STANLEY R. CHESLER, District Judge.
This matter comes before the Court upon the motion by Defendants Viacom Inc. ("Viacom") and Google Inc. ("Google") (collectively "Defendants"), to dismiss the Second Consolidated Class Action Complaint ("SAC") filed by Plaintiffs minor children and their father ("Plaintiffs"). For the reasons set forth in an Opinion dated July 2, 2014 ("the July 2 Opinion"), the Court dismissed with prejudice a number of Plaintiffs' claims. The Court also granted Plaintiffs leave to amend certain of its other theories of relief. Specifically, the Court dismissed without prejudice Plaintiffs' Video Privacy Protection Act ("VPPA") claim against Viacom, and their intrusion upon seclusion and New Jersey Computer Related Offenses ("CROA") claims against both Defendants. The issue now before the Court is whether Plaintiffs have cured the deficiencies in those counts. For the reasons that follow, and for those laid out in the July 2 Opinion, the Court finds that Plaintiffs have not cured the enumerated defects. Accordingly, the Court will grant Defendants' motions to dismiss the SAC with prejudice.
This is a multidistrict consolidated class action lawsuit, and Plaintiffs are children under the age of thirteen who claim that Defendants Viacom and Google have infringed upon their privacy rights. In its July 2 Opinion, the Court extensively reviewed the factual allegations involved, and the Court incorporates that background into this Opinion. For convenience, the Court will briefly restate the contours of the case. The Court assumes the following to be true for purposes of this motion only.
Viacom runs websites for children, including Nick.com, and it encourages users of those web sites to register profiles on them. Viacom collects information about the users who register, including their gender and birthday, and it then assigns a code name to each user based on that information. Children who register also create names associated with their profiles.
Children can stream videos and play video games on these sites, which creates a record of their gender and birthday, as well as the name of the video they played. Viacom sends this record to Google. Viacom also places a text file called a "cookie" onto Plaintiffs' computers without their consent. Cookies allow Viacom to gather additional information about these users, including their IP address, device and browser settings, and web traffic. Viacom shares this cookie information with Google. Additionally, Viacom allows Google to place its own text file "cookies" on Plaintiffs' computers and to access information from those cookies. This lets Google track certain aspects of Plaintiffs' Internet usage. Google's cookies also assign to each Plaintiff an identifier that is associated with other information Viacom has provided. Both Google and Viacom use all of this gathered information to target Plaintiffs with advertising.
b. Procedural History and the Instant Motions
The Court incorporates by reference the procedural history set forth in its July 2 Opinion. In that Opinion, the Court found some of Plaintiffs' claims to be deficient but potentially curable. Specifically, it held that Plaintiffs' VPPA claim against Viacom failed because the data that Viacom discloses is not "personally identifiable information." It further found that Plaintiffs' CROA claim failed because Plaintiffs had not alleged that they suffered any "business or property" damage. With respect to the intrusion upon seclusion claim, the Court found that Plaintiffs had not alleged an intrusion that would be "highly offensive" to a reasonable person. The Court granted Plaintiffs leave to amend these claims.
In response to the Court's July 2 Opinion, Plaintiffs filed the SAC in September of 2014, alleging certain additional facts which they believe cure the aforementioned deficiencies.
Defendants moved to dismiss on October 14, 2014. In support of their motions, Defendants assert that Plaintiffs' SAC suffers from the same fundamental defects. Namely, they urge that Plaintiffs still fail to allege the disclosure of any personally identifiable information; that there are no new allegations of requisite damages; and that the conduct at issue still falls short of the kind of "highly offensive" behavior that is cognizable under tort law.
Plaintiffs oppose the motions, highlighting new allegations included in the SAC. Specifically, Plaintiffs allege that Google could learn Plaintiffs' actual identities by using a "DoubleClick cookie identifier," and by combining the information Viacom provides it with data it already gathers from its other websites and services. Plaintiffs urge that newly alleged facts render Defendants' conduct "highly offensive" and establish the requisite damages.
a. Legal Standard
A complaint will survive a motion under Rule 12(b)(6) only if it states "sufficient factual allegations, accepted as true, to `state a claim for relief that is plausible on its face.'"
While the Court must construe the complaint in the light most favorable to the plaintiff, it need not accept a "legal conclusion couched as factual allegation."
The Court will apply these principles to assess whether Plaintiffs have cured the pleading deficiencies in their (1) VPPA claims against Viacom; (2) CROA claims against both Defendants; and (3) intrusion upon seclusion claim against both Defendants.
b. The VPPA Claim Against Viacom
Section 2710(b) of the VPPA establishes the elements needed to state a claim under the statute. The VPPA is violated when a video tape service provider ("VTSP") "knowingly discloses, to any person, personally identifiable information concerning any consumer of such provider[.]" For reasons explained extensively in the July 2 Opinion, nothing on the face of the VPPA or its legislative history suggest that "personally identifiable information" ("PII") includes information such as anonymous user IDs, gender and age, or data about a user's computer. In its July 2 Opinion, the Court found that the IP addresses and other information collected here could not, either individually or in the aggregate, identify a Plaintiff and what video they had watched.
The issue is whether Plaintiffs have alleged new facts which make it plausible that the information collected does indeed identify Plaintiffs. The Court finds that they have not.
Plaintiffs argue that because of Google's ubiquitous presence on the Internet, it can learn a lot from even limited information. Plaintiffs note that Google owns a vast network of services — including Google.com, Gmail, YouTube, and so forth — which collects ample data about users of those services, sometimes including their full names. Plaintiffs contend that with that information already in hand, Google can take the information Viacom sends it and indeed ascertain personal identities.
The Court has already concluded, however, that PII "is information which must,
Even if the Court were to consider what Google could do with the information, rather than the nature of the information itself, Plaintiffs' claim would still fail because it is entirely theoretical. According to Plaintiffs, in order for Google to connect the information that Viacom provides it with the identity of an individual Plaintiff, one of the Plaintiffs would need to have registered on one of Google's services. Crucially, however, Plaintiffs have alleged no facts whatsoever that a Plaintiff ever registered with Google. Such an allegation is necessary for the theoretical combination of information to actually yield one of the Plaintiff's identities. It appears that Google would not even allow a child under the age of thirteen to register for its services, which would rule out the entire class of Plaintiffs, all of whom are under that age.
At bottom, the SAC simply includes no allegation that Google can identify the individual Plaintiffs in this case, as opposed to identifying people generally, nor any allegation that Google has actually done so here. In that respect, Plaintiffs' VPPA claim resembles one that another court rejected as deficient:
c. The CROA Claims Against Both Defendants
The New Jersey CROA is an anti-computer-hacking statute which provides a civil remedy to "[a] person or enterprise damaged in business or property as the result of" certain enumerated actions. N.J. Stat. Ann. 2A:38A-3;
The Court notes at the outset, as it did in its July 2 Opinion, that because the CROA targets computer hacking, it is dubious whether the law also covers situations like this, in which Plaintiffs' computers have not been hacked nor has their information been stolen.
Even assuming that the statute applies, the Court earlier dismissed the CROA claim because Plaintiffs failed to allege "business or property" damage stemming from Defendants' conduct. The Court found that just because Defendants could monetize Plaintiffs' Internet usage did not necessarily mean that Plaintiffs could do the same. In the SAC, Plaintiffs now rhetorically frame their damages in terms of unjust enrichment in a quasi-contractual setting. Despite the new semantics, Plaintiffs are pointing to the same exact concept in an attempt to satisfy the damages requirement. The Court again rejects comparisons between this scenario and unjust enrichment or a quasi-contract, for reasons stated in the July 2 Opinion.
In relevant part, Plaintiffs fail to allege that they could have monetized the PII collected, or if they could, that Defendants' conduct prohibited them from still doing so.
Plaintiffs have again failed to identify any property or business damage, as is required.
d. The Intrusion Upon Seclusion Claims Against Both Defendants
New Jersey recognizes "intrusion upon seclusion," a common law privacy tort.
Although the question of what constitutes "highly offensive" conduct is sometimes appropriate for juries,
Here, as in the July 2 Opinion, the Court finds as a matter of law that Defendants' alleged conduct falls short of the "highly offensive" behavior which is cognizable under this theory. Plaintiffs suggest that additional facts pleaded in the SAC render Defendants' conduct "highly offensive" in light of social norms. Specifically, they urge that Defendants' activities violated various statutes and public opinion as expressed through polling.
With respect to the alleged statutory violations, the Court has already determined that Defendants' conduct does not violate the statutes upon which Plaintiffs rely. With respect to public polling, Plaintiffs cite to sentiments that are not directly on point. Plaintiffs highlight, for example, statistics suggesting that a large majority of the public opposes tracking children's online activity. Yet such a statistic does not answer the relevant inquiry: what a reasonable person finds "highly offensive." That which the public generally supports or opposes does not equate to that which an ordinarily reasonable person finds "highly offensive." Indeed, a large majority of voters may disapprove of a given politician's job performance, but that would not indicate that a reasonable person finds the politician's performance "highly offensive." The Court therefore finds Plaintiffs' polling allegations inapposite to the legal issue. It may indeed strike most people as undesirable that companies routinely collect information about anonymous web users to target ads in a more sophisticated way; yet this theory of relief requires more.
Surveying the classic intrusion-upon-inclusion claims demonstrates that this tort supports allegations of truly exceptional conduct.
In a final effort to salvage this claim, Plaintiffs urge that the Court should consider Defendants' conduct "highly offensive" because it involves children. It is, of course, apparent to the Court that children do indeed warrant special attention and heightened protections under our laws and social norms. To be sure, however, the Court's role in this decision is not to pass on the morality nor the wisdom of companies tracking the anonymous web activities of children for advertising purposes. The Court does not, by way of this Opinion, find Defendants' conduct beneficial. The Court's only task is to assess whether Plaintiffs' claims pass muster under the federal pleading standards vis-à-vis the authorities upon which those claims rest. Here, Plaintiffs' SAC is an exercise in attempting to fit square pegs into round holes. Although Plaintiffs have identified conduct that may be worthy of further legislative and executive attention, they have not cited any existing and applicable legal authority to supports their claims.
For the foregoing reasons, the Court will grant Defendants' motions to dismiss [Docket Entries 77 & 78]. An appropriate form of Order will be filed herewith.