Robbins v. mscripts, LLC

District Court, N.D. California·Decided September 5, 2023·No. 3:23-cv-01381·Unknown

Opinion

San Francisco Division KENT ROBBINS, by and through Guardian Case No. 23-cv-01381-LB ad Litem SARAH ROBBINS, individually and on behalf of all others similarly situated ORDER GRANTING MOTION TO and the general public, COMPEL ARBITRATION Plaintiff, Re: ECF No. 26 v. MSCRIPTS, LLC, a Delaware Limited Liability Company, Defendant.

This is a putative class action against mscripts, Cardinal Health’s mobile-pharmacy vendor. Its platform allows patients to request prescription refills electronically and receive text-message updates about them. The plaintiff — claiming violations of California law — sued on behalf of a nationwide class and California and nationwide subclasses after a misconfiguration of mscripts’s cloud-storage environment resulted in the exposure of patient-health data from September 30, 2016, to November 18, 2022, when mscripts detected the issue.1 1 Compl. – ECF No. 1. Citations refer to material in the Electronic Case File (ECF); pinpoint citations Mscripts moved to compel arbitration on the ground that its terms of service, which patients agree to when they sign up, requires binding arbitration. Mscripts also contends that the terms require that the arbitrator decides questions of arbitrability.2 The court grants the motion. The plaintiff uses the Safeway Pharmacy in the Albertsons store in Tehachapi, California. Mscripts is the pharmacy’s vendor and thus had the plaintiff’s protected health information, including his name, date of birth, address, insurance, and prescription medications.3 On November 18, 2022, mscripts learned that its cloud storage was misconfigured and then determined that its system had not been protecting data securely since September 30, 2016. It notified the U.S. Department of Health and Human Services on January 17, 2023, began notifying patients on February 10, 2023, and notified the plaintiff on March 13, 2023.4 The complaint generally alleges a lack of appropriate security measures and a violation of patients’ protected privacy interests.5 There are four proposed classes: a nationwide class of persons in the United States with protected health information that was accessible on mscripts’s unsecured cloud storage, a similar California subclass, a nationwide subclass of persons who paid money to pharmacies that subcontracted with mscripts, and a similar California subclass.6 The plaintiff claims violations of California law: negligence, breach of contract, invasion of privacy, and violations of California’s Unfair Competition Law and Consumer Legal Remedies Act.7 He seeks declaratory relief under the federal Declaratory Judgment Act, injunctive relief, damages, fees, and costs.8

2 Mot. – ECF No. 26. 3 Compl. – ECF No. 1 at 5–6 (¶¶ 14–15). 4 Id. at 2–3 (¶¶ 1–4), 6 (¶ 16). 5 Id. at 9–22 (¶¶ 34–90). 6 Id. at 22–25 (¶¶ 91–104). 7 Id. at 28–59 (¶¶ 117–282). 8 Id. at 59–60 (Prayer for Relief). The motion turns in part on whether the plaintiff consented to mscripts’s terms of service. On April 11, 2018, the plaintiff signed up at the Albertsons Safeway Pharmacy counter to receive text updates through the mscripts service. According to mscripts’s Chief Technology Officer Steve Brickman, the plaintiff “would have been presented with mscripts’[s] Terms of Service at this time.” The platform then autogenerated a text message to the plaintiff’s phone number: Thank you KENT for signing up to Albertsons Rx alerts. Your account is active. 50msgs/mo. Msg&data rates may apply. Reply H for Help, STOP to cancel.9 The plaintiff never replied “STOP” to cancel text messaging.10 The mscripts terms of service had provisions about arbitration and the privacy policy at issue in the litigation. In an introductory paragraph, the terms state, in all capital letters: THIS AGREEMENT INCLUDES AN ARBITRATION CLAUSE, IN WHICH YOU AGREE THAT ANY DISPUTES WILL BE DECIDED BY AN ARBITRATOR WITHOUT A COURT OR JURY TRIAL.11 The introductory paragraph also says: The privacy policies that apply to your use of the Service are Your Pharmacy’s Notice of Privacy Practices, available here . . . and the mscripts Privacy Policy. Both policies are hereby incorporated into this Agreement.12 In a section titled “Arbitration” (in bold), there is an arbitration clause: Any disputes between you on the one hand, and mscripts, Your Pharmacy, and/or mscripts Related Parties on the other, arising out of or relating to this Agreement, including the breach, termination, enforcement, interpretation, or validity thereof, or your use of the Service, shall be settled by binding arbitration conducted by the American Arbitration Association pursuant to its Commercial Arbitration Rules and Supplemental Procedures for Consumer Related Disputes, except that any party retains the right to bring a claim in small claims court and retains the right to seek injunctive

Free access — add to your briefcase to read the full text and ask questions with AI

Robbins v. mscripts, LLC, (N.D. Cal. 2023).

Robbins v. mscripts, LLC (Robbins v. mscripts, LLC) — published by Counsel Stack Legal Research, free access to 12M+ legal documents.

Related

Carey Brennan v. Opus Bank
796 F.3d 1125 (Ninth Circuit, 2015)
Henry Schein, Inc. v. Archer & White Sales, Inc.
586 U.S. 63 (Supreme Court, 2019)
Bill Hansen v. Lmb Mortgage Services, Inc.
1 F.4th 667 (Ninth Circuit, 2021)
Cordas v. Uber Technologies, Inc.
228 F. Supp. 3d 985 (N.D. California, 2017)
Mohamed v. Uber Technologies, Inc.
848 F.3d 1201 (Ninth Circuit, 2016)
Mitch Oberstein v. Live Nation Ent'm't, Inc.
60 F.4th 505 (Ninth Circuit, 2023)