noncollusive negotiations. This was the parties’ third round of mediation, after working with 6 a retired judge and a magistrate judge. This round was facilitated by former United States 7 Ambassador Jeffrey L. Bleich, and involved considerable time and effort by the mediator and the 8 parties, as evidenced by the parties’ multiple filings since the settlement in principle was first 9 reported. The Court also notes that the settlement agreement does not contain a “clear sailing” 10 provision, leaving Facebook free to oppose any attorney’s fees request class counsel makes. 11 C. Sufficiency of Relief to the Class 12 With the substantive revisions made by the parties, the Court finds on a preliminary basis 13 that the settlement agreement appears to be fair, reasonable and adequate for the class. Facebook 14 has increased the settlement fund by $100 million, which substantially allays the Court’s concern 15 about the potential inadequacy of payments to class members in light of BIPA’s statutory 16 penalties. The $650 million that will be awarded to the Illinois class is an impressive result both 17 as an absolute number and relative to other class action settlements in privacy cases. This is all 18 the more true in light of the risks for plaintiffs in going to trial. As the Court has noted, if the case 19 were to proceed to trial, it would be “entirely possible that Facebook will prevail and that plaintiffs 20 will take nothing, or win a damages award far smaller than Facebook fears.” Dkt. No. 404 at 3. In 21 the filings in support of settlement approval, the parties cogently discussed specific disputes of 22 fact, for example the location of Facebook’s servers vis-à-vis its Illinois users, the jury’s resolution 23 of which was uncertain and could have had far-reaching impacts on Facebook’s liability under an 24 Illinois statute. There also remained a dispute of fact about whether Facebook’s facial recognition 25 technology collects a “scan of face geometry” as required under BIPA, and whether Facebook had 26 a good-faith reason for acting as it did with respect to Illinois users. Given these and other risks at 27 trial, the sizeable amount of money to be paid to the class is more than sufficiently fair, reasonable 1 The Court is also satisfied at this stage with the prospective relief offered by the 2 settlement. At the hearing on July 23, 2020, Product Manager McCoy explained why the new 3 relief agreed to in the settlement is not redundant of measures already required of Facebook under 4 the consent decree entered into with the Federal Trade Commission in July 2019. Dkt. No. 470 at 5 6:18-9:16. He explained that a “large majority” of Illinois users would be newly covered, and that 6 because of this settlement agreement, the facial recognition setting will be changed to an “opt-in” 7 basis globally. Id. These are meaningful conduct remedies that will confer a benefit to the class. 8 D. Scope of Release and Opt-Out Period 9 The parties have addressed the Court’s concern that the scope of the initial release could be 10 read to release BIPA and related privacy claims against Facebook’s affiliated companies that had 11 nothing to do with this case. Dkt. No. 456. The definition of “released parties” has been revised 12 to expressly exclude “any entities . . . that did not use the Tag Suggestions feature such as 13 Instagram, Inc., WhatsApp Inc., and Oculus VR Inc.” Dkt. No. 468, Ex. A at 8 (¶ 1.26). This 14 change removes this issue as a hurdle to preliminary approval. 15 The Court was also concerned about the original opt-out period of less than 60 days, which 16 was too short. That too has been appropriately revised in the amended settlement. See id. (¶ 1.22) 17 (objection/exclusion deadline to be set “no later than sixty (60) calendar days after the Notice 18 Date”). 19 E. Notice and Claim Form Issues 20 The issues with the proposed claim form and notices to the class have also been remedied. 21 The notice to the class that was previously ordered (but never executed in light of the circuit 22 proceedings) directed jewel notifications, notice via Facebook users’ newsfeed channel, direct 23 email notice, and a web page dedicated to the lawsuit. Dkt. No. 402. The settlement agreement 24 requires those forms of notice and more. See Dkt. No. 468, Ex. A at 15 (¶ 4.2) (requiring email 25 notice, jewel and news feed notice, publication notice, settlement website, targeted internet ad 26 campaign and CAFA notice). The Court approves the language and proposed forms of notice and 27 claim form attached as Exhibits A to H to the settlement agreement; together they constitute the 1 As discussed at the July 2020 hearing, the ultimate goal is to achieve a high claims rate and 2 payout to class members based on effective notice. This settlement is a golden opportunity to 3 establish best practices for online notice. The case raises an issue of digital privacy, the alleged 4 violations happened online, and the class is composed entirely of online users. It is safe to say that 5 if any defendant can provide notice likely to reach online users, it is Facebook. These are ideal 6 circumstances for determining how best to advise class members of the pendency of the litigation 7 and their rights to monetary and conduct relief. To that end, the Court directs the parties to file a 8 report every 14 days on the progress made in providing notice through the channels approved 9 above. The parties should be prepared to propose improvements in the delivery of notice based on 10 the data as it is collected. Status conferences will be set as needed. 11 II. SCHEDULE AND NEXT STEPS FOR FINAL APPROVAL 12 The Court sets the following schedule: 13 Event Deadline / Date Facebook to provide Class Notice List to Settlement September 2, 2020 14 Administrator 15 Notice Date September 23, 2020 Last day class counsel to file motion for attorney’s fees October 15, 2020 16 and costs, and any incentive awards for class representatives 17 Claims Deadline November 23, 2020 18 Objection / Exclusion Deadline November 23, 2020 19 Last day to file motion for final approval of class December 3, 2020 settlement 20 Final Approval Hearing January 7, 2021, at 10:00 a.m. 21 Gilardi & Co. LLC is appointed as the settlement administrator, and the American Civil 22 Liberties Union of Illinois is preliminarily approved as the potential cy pres recipient. The parties 23 are authorized to agree to and adopt further settlement-implementing measures so long as they are 24 consistent in all material respects with the terms of the settlement agreement and do not limit or 25 impair the rights of the class. The issues of any incentive awards to the named class 26 representatives and any fees and costs to class counsel are reserved for the final approval hearing. 27 1 CONCLUSION 2 Preliminary approval of the amended stipulation of class action settlement, Dkt. No. 468, is 3 || granted, and a final approval hearing is set for January 7, 2021. The parties are directed to follow 4 || the schedule set out above and all other terms of their settlement agreement. 5 IT IS SO ORDERED. 6 || Dated: August 19, 2020 7 8 JAMES JPONATO 9 United Ptates District Judge 10 11 a 12

© 15 16

it

4 18 19 20 21 22 23 24 25 26 27 28