Sulejman Nicaj v. Shoe Carnival Incorporated

768 F.3d 622, 2014 U.S. App. LEXIS 18181
CourtCourt of Appeals for the Seventh Circuit
DecidedSeptember 19, 2014
Docket14-1470, 14-1471, 14-1658, 14-1320
StatusPublished
Cited by104 cases

This text of 768 F.3d 622 (Sulejman Nicaj v. Shoe Carnival Incorporated) is published on Counsel Stack Legal Research, covering Court of Appeals for the Seventh Circuit primary law. Counsel Stack provides free access to over 12 million legal documents including statutes, case law, regulations, and constitutions.

Bluebook
Sulejman Nicaj v. Shoe Carnival Incorporated, 768 F.3d 622, 2014 U.S. App. LEXIS 18181 (7th Cir. 2014).

Opinion

POSNER, Circuit Judge.

We have consolidated for decision appeals in two class actions filed under the Fair and Accurate Credit Transactions Act (“FACTA”), 15 U.S.C. § 1681c(g). The Act provides, so far as relates to these cases, that “no person that accepts credit cards or debit cards for the transaction of business shall print [electronically, as distinct from by handwriting or by an imprint or copy of the card] more than the last 5 digits of the card number or the expiration date upon any receipt provided to the cardholder at the point of the sale or transaction.” §§ 1681c(g)(l), (2) (emphasis added). The present cases concern the expiration date. The idea behind requiring its deletion is that, should the cardholder happen to lose the receipt of a transaction, the less information the receipt contains the less likely is an identity thief who happens to come upon the receipt to be able to figure out the cardholder’s full account information and thus be able to make purchases that the seller will think were made by the legitimate cardholder.

A typical credit card has 16 digits and an expiration date that is the last day of a designated month and year. Even if the identity thief has all 16 digits, without the expiration date he may be unable to use the card. He can of course guess at the expiration date — the date is unlikely to be more than a few years in the future and there are only 12 months in a year; so if he guesses 60 times he’s very likely to hit the jackpot. But if he guesses wrong the first few times that he places an order, the card issuer may well get suspicious and refuse to authorize his next order. See, e.g., D. Lee, “Nine Reasons Your Credit Card Was Declined,” Fox Business, May 21, 2013, www.foxbusiness.com/personalfínance/2013/05/21/nine-reasons-yourcredit-card-was-declined/ (visited Sept. 12, 2014, as were the other websites cited in this opinion). It’s common in telephone and internet transactions for the consumer to be asked for an expiration date, and most systems will not allow the would-be customer to keep guessing at the date, as the guessing suggests that he may be an identity thief.

Additional reasons for requiring deletion of the expiration date include that “expiration dates combined with the last four or five digits of an account number can be used to bolster the credibility of a criminal who is making pretext calls to a card holder in order to learn other personal confidential financial information. Expiration dates are solicited by criminals in many email phishing scams ..., are one of the personal confidential financial information items trafficked in by criminals ..., are described by Visa as a special security *627 feature ..., [and] are one of the items contained in the magnetic stripe of a credit card, so it is useful to a criminal when creating a phony duplicate card.” Don Coker, “Credit Card Expiration Dates and FACTA,” HGExperts.com, www. hgexperts.com/article.asp?id=6665.

If a violation of the statute is willful, a consumer whose receipt contains as a result of the violation data that should have been deleted, but who sustains no harm because no one stole his identity as a result of the violation, is nevertheless entitled to “statutory damages,” as distinct from compensatory or punitive damages, of between $100 and $1000. 15 U.S.C. § 1681n(a)(l)(A). (Statutory damages are in effect bounties — means of inducing private persons to enforce a regulatory law.) In contrast, a consumer harmed by the violation of the statute can obtain actual damages by showing that the violation was the result of negligence, § 1681o; he need not prove willfulness.

To act “willfully” is, for purposes of civil law, to engage in conduct that creates “an unjustifiably high risk of harm that is either known or so obvious that it should be known,” Farmer v. Brennan, 511 U.S. 825, 836, 114 S.Ct. 1970, 128 L.Ed.2d 811 (1994)-reckless conduct, in other words, as held in Safeco Ins. Co. of America v. Burr, 551 U.S. 47, 56-60, 127 S.Ct. 2201, 167 L.Ed.2d 1045 (2007), but reckless conduct in the civil sense. Criminal recklessness is generally held to require “knowledge of a serious risk to another person, coupled with failure to avert the risk though it could easily have been averted,” Slade v. Board of School Directors, 702 F.3d 1027, 1029 (7th Cir.2012); see also Black’s Law Dictionary 1298-99 (Bryan A. Garner ed., 8th ed.2004), “whereas in civil cases at common law it is enough that the risk, besides being serious and eminently avoidable, is obvious; it need not be known to the defendant.” Slade v. Board of School Directors, supra, 702 F.3d at 1029.

The known or obvious risk in this case would be failing to delete the expiration date on the consumer’s credit-card or debit-card purchase receipt, whereas to be guilty merely of negligence it would be enough that a reasonable person would have deleted it. See Wassell v. Adams, 865 F.2d 849, 855 (7th Cir.1989).

Willfulness is an issue in both our cases. But it is a peripheral issue in the RadioShack case, while it is the primary issue in our other case, the Shoe Carnival case. Although both are class action suits, the district court in Shoe Carnival dismissed the suit with prejudice before certifying a class; there are no issues in that case concerning class action procedure. (The defendant could have sought class certification in order to prevent future similar suits by other class members, but did not.) RadioShack, in contrast, is centrally about class action procedure. The parties settled and the district court approved the settlement, and the appeal is by class members who objected to the approval. We begin with that case but defer discussion of the willfulness issue in it to later, when we take up the appeal in Shoe Carnival.

RadioShack Corporation is a large, well-known retail purveyor mainly of consumer electronics, cell phones, and related consumer products such as batteries, see “RadioShack,” Wikipedia, http://en.wikipedia. org/wiki/RadioShaek, sold mainly in RadioShack’s thousands of stores rather than online. The class action suit was filed on behalf of consumers who bought products at RadioShack stores, paid with credit or debit cards, and received electronically printed receipts that contained the card’s expiration date. The suit was filed in September 2011. In May 2013, before any *628 substantive motions had been decided, the named plaintiffs (realistically, class counsel) agreed with RadioShack on terms of settlement. The essential term was that each class member who responded positively to the notice of the proposed settlement would receive a $10 coupon that it could use at any RadioShack store.

Free access — add to your briefcase to read the full text and ask questions with AI

Related

Cite This Page — Counsel Stack

Bluebook (online)
768 F.3d 622, 2014 U.S. App. LEXIS 18181, Counsel Stack Legal Research, https://law.counselstack.com/opinion/sulejman-nicaj-v-shoe-carnival-incorporated-ca7-2014.