1 2 3 UNITED STATES DISTRICT COURT 4 NORTHERN DISTRICT OF CALIFORNIA
6 WHATSAPP INC., et al., 7 Case No. 19-cv-07123-PJH Plaintiffs, 8 v. FINAL PRETRIAL ORDER 9 NSO GROUP TECHNOLOGIES Re: Dkt. 488, 491, 505, 506, 509, 510, 10 LIMITED, et al., 512, 514, 573, 593, 601 11 Defendants. 12
13 14 Pursuant to Rule 16(e) of the Federal Rules of Civil Procedure, this final pretrial 15 order is hereby entered and shall control the course of the trial unless modified by a 16 subsequent order. 17 I. MOTIONS IN LIMINE 18 A. Plaintiffs’ Motion in Limine No. 1 19 Plaintiffs’ first motion in limine asks the court to preclude defendants from offering 20 “evidence, testimony, or argument about the alleged identities or affiliations of its 21 customers or prospective customers, including governments or law enforcement, military, 22 or intelligence agencies.” See Dkt. 593 at 6. 23 As an initial matter, such evidence is irrelevant to the issue of compensatory 24 damages. The alleged identities of defendants’ customers has no bearing on the costs 25 incurred by plaintiffs in responding to the conduct at issue. 26 To the extent that the alleged identities of defendants’ customers are relevant to 27 punitive damages, the court first emphasizes that the punitive damages analysis does not 1 the conduct which gave rise to liability in the case.” See Livingston v. ABB, Inc., 100 2 F.Supp.3d 894, 904 (C.D. Cal. 2015) (citing Medo v. Superior Court, 205 Cal.App.3d 64, 3 68 (1988)). In other words, the punitive damages analysis looks to defendants’ intent 4 with respect to the conduct alleged in this case. 5 At the pretrial conference, defendants’ counsel maintained that defendants are 6 “unable to turn over” much of the evidence regarding which client(s) conducted the 7 specific intrusions at issue in this case because they are “not items that we have 8 possession of or ever did.” See Dkt. 684 at 49. In other words, defendants’ counsel 9 argues that they have not refused to produce the discovery, they argue that they are 10 unable to produce the discovery because it is not in their possession. 11 Over the course of the pretrial conference, defendants’ counsel maintained that 12 defendants do not have information about which of their client(s) were responsible for 13 accessing the 1400 target devices at issue in this suit, or the client’s reason(s) for the 14 access. See Dkt. 684 at 41 (“We would not know who are the specific customers who 15 are targeting those 1400.”); id. at 65 (“what I think you're looking for is do you -- do you 16 have evidence about what your customers did with the -- with your system and who they 17 investigated and where those people are and what numbers of the target devices were 18 being used, and so on. And the answer to that remains, as I've said earlier, Your Honor, 19 that that is not information that NSO ever had.”). 20 Defendants’ counsel reiterated that they do not have specific information about the 21 attacks at issue in this case: 22 To the extent that that was requested in discovery and ordered by the Court, we provided whatever we had. We do not have discovery about who 23 our clients target, what their criminal investigations are. As you would expect, we don't know what client X is investigating. It would be totally 24 inappropriate for a software provider to be exposed to what criminal investigations or what counterterrorism investigations are being conducted 25 by a foreign nation state. They wouldn't want us to know that and we 26 wouldn't want to know that. 27 See Dkt. 684 at 66-67. 1 defendants did have information that was not produced, any non-production was due to 2 national security reasons. See Dkt. 684 at 15-16 (“generally speaking what the 3 customers, you know, the details of their operations, to the extent it's known to NSO, 4 Your Honor is correct that that has not -- that is not a subject that the witnesses were 5 allowed to testify about or that we were allowed to produce evidence of for national 6 security reasons.”) 7 Defendants also point out, correctly, that the court previously concluded that they 8 “need not disclose the identities of their third-party clients.” See Dkt. 292 at 5. However, 9 the court simultaneously concluded that, while “plaintiffs need not discover the specific 10 identities of the third parties, they were “permitted to discover information about what 11 actions were taken by those third parties,” because “defendants have raised the actions 12 of those third-party clients as a defense.” See id. (emphasis in original). 13 Regardless of the reason, the fact remains that plaintiffs have not had a 14 meaningful opportunity to review evidence regarding which of defendants’ clients were 15 responsible for the alleged attacks. Defendants argue that plaintiffs’ own documents 16 identify “at least four countries as NSO customers,” but it does not appear that 17 defendants have confirmed that those countries are indeed their customers, nor – more 18 importantly – have defendants confirmed that any of those countries were responsible for 19 the attacks alleged in this suit. Defendants rely on generalized evidence about their 20 business practices, stating that they have a practice of licensing Pegasus only for lawful 21 purposes and terminating the license of any client found to be misusing Pegasus, but 22 there is an absence of specific evidence tying those general business practices to the 23 specific events of this case. 24 The end-result of all of this discussion is that neither party has non-speculative 25 evidence about the identities of which NSO customers were responsible for the attacks 26 alleged in this case. As a result, it would be improper for the court to allow evidence of 27 NSO’s other customers and their supposed intent, entirely unrelated to the events of this 1 provide relevant discovery, the pretrial conference clarified defendants’ position that they 2 are not in possession of the discovery at issue in this motion in limine, as can be seen in 3 the transcript quotations above. Accordingly, any ruling by the court is based purely on 4 the absence of evidence, not on alleged discovery misconduct. 5 Defendants cite a number of cases broadly allowing intent-related evidence for 6 reasons of “background” or “context.” But the reasoning of those cases cannot be 7 directly applied here, because those cases did not involve the same sort of discovery 8 limitations due to the necessity of applying the Richmark analysis. See Richmark Corp. 9 v. Timber Falling Consultants, 959 F.2d 1468 (9th Cir. 1992). The Richmark court noted 10 that “we are not unmindful of the difficulties foreign corporations face in doing business in 11 the United States, nor of the rather delicate nature of relations between sovereign states,” 12 but that “international business requires the accommodation of different legal climates.” 13 Id. at 1478-79. The Ninth Circuit made clear that, “just as United States companies doing 14 business in” a foreign country must expect to abide by that country’s laws, when a foreign 15 company “availed itself of business opportunities in this country, it undertook an 16 obligation to comply with the lawful orders of United States courts.” Id. at 1479. 17 Like the Richmark court, this court does “not minimize the difficult situation in 18 which” defendants have been placed due to their competing legal obligations, but the fact 19 remains that, in this case, plaintiffs have not had a full opportunity to test and scrutinize 20 evidence regarding which of defendants’ clients were responsible, or the actions taken or 21 motivations for the attacks at issue, thus distinguishing this case from more-typical 22 punitive damages cases in which discovery is unfettered by Richmark considerations. 23 Importantly, even if the evidentiary record did establish which of defendants’ 24 client(s) were responsible for the attacks at issue, defendants would not be permitted to 25 impute the law enforcement/military purposes of those clients to defendants themselves.1 26 1 Because defendants argue that both the identity of their clients, as well as their clients’ 27 purposes, are relevant to the punitive damages analysis, the court discusses them both 1 While it may be true that the clients’ intent was “solely” investigatory, NSO is a for-profit 2 company and thus does not have congruent intent with a government client. 3 Moreover, it would be inconsistent to allow defendants to argue that it has the 4 exact same purpose as its clients while simultaneously arguing that defendants have 5 nothing to do with the decision of who to target and no control over when and where 6 Pegasus is used. Defendants cannot claim, on the one hand, that its intent is to help its 7 clients fight terrorism and child exploitation, and on the other hand say that it has nothing 8 to do with what its client does with the technology, other than advice and support. 9 Additionally, there is no evidence as to the specific kinds of crimes or security threats that 10 its clients actually investigate and none with respect to the attacks at issue. 11 There are also references in the record to uses of Pegasus that do not meet 12 defendants’ proffered description of how it is used (such as the cited media report 13 regarding Dubai), and plaintiffs’ evidence suggests that members of ‘civil society’ have 14 been a target of Pegasus hacks. While defendants admit there are abuses and misuses 15 and have a protocol for investigating them, they were unable to provide a coherent 16 explanation for how they are able to detect misuses if they don’t monitor the use of 17 Pegasus or know when it is being used. 18 Finally, just as defendants seek to exclude evidence of their alleged conduct 19 unrelated to this lawsuit in connection with their sixth motion in limine, the court believes 20 that the principle must be consistently applied. Defendants argue that NSO’s alleged 21 conduct towards non-parties, such as the late Jamal Khashoggi, is “irrelevant to 22 damages” as well as “inadmissible under Rule 403 because the risk of unfair prejudice 23 and confusion of the issues would substantially outweigh even if there were any 24 negligible probative value,” as they “could serve only to inflame the passions of the jury 25 and unfairly prejudice it.” See Dkt. 596-3 at 21. The court finds this reasoning 26 convincing, and concludes that it operates to bar not only allegations regarding NSO’s 27 conduct as to Jamal Khashoggi, but also NSO’s conduct as to other parties unrelated to 1 regarding the alleged ‘civil society’ status of its hacked users, the proper balance under 2 Federal Rule of Evidence 403 favors excluding such evidence/argument from both sides. 3 At the hearing, the court discussed the difficulty in line-drawing, allowing 4 defendants to describe their business on one hand, without delving into the insufficiently- 5 supported evidence regarding any law enforcement purposes. Plaintiffs’ counsel offered 6 a suggestion that defendants could say that they license their products to foreign 7 governments, among others, without starting down the slippery slope of arguing that 8 every target of Pegasus must be a criminal. While the court will still need to address 9 objections to specific evidence as they arise, the court for now adopts plaintiffs’ counsel’s 10 suggestion and will allow defendants to argue that they licensed Pegasus to governments 11 and their agencies, but will not allow them to argue about those governments’ purported 12 motives related to crime, terrorism, child exploitation, or similar topics. Depending on the 13 evidence, testimony, and argument presented, the court may also require that a jury 14 instruction be given on this topic. Accordingly, with the above caveat, plaintiffs’ first 15 motion in limine is GRANTED. 16 B. Plaintiffs’ Motion in Limine No. 2 17 Plaintiffs’ second motion in limine seeks to preclude defendants from offering 18 “evidence, testimony, or argument that Pegasus is used, can be used, or is needed to 19 investigate crime, including child sex exploitation and terrorism, including because of 20 end-to-end encryption.” See Dkt. 593 at 9. 21 The court resolves this motion in largely the same way that it resolved plaintiffs’ 22 first motion in limine. Discovery showing that the specific intrusions on plaintiffs’ systems 23 were the result of an investigation into criminal activity or terrorism is not in the 24 evidentiary record, and thus, such testimony may not presented at trial. Plaintiffs’ second 25 motion in limine is GRANTED. 26 C. Plaintiffs’ Motion in Limine No. 3 27 Plaintiffs’ third motion in limine seeks to preclude defendants from offering 1 customers and regulate its existing customers’ use of its spyware.” See Dkt. 593 at 11. 2 Again, the limited nature of the discovery in this case requires that this motion be 3 granted. As discussed above, in connection with plaintiffs’ first motion in limine, the 4 evidentiary record is opaque as to which of defendants’ clients were responsible for the 5 attacks at issue, and thus plaintiffs were unable to discover evidence about whether 6 screening procedures were followed with respect to those clients. Moreover, to the 7 extent that the parties discuss facts regarding clients who were found to have misused 8 Pegasus, those facts appear to have come from media reports, rather than from 9 defendants. 10 Accordingly, in the absence of specific evidence of instances where screening 11 procedures were not effective, the court concludes that it would be improper to allow 12 generalized evidence of screening procedures that may or may not have relevance to the 13 conduct alleged in this case. Accordingly, plaintiffs’ third motion in limine is GRANTED. 14 D. Plaintiffs’ Motion in Limine No. 4 15 Plaintiffs’ fourth motion in limine seeks to preclude defendants from presenting any 16 “evidence, testimony, or argument suggesting it lacked control over its customers’ use of 17 Pegasus.” See Dkt. 593 at 13. 18 The court views this issue as similar to the one presented by plaintiffs’ third motion 19 in limine. Because there is an absence of evidence as to which of defendants’ client(s) 20 were responsible for the attacks at issue, there is no way to establish defendants’ relative 21 level of control as to those specific client(s). In other words, as before, defendants 22 attempt to rely on generalized evidence about their business practices, without any 23 specific evidence tying those business practices to the facts of this case. Accordingly, 24 plaintiffs’ fourth motion in limine is GRANTED. 25 E. Plaintiffs’ Motion in Limine No. 5 26 Plaintiffs’ fifth motion in limine seeks to preclude defendants from offering 27 “evidence, testimony, or argument about the alleged insufficiency of Whatsapp’s security 1 See Dkt. 593 at 14. 2 In essence, to the extent defendants intend to offer such evidence, it would be an 3 attempt to re-litigate the issue of causation that was already determined in the court’s 4 order granting summary judgment. Thus, plaintiffs’ fifth motion in limine is GRANTED. 5 Defendants of course remain able to argue that the costs incurred by plaintiffs were 6 unreasonable, as they argue in their response to plaintiffs’ motion. 7 F. Plaintiffs’ Motion in Limine No. 6 8 Plaintiffs’ sixth motion in limine seeks to preclude “evidence, testimony, or 9 argument about the alleged use of Whatsapp by terrorists, criminals, or other bad actors, 10 including characterizing the Whatsapp users who were targeted in NSO’s attacks as 11 actual or suspected bad actors.” See Dkt. 593 at 15. 12 The court resolves this motion in the same way that it resolved plaintiffs’ first and 13 second motions in limine. In the absence of evidence showing that the specific intrusions 14 on plaintiffs’ systems were the result of actual investigations into terrorist or criminal 15 activity, any such arguments or testimony may not be presented at trial. Plaintiffs’ sixth 16 motion in limine is GRANTED. 17 G. Plaintiffs’ Motion in Limine No. 7 18 Plaintiffs’ seventh motion in limine seeks to preclude “evidence, testimony, or 19 argument about plaintiffs’ reputation, including references to irrelevant disputes, legal 20 allegations, and controversies involving plaintiffs or their officers.” See Dkt. 593 at 18. 21 As discussed at the pretrial conference, as reputational damages are not at issue 22 in this case, neither party will be permitted to introduce evidence, testimony, or argument 23 regarding plaintiffs’ reputation or any harm to it. Accordingly, plaintiffs’ seventh motion in 24 limine is GRANTED, and as will be discussed below, defendants’ first motion in limine is 25 granted for the same reason. 26 H. Plaintiffs’ Motion in Limine No. 8 27 Plaintiffs’ eighth motion in limine seeks to preclude testimony from defendants’ 1 policy matters, lack any evidentiary foundation, and are more prejudicial than probative.” 2 See Dkt. 593 at 19. Plaintiffs also seek to exclude much of the testimony of defendants’ 3 expert McGraw based on the same rationale. 4 Plaintiffs acknowledge that they seek the same relief here that they seek via their 5 Daubert motions, and the court will address all expert testimony together, in section II of 6 this order. Thus, plaintiffs’ eighth motion in limine is DENIED as moot. 7 I. Defendants’ Motion in Limine No. 1 8 Defendants’ first motion in limine seeks to exclude “evidence of purported injury to 9 Whatsapp’s reputation.” See Dkt. 601 at 9. 10 As discussed above, in connection with plaintiffs’ seventh motion in limine, 11 defendants’ first motion in limine is GRANTED. 12 J. Defendants’ Motion in Limine No. 2 13 Defendants’ second motion in limine seeks to exclude “testimony of witnesses not 14 disclosed during discovery period.” See Dkt. 601 at 11. 15 Plaintiffs’ response states that they do not intend to call any witnesses that were 16 not identified on initial disclosures or made available for deposition, and thus, defendants’ 17 second motion in limine is GRANTED, and the court will not permit any undisclosed 18 witnesses to testify. 19 K. Defendants’ Motion in Limine No. 3 20 Defendants’ third motion in limine seeks to exclude “evidence of the identities and 21 occupations of ~1,400 targets referenced in complaint.” See Dkt. 601 at 13. 22 Plaintiffs’ response argues that they do not intend to introduce such evidence as 23 part of their case, but would want to respond if defendants were to put on evidence of 24 Whatsapp’s users being criminals or terrorists. As discussed above, defendants will not 25 be permitted to introduce such evidence, and thus plaintiffs will not need to use evidence 26 regarding the targets’ identities in response. Accordingly, defendants’ third motion in 27 limine is GRANTED. 1 L. Defendants’ Motion in Limine No. 4 2 Defendants’ fourth motion in limine seeks to exclude the “argument that NSO 3 ‘used’ Pegasus.” See Dkt. 601 at 15. 4 The court attempted to gain additional clarity on the intended scope of this motion 5 from the parties at the pretrial conference, with mixed results. In connection with 6 summary judgment, the court has already determined that defendants are liable for the 7 attacks at issue in this case and will not allow testimony that contradicts that 8 determination. Thus, defendants’ fourth motion in limine is DENIED as moot. 9 M. Defendants’ Motion in Limine No. 5 10 Defendants’ fifth motion in limine seeks to exclude “testimony on topics about 11 which plaintiffs refused to produce a Rule 30(b)(6) witness.” See Dkt. 601 at 16. 12 Specifically, defendants seek to exclude testimony on these topics: (1) defendants’ 13 actions constituting malice, oppression, or fraud, (2) plaintiffs’ cooperation with law 14 enforcement and efforts to address whether WhatsApp hampers efforts to stop crime, 15 terrorism, and child exploitation imagery, and (3) damages theories other than the actions 16 plaintiffs took and the time plaintiffs’ employees spent responding to NSO's exploit in May 17 2019.” 18 Starting with topic (2), in light of the court’s ruling excluding defendants’ evidence 19 that Pegasus was used to combat crime, terrorism, and child exploitation, the court does 20 not see how evidence of plaintiffs’ cooperation would be relevant to any claim or defense 21 in the action. Thus, as to (2), defendants’ fifth motion in limine is DENIED as moot. 22 As to topic (1), plaintiffs are not required to designate a witness to lay out their 23 legal theories of punitive damages. To the extent that plaintiffs attempt to show malice, 24 oppression, or fraud using documents or witnesses that were not produced in discovery, 25 those documents or witnesses will be excluded, but the court finds no basis for excluding 26 all testimony on the topic as a whole, especially since the relevant inquiry looks to 27 defendants’ conduct, and thus the relevant discovery would seem to be in defendants’ 1 As to topic (3), again, to the extent that plaintiffs attempt to establish damages 2 using documents or witnesses that were not produced in discovery, those documents or 3 witnesses will be excluded, but the court finds no basis for a broader exclusion based on 4 the argument that plaintiffs did not designate a witness to outline their legal theories. 5 Thus, as to (3), defendants’ fifth motion in limine is DENIED. 6 N. Defendants’ Motion in Limine No. 6 7 Defendants’ sixth motion in limine seeks to exclude “evidence about other lawsuits 8 against NSO and the use of Pegasus being related to the death of Jamal Khashoggi.” 9 See Dkt. 601 at 20. 10 Plaintiffs do not oppose defendants’ sixth motion in limine, and thus, it is 11 GRANTED. 12 O. Defendants’ Motion in Limine No. 7 13 Defendants’ seventh motion in limine seeks to exclude “evidence of Israeli national 14 security proceedings and related information.” See Dkt. 601 at 22. 15 Plaintiffs’ response states that they “do not intend to affirmatively offer” such 16 evidence, but may do so to “impeach the credibility of NSO’s witnesses and to rebut 17 NSO’s presentation of evidence.” See Dkt. 644-3 at 15. 18 The court does not see a scenario where plaintiffs would need to present such 19 evidence, and thus GRANTS defendants’ seventh motion in limine. 20 P. Defendants’ Motion in Limine No. 8 21 Defendants’ eighth motion in limine seeks to exclude “evidence of ‘Black Cube’ 22 and its purported ‘intimidation.’” See Dkt. 601 at 25. 23 Plaintiffs state that they do not intend to introduce evidence of Black Cube, and 24 thus, defendants’ eighth motion in limine is GRANTED. 25 Q. Defendants’ Motion in Limine No. 9 26 Defendants’ ninth motion in limine seeks to exclude “evidence of the Entity List 27 and President Biden’s executive order.” See Dkt. 601 at 26. 1 defendants are precluded from offering evidence about the purported benefit to law 2 enforcement. In light of the court’s earlier rulings on defendants’ evidence, the court sees 3 no need for plaintiffs to introduce the evidence challenged here, and thus, defendants’ 4 ninth motion in limine is GRANTED. 5 R. Defendants’ Motion in Limine No. 10 6 Defendants’ tenth motion in limine seeks to exclude “evidence of pretrial 7 sanctions.” See Dkt. 601 at 28. 8 Plaintiffs argue that the jury needs to be instructed on pretrial sanctions to ensure 9 that defendants do not benefit from their refusal to meaningfully participate in discovery. 10 However, given that the jury is considering only issues of damages – not liability – the 11 court sees no need for the jury to be instructed on defendants’ discovery conduct. 12 Instead, the appropriate remedy is exclusion of any unproduced evidence. Accordingly, 13 defendants’ tenth motion in limine is GRANTED. 14 15 II. EXPERT TESTIMONY 16 The parties have filed a total of nine motions related to expert testimony, seven of 17 which are motions to exclude under Federal Rule of Evidence 702 and Daubert v. Merrell 18 Dow, and two of which are motions to strike supplemental expert reports as untimely 19 under Federal Rule of Civil Procedure 26. The court will start with the Daubert motions. 20 Federal Rule of Evidence 702 permits experts qualified by “knowledge, 21 experience, skill, expertise, training, or education” to testify “in the form of an opinion or 22 otherwise” based on “scientific, technical, or other specialized knowledge” if that 23 knowledge will “assist the trier of fact to understand the evidence or to determine a fact in 24 issue.” Fed. R. Evid. 702. 25 The proponent of expert testimony bears the burden of establishing by a 26 preponderance of the evidence that the admissibility requirements are met. See Fed. R. 27 Evid. 702, Advisory Committee Notes. Although there is a presumption of admissibility, 1 to act as a “gatekeeper” with regard to the admission of expert scientific testimony under 2 Rule 702. Id. at 597. 3 Daubert requires a two-part analysis. First, the court must determine whether an 4 expert’s testimony reflects “scientific knowledge,” whether the findings are “derived by the 5 scientific method,” and whether the work product is “good science”—in other words, 6 whether the testimony is reliable and trustworthy. Id. at 590 & n.9, 593. Second, the 7 court must determine whether the testimony is “relevant to the task at hand.” Id. at 597. 8 As a threshold matter, many of the Daubert motions relate to experts whose 9 testimony is relevant only to liability issues, not to damages issues. Specifically, the court 10 refers to these motions: (1) plaintiffs’ motion to exclude the testimony of Ty Shepard (Dkt. 11 505), who offers testimony on “the use of encrypted messaging applications by threat 12 actors, the utility of tools like NSO’s Pegasus for the United States and its allies to 13 counter such threats, related military and intelligence practices, and the market for 14 cybersurveillance tools” (see Dkt. 617 at 6); (2) plaintiffs’ motion to exclude the testimony 15 of Terrance McGraw (Dkt. 514), who offers testimony on the “lawful intercept” industry 16 and the extent to which any harm suffered by plaintiffs was not caused by defendants; (3) 17 plaintiffs’ motion to exclude the testimony of Joshua Minkler (Dkt. 573), who opines that 18 “tools such as Pegasus benefit law enforcement by filling a rapidly increasing gap in law 19 enforcement’s ability to intercept the communications of criminals using end-to-end 20 encrypted services such as WhatsApp” (see Dkt. 613 at 7); (4) defendants’ motion to 21 exclude the testimony of Anthony Vance (Dkt. 509), who offers technical testimony about 22 the steps taken by defendants to access plaintiffs’ servers and plaintiffs’ steps to 23 circumvent access, as well as policy-related testimony about end-to-end encryption; and 24 (5) defendants’ motion to exclude the testimony of David Youssef (Dkt. 512), who offers 25 technical testimony on the capabilities of defendants’ software and defendants’ efforts to 26 deliver malware to plaintiffs’ users. 27 As discussed at length at the pretrial conference, the court finds that the testimony 1 reliant on the type of generalized testimony regarding law enforcement, military, and 2 intelligence purposes that are not sufficiently tethered to the conduct alleged in this case. 3 Accordingly, plaintiffs’ motions to exclude the testimony of Shepard, McGraw, and 4 Minkler are GRANTED, as their testimony is not relevant to the issues to be considered 5 at trial and thus not “relevant to the task at hand.” 6 Regarding plaintiffs’ experts, plaintiffs argue that Youssef and Vance’s testimony is 7 relevant to punitive damages. However, as defendants argue, plaintiffs previously 8 opposed a request for additional time for defendants to depose Youssef, arguing that it 9 was “likely moot” in light of the summary judgment order resolving all liability issues. 10 While plaintiffs maintained that they “cannot agree to forgo calling Youssef under any 11 circumstances, including, for example, if NSO is permitted to call its technical expert,” the 12 court’s order made clear that it “cannot envision a circumstance in which either party will 13 be permitted to put on testimony from their technical experts,” and denied defendants’ 14 request as moot. See Dkt. 498 at 5, Dkt. 519 at 3. Defendants argue that principles of 15 judicial estoppel require that Youssef’s testimony be excluded, as the court relied on 16 plaintiffs’ representation regarding the non-presentation of Youssef’s testimony, his 17 testimony will not be permitted at trial. Accordingly, defendants’ motion to exclude 18 Youssef’s testimony is GRANTED. 19 As to Vance, aside from rebutting testimony of defendants’ experts, he offers 20 testimony only as to the narrow issue of defendants’ circumvention of plaintiffs’ security 21 measures, which is more appropriately presented by a fact witness. Because 22 defendants’ policy-related experts will not be permitted to testify, Vance will not need to 23 rebut their testimony, and thus, defendants’ motion to exclude Vance’s testimony is 24 GRANTED. 25 That leaves two Daubert motions remaining: (1) plaintiffs’ motion to exclude the 26 testimony of defendants’ damages expert Gregory Pinsonneault (Dkt. 510), and (2) 27 defendants’ motion to exclude the testimony of plaintiffs’ damages expert Dana Trexler 1 damages report of the opposing party’s expert. See Dkt. 488, 491. 2 The court starts with defendants’ motion to exclude the testimony of plaintiffs’ 3 damages expert Dana Trexler. Defendants seek to exclude opinions (1) related to costs 4 incurred by 14 employees who Trexler did not interview, (2) including stock grants as part 5 of labor costs, and (3) related to disgorgement. 6 As to (3), plaintiffs have confirmed that they are no longer seeking damages based 7 on disgorgement. Thus, the court believes dispute (3) to be moot. Plaintiffs’ counsel 8 stated that they still intend to “put into the record evidence regarding NSO's finances and 9 the enormous revenues that they obtained from the product and the unlawful conduct,” 10 (see Dkt. 684 at 18), but it appears that the full disgorgement analysis no longer needs to 11 be presented to the jury. 12 As to (1), there is no requirement that an expert personally interview all employees 13 who incurred labor costs. The Ninth Circuit has held that an expert’s opinion can rely on 14 “facts or data in the case that the expert has been made aware of or personally 15 observed.” Stephens v. Union Pacific R.R. Co., 935 F.3d 852, 856 (9th Cir. 2019). The 16 Federal Rules of Evidence also expressly allow an expert to rely on hearsay if “experts in 17 the particular field would reasonably rely on those kinds of facts or data in forming an 18 opinion on the subject.” FRE 703. Defendants of course remain free to cross-examine 19 Trexler about her reliance on hearsay and any other aspects of her analysis that they see 20 as lacking, but defendants have not presented any basis for entirely excluding this portion 21 of her testimony. Thus, defendants’ motion is denied as to (1). 22 As to (2), similarly, defendants may certainly disagree with the inclusion of RSUs, 23 but they have no basis for excluding the opinion entirely. Trexler relied on a spreadsheet 24 created by plaintiffs, and she reviewed the source documents upon which the 25 spreadsheet was created. Again, defendants may certainly cross-examine Trexler on the 26 inclusion of RSUs in general, and to criticize their specific valuations, but exclusion is not 27 the proper remedy. Thus, defendants’ motion is denied as to (2). 1 damages expert Gregory Pinsonneault. 2 As an initial matter, plaintiffs challenge Pinsonneault’s report to the extent he 3 offers legal conclusions. Although plaintiffs’ motion is not entirely clear in identifying the 4 extent of Pinsonneault’s purported legal opinions, the motion does identify at least one 5 instance in which Pinsonneault offers an opinion about damages and causation. 6 The court takes this opportunity to make clear that neither party’s expert will be 7 permitted to offer legal conclusions, and plaintiffs’ motion is granted on that limited basis. 8 Plaintiffs then challenge Pinsonneault’s opinions based on lack of expertise, but 9 the court disagrees, finding that the jury should resolve any disagreement between the 10 experts. Also, to the extent that plaintiffs challenge Pinsonneault’s calculations of 11 defendants’ profits, it is unclear whether that testimony still needs to be presented to the 12 jury in light of plaintiffs’ withdrawal of their disgorgement claim. Accordingly, to the extent 13 that plaintiffs seek exclusion of Pinsonneault’s non-legal opinions, their motion is denied. 14 As mentioned above, both parties have also filed a motion to strike as untimely the 15 supplemental expert report of the opposing damages expert. See Dkt. 488, 491. 16 Although the court recognizes that the disputes are distinguishable, the court will 17 nevertheless allow both supplemental damages reports to be admitted and DENIES both 18 motions to strike. 19 20 III. VOIR DIRE 21 As discussed at the pretrial conference, the court will incorporate the parties’ 22 jointly-proposed questions into the voir dire which will be conducted primarily by the 23 court. The parties will each be allotted up to 20 minutes for followup questions but will 24 not be permitted to use their questions to argue the case. 25 26 IV. JURY INSTRUCTIONS 27 At the pretrial conference, the court indicated it will accept the parties’ jointly 1 Regarding the disputed instructions, the court addresses two preliminary issues 2 first. The court first concludes that there is no need for a separate instruction on 3 willfulness in conjunction with the punitive damages instruction. While the court agrees 4 with defendants that the statute expressly permits a party to seek punitive damages only 5 for “willful conduct”, the court also agrees with plaintiffs that a finding of willfulness was 6 necessarily implied by its summary judgment order. Specifically, the order found 7 defendants liable under both section (a)(2) and section (a)(4). Section (a)(2) requires 8 intent (whoever ‘intentionally accesses a computer…’), and section (a)(4) requires 9 knowledge and ‘intent to defraud.’ Intentional and knowing conduct that was clearly 10 committed without permission and not negligently or by accident is, in the court’s view, 11 sufficient to establish that the conduct was willful. As the Supreme Court has observed, 12 “willful” is a word of many meanings” and “its construction [is] often…influenced by its 13 context.” Ratzlaf v. United States, 510 U.S. 135, 141 (1994). Moreover, the court finds 14 that defendants’ proffered instruction would serve only to increase jury confusion to 15 require a separate finding on ‘willfulness’ when it is not being asked to decide liability. 16 Regarding the parties’ dispute over compensatory damages and the inclusion of 17 investigatory costs, the court is persuaded by the reasoning of another court in this 18 district in Meta Platforms, Inc. v. BrandTotal, Ltd., in which the court considered and 19 rejected the view that the Van Buren line of cases should be “construed as abrogating a 20 slew of previous district court decisions holding that investigative costs are recoverable 21 under the CFAA” particularly given the way that modern unlawful intrusions are 22 committed. See 605 F.Supp.3d 1218, 1264 (N.D. Cal. 2022) (“The Court declines to 23 construe Van Buren and hiQ as foreclosing a loss based on Facebook’s investigative 24 costs.”). 25 The parties are directed to meet and confer, and to submit revised jointly proposed 26 jury instructions in light of this order and the court’s statements at the pretrial conference 27 regarding issues such as nominal damages, by April 21, 2025. A further written order 1 case specific jury instructions are finalized.
3 V. VERDICT FORM 4 Regarding the verdict form, the parties are directed to meet and confer and to 5 submit a jointly proposed verdict form consistent with this order by April 21, 2025.sed 6 verdict form consistent with this order 7 VI. DISCOVERY DESIGNATIONS 8 Both parties have submitted extensive lists of deposition excerpts and other 9 discovery responses. Given the rulings contained in this order, and the time limits that 10 will be imposed on the presentation of evidence, the court expects a reduction in the 11 volume of deposition excerpts and other discovery. The parties are directed to revise 12 their respective lists and to file them by April 21, 2025. The court will require that from 13 these lists each party identify the witnesses to be called the following day so that 14 objections may be considered in advance of the trial day. 15 16 VII. MOTIONS TO SEAL DOCUMENTS AND TRIAL EVIDENCE 17 As discussed at the pretrial conference, the court DENIES any request to close the 18 courtroom to the public. And while it is disinclined to seal any exhibits that are used for 19 trial, the court will address those exhibits as they arise during the course of trial. And as 20 stated at the pretrial conference, the parties are directed to meet and confer and to 21 submit a filing, no later than April 21, 2025, which identifies any provisionally-sealed 22 documents that either party intends to introduce as trial exhibits along with the location of 23 the document in the record. 24 25 VIII. TRIAL SCHEDULE AND TIME LIMITS 26 The duration of the trial shall be 5 days commencing on Monday, April 28, 2025. 27 The trial schedule will be Monday through Friday, from 8:30 a.m. to 1:30 p.m., with two 1 Jury selection will occur on the first day, as will opening statements and as much of the 2 presentation of evidence as possible. Each side will be allotted 9 hours to present its 3 case, not including closing arguments for which May 5, 2025, is available if needed. 4 5 IX. FINAL COMMENTS 6 As discussed at the pretrial conference, the parties are directed to submit a brief 7 joint case description, a joint witness list, and a list of all participating attorneys for the 8 court’s use during voir dire. These documents must be filed by April 24, 2025. 9 10 IT IS SO ORDERED. 11 Dated: April 15, 2025 12 /s/ Phyllis J. Hamilton PHYLLIS J. HAMILTON 13 United States District Judge 14 15 16 17 18 19 20 21 22 23 24 25 26 27