Salazar v. National Basketball Association

CourtDistrict Court, S.D. New York
DecidedAugust 7, 2023
Docket1:22-cv-07935
StatusUnknown

This text of Salazar v. National Basketball Association (Salazar v. National Basketball Association) is published on Counsel Stack Legal Research, covering District Court, S.D. New York primary law. Counsel Stack provides free access to over 12 million legal documents including statutes, case law, regulations, and constitutions.

Bluebook
Salazar v. National Basketball Association, (S.D.N.Y. 2023).

Opinion

UNITED STATES DISTRICT COURT SOUTHERN DISTRICT OF NEW YORK

MICHAEL SALAZAR, Plaintiff, -against- No. 1: 22-cv-07935 (JLR) NATIONAL BASKETBALL OPINION AND ORDER ASSOCIATION, Defendant.

JENNIFER L. ROCHON, United States District Judge: Plaintiff Michael Salazar (“Plaintiff”) brings this putative class action alleging that Defendant National Basketball Association (“Defendant” or the “NBA”) violated the Video Privacy Protection Act (“VPPA”), 18 U.S.C. § 2710. See generally ECF No. 1 (“Compl.”). Plaintiff contends that he has digitally subscribed to NBA.com since 2022 and has had a Facebook account since about 2010. Id. ¶ 12. In this lawsuit, Plaintiff brings one claim alleging that his personal viewing information from the NBA.com site (along with his Facebook ID, which he alleges is personally identifiable information) was disclosed to third party Facebook without his knowledge or consent in violation of the VPPA. Id. at ¶¶ 12, 49, 66. Plaintiff brings this action individually and on behalf of hundreds of thousands of similarly situated individuals throughout the country. Id. ¶ 52. Defendant moves to dismiss the Complaint in its entirety arguing that Plaintiff does not have standing, the Complaint fails to state a claim, and Plaintiff expressly waived his right to bring a class action. See generally, ECF No. 20 (“Mot.”); ECF No. 21 (“Br.”). For the reasons stated below, Defendant’s motion to dismiss for lack of standing under Federal Rule of Civil Procedure (“Rule”) 12(b)(1) is DENIED, but its motion to dismiss for failure to state a claim under Rule 12(b)(6) is GRANTED. BACKGROUND1 I. Factual Background The NBA’s Website and App Defendant NBA is a major American sports league headquartered in New York, New York. Compl. ¶ 13. The NBA maintains a website called NBA.com that has approximately 14.5

million unique monthly visitors. Id. ¶¶ 13, 21. On NBA.com, viewers can watch video content under a section of the website fittingly titled, “Videos.” Id. ¶ 13. The NBA also has a phone application (“App”) that is downloadable on Android and iPhone devices. Id. ¶ 21. An individual may register on NBA.com by signing up for an online newsletter. Id. ¶ 20. To sign up, an individual provides personal information, including an email address. Id. When individuals sign up for this digital subscription, they provide the NBA with their IP address, which is an individualized number assigned to “all information technology connected devices.” Id. ¶ 22. The IP address provides the NBA with the user’s city, zip code, and physical location. Id.

The NBA’s Data Policies NBA.com has a Privacy Policy that states the website collects “Personal Information” from users. Id. ¶ 27. The relevant part of the policy lists the types of data collected as follows: This data will vary, but typically consists of name, email address, postal address, phone number and other similar contact data. We also receive data from the communications you send to us, such as customer service inquiries, product reviews and other feedback regarding the Services.

1 Unless otherwise noted, the facts stated herein are taken from the Complaint, which the Court accepts as true, and material referenced in the Complaint. See In re Amaranth Nat. Gas Commodities Litig., 730 F.3d 170, 176 (2d Cir. 2013). User credentials, such as username, password, password hints and similar security information used to create an account and authenticate users of the Services.

Demographic data, such as age, gender, country and language preference.

Payment data, such as credit card information and billing address.

Device data, such as type of device, operating system and other software installed on the device, device settings, IP address, device identifiers and error reports.

Usage data, such as the programs and features you access, items you purchase, and the timing, frequency and duration of your interactions through the Services.

Location data, such as IP addresses received from your device.

Information about your interests and preferences, such as your favorite teams and players, your home city or your communications preferences. In addition to what you provide directly, we may infer your interests and preferences from other data we collect, such as the content and advertisements you interact with while using the Services. Id. Plaintiff alleges that when an individual creates an account with NBA.com, Defendant does not disclose in the Privacy Policy (or Terms of Service) that it will share personal data with third parties, nor are parties asked to consent to this practice. Id. ¶¶ 24, 26, 29. Defendant’s Data Collection and Disclosure Plaintiff alleges that Defendant collects and shares data and personal information of its users with third parties through cookies, software development kits (“SDKs”), and tracking pixels. Id. ¶ 3. Specifically here, Plaintiff claims that the NBA installed Facebook’s tracking pixel on NBA.com. Id. ¶ 32. Therefore, when a digital subscriber uses NBA.com and watches videos, “the website sends to Facebook certain information about the viewer, including, but not limited to, their identity and the media content the digital subscriber watched.” Id. This Personal Viewing Information (“PVI”) is comprised of two sources of data: (1) personally identifiable information including a Facebook ID (“FID”); and (2) “Video Media” meaning “the computer file containing video and its corresponding URL viewed.” Id. at p. 1. An FID is “a unique and persistent identifier that Facebook assigns to each user.” Id. ¶ 33. Using an FID, anyone can locate a user’s Facebook profile and name. Id. ¶¶ 33-34. NBA.com, “through its website code, causes the digital subscriber’s identity and viewed Video Media to be transmitted

to Facebook by the user’s browser.” Id. ¶ 33. Facebook, in turn, uses the data to show the user targeted ads. Id. ¶ 30. Defendant purposefully used Facebook’s pixel code on NBA.com and the App, knew that PVI would be disclosed to Facebook, and financially benefited from it. Id. ¶¶ 33, 35. Plaintiff alleges that the pixel “enabled NBA.com and accompanying app to show targeted advertising to its digital subscribers based on the products those digital subscriber’s [sic] had previously viewed on the website or app, including Video Media consumption for which Defendant received financial remuneration.” Id. ¶ 35. The PVI is not anonymized and therefore Facebook can either add the data to the information it already has for specific users or use the data to

generate new user profiles. Id. ¶ 38. Plaintiff’s Use of NBA.com Plaintiff, a resident of California, signed up for a digital subscription to NBA.com in 2022. Id. ¶¶ 12, 46. To become a digital subscriber, Plaintiff provided NBA.com with his email address, his IP address, and cookies associated with his device. Id. ¶ 46. As a digital subscriber, Plaintiff receives emails and other communications from NBA.com. Id. Plaintiff also currently uses a Facebook account that he has had since 2010. Id. ¶¶ 12, 47. Since 2022, Plaintiff has watched videos “through NBA.com and/or the App” while logged into his Facebook account. Id. By doing so, Plaintiff alleges that his PVI was disclosed to Facebook through the aforementioned process. Id. ¶¶ 12, 48. Plaintiff contends that he “never consented, agreed, authorized, or otherwise permitted Defendant to disclose his Personal Viewing Information to Facebook.” Id. ¶ 48. Plaintiff alleges he was never provided written notice that his PVI would be disclosed, nor did Plaintiff receive any written notice that he could opt out of the disclosure of his PVI. Id. “Plaintiff did not discover that Defendant disclosed his [PVI] to Facebook until

Free access — add to your briefcase to read the full text and ask questions with AI

Related

McCarthy v. Dun & Bradstreet Corp.
482 F.3d 184 (Second Circuit, 2007)
Warth v. Seldin
422 U.S. 490 (Supreme Court, 1975)
Lujan v. Defenders of Wildlife
504 U.S. 555 (Supreme Court, 1992)
Bell Atlantic Corp. v. Twombly
550 U.S. 544 (Supreme Court, 2007)
Ashcroft v. Iqbal
556 U.S. 662 (Supreme Court, 2009)
DiFolco v. MSNBC Cable L.L.C.
622 F.3d 104 (Second Circuit, 2010)
Newman & Schwartz v. Asplundh Tree Expert Co., Inc.
102 F.3d 660 (Second Circuit, 1996)
Natalia Makarova v. United States
201 F.3d 110 (Second Circuit, 2000)
Mahon v. Ticor Title Insurance Company
683 F.3d 59 (Second Circuit, 2012)
Clapper v. Amnesty International USA
133 S. Ct. 1138 (Supreme Court, 2013)
Federal Housing Finance Agency v. UBS Americas Inc.
712 F.3d 136 (Second Circuit, 2013)
Shomo v. City of New York
579 F.3d 176 (Second Circuit, 2009)
Rapoport v. Asia Electronics Holding Co., Inc.
88 F. Supp. 2d 179 (S.D. New York, 2000)
Meghan Mollett v. Netflix, Inc.
795 F.3d 1062 (Ninth Circuit, 2015)
Mark Ellis v. The Cartoon Network, Inc.
803 F.3d 1251 (Eleventh Circuit, 2015)
Carter v. HealthPort Technologies, LLC
822 F.3d 47 (Second Circuit, 2016)
Spokeo, Inc. v. Robins
578 U.S. 330 (Supreme Court, 2016)
In Re Nickelodeon Consumer Privacy Litigation
827 F.3d 262 (Third Circuit, 2016)
Lynch v. City of New York
952 F.3d 67 (Second Circuit, 2020)
SM Kids, LLC v. Google LLC
963 F.3d 206 (Second Circuit, 2020)

Cite This Page — Counsel Stack

Bluebook (online)
Salazar v. National Basketball Association, Counsel Stack Legal Research, https://law.counselstack.com/opinion/salazar-v-national-basketball-association-nysd-2023.