{"attribution":{"source":"legal.exploreworldai.com","canonical":"https://legal.exploreworldai.com/api/public/v1/judgment-text?id=us:932-f-3d-1264","cite_as":"NovaCopilot, legal.exploreworldai.com (https://legal.exploreworldai.com/api/public/v1/judgment-text?id=us:932-f-3d-1264)","license":"https://legal.exploreworldai.com/revision","version":"legal-2026-11-03","fingerprint":"ewai:us:fae3c7","proof":"sha256:7870338faaaf828882c651d0cfad51ac4daff22827d3e417624f8cd88edc8522","jurisdiction":"us","lang":"en","publisher":"NovaCopilot by ExploreWorld Legal","terms":"https://legal.exploreworldai.com/om"},"brand_source":"Source: NovaCopilot","item":{"schema_version":"1.0.0","id":"us:932-f-3d-1264","jurisdiction":"us","lang":"en","brand_source":"Source: NovaCopilot","brand":{"product":"NovaCopilot","platform":"ExploreWorldAI","infrastructure":"ExploreWorld Legal","infrastructure_url":"legal.exploreworldai.com","legal_entity":"Valkiv Ventures AB","permanent_url":"https://legal.exploreworldai.com/novacopilot","source":"Source: NovaCopilot","powered_by":"Powered by NovaCopilot","license":"https://legal.exploreworldai.com/licensvillkor"},"sections":[{"title":"Front matter","paragraphs":["para_1","para_2","para_3","para_4","para_5","para_6","para_7","para_8","para_9","para_10","para_11","para_12","para_13","para_14","para_15","para_16","para_17","para_18","para_19","para_20","para_21","para_22","para_23","para_24","para_25","para_26","para_27"],"kind":"front_matter"},{"title":"SUMMARY**","paragraphs":["para_28","para_29","para_30","para_31","para_32","para_33","para_34","para_35","para_36","para_37","para_38","para_39","para_40","para_41","para_42","para_43","para_44","para_45","para_46","para_47","para_48","para_49","para_50","para_51","para_52","para_53","para_54","para_55","para_56","para_57","para_58","para_59","para_60","para_61","para_62","para_63","para_64","para_65","para_66","para_67","para_68","para_69","para_70","para_71","para_72","para_73","para_74","para_75","para_76","para_77","para_78","para_79","para_80","para_81","para_82","para_83","para_84","para_85","para_86","para_87","para_88","para_89","para_90","para_91","para_92","para_93","para_94","para_95","para_96","para_97","para_98","para_99","para_100","para_101","para_102","para_103","para_104","para_105","para_106","para_107","para_108","para_109","para_110","para_111","para_112","para_113","para_114","para_115","para_116","para_117","para_118","para_119","para_120","para_121","para_122","para_123","para_124","para_125","para_126","para_127","para_128","para_129","para_130","para_131","para_132","para_133","para_134","para_135","para_136","para_137","para_138","para_139","para_140","para_141","para_142","para_143","para_144","para_145","para_146","para_147","para_148","para_149","para_150","para_151","para_152","para_153","para_154","para_155","para_156","para_157","para_158","para_159","para_160","para_161","para_162","para_163","para_164","para_165","para_166","para_167","para_168","para_169","para_170","para_171","para_172","para_173","para_174","para_175","para_176","para_177","para_178","para_179","para_180","para_181","para_182","para_183","para_184","para_185","para_186","para_187","para_188","para_189","para_190","para_191","para_192","para_193","para_194","para_195","para_196","para_197","para_198","para_199","para_200","para_201","para_202","para_203","para_204","para_205","para_206","para_207","para_208","para_209","para_210","para_211","para_212","para_213","para_214","para_215","para_216","para_217","para_218","para_219","para_220","para_221","para_222","para_223","para_224","para_225","para_226","para_227","para_228","para_229","para_230","para_231","para_232","para_233","para_234","para_235","para_236","para_237","para_238","para_239","para_240","para_241","para_242","para_243","para_244","para_245","para_246","para_247","para_248","para_249","para_250","para_251","para_252","para_253","para_254","para_255","para_256","para_257","para_258","para_259","para_260","para_261","para_262","para_263","para_264","para_265","para_266","para_267","para_268","para_269","para_270","para_271","para_272","para_273","para_274","para_275","para_276","para_277","para_278","para_279","para_280","para_281","para_282","para_283","para_284","para_285","para_286","para_287","para_288","para_289","para_290","para_291","para_292","para_293","para_294","para_295","para_296","para_297","para_298","para_299","para_300","para_301","para_302","para_303","para_304","para_305","para_306","para_307","para_308","para_309","para_310","para_311","para_312","para_313","para_314","para_315","para_316","para_317","para_318","para_319","para_320","para_321","para_322","para_323","para_324","para_325","para_326","para_327","para_328","para_329","para_330","para_331","para_332","para_333","para_334","para_335","para_336","para_337","para_338","para_339","para_340","para_341","para_342","para_343","para_344","para_345","para_346","para_347","para_348","para_349","para_350","para_351","para_352","para_353","para_354","para_355","para_356","para_357","para_358","para_359","para_360","para_361","para_362","para_363","para_364","para_365","para_366","para_367","para_368","para_369","para_370","para_371","para_372","para_373","para_374","para_375","para_376","para_377","para_378","para_379","para_380","para_381","para_382","para_383","para_384","para_385","para_386","para_387","para_388","para_389","para_390","para_391","para_392","para_393","para_394","para_395","para_396","para_397","para_398","para_399","para_400","para_401","para_402","para_403","para_404","para_405","para_406","para_407","para_408","para_409","para_410","para_411","para_412","para_413","para_414","para_415","para_416","para_417","para_418","para_419","para_420","para_421","para_422","para_423","para_424","para_425","para_426","para_427","para_428","para_429","para_430","para_431","para_432","para_433","para_434","para_435","para_436","para_437","para_438","para_439","para_440","para_441","para_442","para_443","para_444","para_445","para_446","para_447","para_448","para_449","para_450","para_451","para_452","para_453","para_454","para_455","para_456","para_457","para_458","para_459","para_460","para_461","para_462","para_463","para_464","para_465","para_466","para_467","para_468","para_469","para_470","para_471","para_472","para_473","para_474","para_475","para_476","para_477","para_478","para_479","para_480","para_481","para_482","para_483","para_484","para_485","para_486","para_487","para_488","para_489","para_490","para_491","para_492","para_493","para_494","para_495","para_496","para_497","para_498","para_499","para_500","para_501","para_502","para_503","para_504","para_505","para_506","para_507","para_508","para_509","para_510","para_511","para_512","para_513","para_514","para_515","para_516","para_517","para_518","para_519","para_520","para_521","para_522","para_523","para_524","para_525","para_526","para_527","para_528","para_529","para_530","para_531","para_532","para_533","para_534","para_535","para_536","para_537","para_538","para_539","para_540","para_541","para_542","para_543","para_544","para_545","para_546","para_547","para_548","para_549","para_550","para_551","para_552","para_553","para_554","para_555","para_556","para_557","para_558","para_559","para_560","para_561","para_562","para_563","para_564","para_565","para_566","para_567","para_568","para_569","para_570","para_571","para_572","para_573","para_574","para_575","para_576","para_577","para_578","para_579","para_580","para_581","para_582","para_583","para_584","para_585","para_586","para_587","para_588","para_589","para_590","para_591","para_592","para_593","para_594","para_595","para_596","para_597","para_598","para_599","para_600","para_601","para_602","para_603","para_604","para_605","para_606","para_607","para_608","para_609","para_610","para_611","para_612","para_613","para_614","para_615","para_616","para_617","para_618","para_619","para_620","para_621","para_622","para_623","para_624","para_625","para_626","para_627","para_628","para_629","para_630","para_631","para_632","para_633","para_634","para_635","para_636","para_637","para_638","para_639","para_640","para_641","para_642","para_643","para_644","para_645","para_646","para_647","para_648","para_649","para_650","para_651","para_652","para_653","para_654","para_655","para_656","para_657","para_658","para_659","para_660","para_661","para_662","para_663","para_664","para_665","para_666","para_667","para_668","para_669","para_670","para_671","para_672","para_673","para_674","para_675","para_676","para_677","para_678","para_679","para_680","para_681","para_682","para_683","para_684","para_685","para_686","para_687","para_688","para_689","para_690","para_691","para_692","para_693","para_694","para_695","para_696","para_697","para_698","para_699","para_700","para_701","para_702","para_703","para_704","para_705","para_706","para_707","para_708","para_709","para_710","para_711","para_712","para_713","para_714","para_715","para_716","para_717","para_718","para_719","para_720","para_721","para_722","para_723","para_724","para_725","para_726","para_727","para_728","para_729","para_730","para_731","para_732","para_733","para_734","para_735","para_736","para_737","para_738","para_739","para_740","para_741","para_742","para_743","para_744","para_745","para_746","para_747","para_748","para_749","para_750","para_751"],"kind":"summary"}],"paragraphs":[{"text":"FOR PUBLICATION","paragraph_id":"para_1"},{"text":"UNITED STATES COURT OF APPEALS","paragraph_id":"para_2"},{"text":"FOR THE NINTH CIRCUIT","paragraph_id":"para_3"},{"text":"NIMESH PATEL, Individually and","paragraph_id":"para_4"},{"text":"on Behalf of All Others Similarly","paragraph_id":"para_5"},{"text":"Situated; ADAM PEZEN; CARLO","paragraph_id":"para_6"},{"text":"LICATA,","paragraph_id":"para_7"},{"text":"Plaintiffs-Appellees,","paragraph_id":"para_8"},{"text":"v.","paragraph_id":"para_9"},{"text":"FACEBOOK, INC.,","paragraph_id":"para_10"},{"text":"Defendant-Appellant.","paragraph_id":"para_11"},{"text":"No. 18-15982","paragraph_id":"para_12"},{"text":"D.C. No.","paragraph_id":"para_13"},{"text":"3:15-cv-03747-JD","paragraph_id":"para_14"},{"text":"OPINION","paragraph_id":"para_15"},{"text":"Appeal from the United States District Court","paragraph_id":"para_16"},{"text":"for the Northern District of California","paragraph_id":"para_17"},{"text":"James Donato, District Judge, Presiding","paragraph_id":"para_18"},{"text":"Argued and Submitted June 12, 2019","paragraph_id":"para_19"},{"text":"San Francisco, California","paragraph_id":"para_20"},{"text":"Filed August 8, 2019","paragraph_id":"para_21"},{"text":"Before: Ronald M. Gould and Sandra S. Ikuta, Circuit","paragraph_id":"para_22"},{"text":"Judges, and Benita Y. Pearson,* District Judge.","paragraph_id":"para_23"},{"text":"Opinion by Judge Ikuta","paragraph_id":"para_24"},{"text":"* The Honorable Benita Y. Pearson, United States District Judge for","paragraph_id":"para_25"},{"text":"the Northern District of Ohio, sitting by designation.","paragraph_id":"para_26"},{"text":"PATEL V. FACEBOOK2","paragraph_id":"para_27"},{"text":"SUMMARY**","paragraph_id":"para_28"},{"text":"Standing / Class Certification / Illinois Law","paragraph_id":"para_29"},{"text":"The panel affirmed the district court’s order certifying a","paragraph_id":"para_30"},{"text":"class under Fed. R. Civ. P. 23 of users of Facebook, Inc., who","paragraph_id":"para_31"},{"text":"alleged that Facebook’s facial-recognition technology","paragraph_id":"para_32"},{"text":"violated Illinois’s Biometric Information Privacy Act","paragraph_id":"para_33"},{"text":"(“BIPA”).","paragraph_id":"para_34"},{"text":"The panel held that plaintiffs alleged a concrete and","paragraph_id":"para_35"},{"text":"particularized harm, sufficient to confer Article III standing,","paragraph_id":"para_36"},{"text":"because BIPA protected the plaintiffs’ concrete privacy","paragraph_id":"para_37"},{"text":"interest, and violations of the procedures in BIPA actually","paragraph_id":"para_38"},{"text":"harmed or posed a material risk of harm to those privacy","paragraph_id":"para_39"},{"text":"interests. Specifically, the panel concluded that the","paragraph_id":"para_40"},{"text":"development of a face template using facial-recognition","paragraph_id":"para_41"},{"text":"technology without consent (as alleged in this case) invades","paragraph_id":"para_42"},{"text":"an individual’s private affairs and concrete interests.","paragraph_id":"para_43"},{"text":"The panel held that the district court did not abuse","paragraph_id":"para_44"},{"text":"its discretion in certifying the class. Specifically, the panel","paragraph_id":"para_45"},{"text":"rejected Facebook’s argument that Illinois’s extraterritoriality","paragraph_id":"para_46"},{"text":"doctrine precluded the district court from finding","paragraph_id":"para_47"},{"text":"predominance. The panel further held that the district court","paragraph_id":"para_48"},{"text":"did not abuse its discretion in determining that a class action","paragraph_id":"para_49"},{"text":"was superior to individual actions in this case.","paragraph_id":"para_50"},{"text":"** This summary constitutes no part of the opinion of the court. It has","paragraph_id":"para_51"},{"text":"been prepared by court staff for the convenience of the reader.","paragraph_id":"para_52"},{"text":"PATEL V. FACEBOOK 3","paragraph_id":"para_53"},{"text":"COUNSEL","paragraph_id":"para_54"},{"text":"Lauren R. Goldman (argued), Andrew J. Pincus, and Michael","paragraph_id":"para_55"},{"text":"Rayfield, Mayer Brown LLP, New York, New York, for","paragraph_id":"para_56"},{"text":"Defendant-Appellant.","paragraph_id":"para_57"},{"text":"John Aaron Lawson (argued), Rafey S. Balabanian, and Lily","paragraph_id":"para_58"},{"text":"Hough, Edelson PC, San Francisco, California; Jay Edelson,","paragraph_id":"para_59"},{"text":"Benjamin Richman, and Alexander G. Tievsky, Edelson PC,","paragraph_id":"para_60"},{"text":"Chicago, Illinois; Susan K. Alexander, Shawn A. Williams,","paragraph_id":"para_61"},{"text":"and John George, Robbins Geller Rudman & Dowd LLP, San","paragraph_id":"para_62"},{"text":"Francisco, California; Patrick J. Coughlin, Ellen Gusikoff","paragraph_id":"para_63"},{"text":"Stewart, Lucas F. Olts, and Randi D. Bandman, Robbins","paragraph_id":"para_64"},{"text":"Geller Rudman & Dowd LLP, San Diego, California; Paul J.","paragraph_id":"para_65"},{"text":"Geller, Stuart A. Davidson, and Christopher C. Gold, Robbins","paragraph_id":"para_66"},{"text":"Geller Rudman & Dowd LLP, Boca Raton, Florida;","paragraph_id":"para_67"},{"text":"Lawrence Sucharow, Michael P. Canty, Corban S. Rhodes,","paragraph_id":"para_68"},{"text":"and Ross Kamhi, Labaton Sucharow LLP, New York, New","paragraph_id":"para_69"},{"text":"York; for Plaintiffs-Appellees.","paragraph_id":"para_70"},{"text":"Susan Fahringer and Nicola Menaldo, Perkins Coie LLP,","paragraph_id":"para_71"},{"text":"Seattle, Washington; Neal Kumar Katyal, Hogan Lovells US","paragraph_id":"para_72"},{"text":"LLP, Washington, D.C.; Lauren Ruben, Perkins Coie LLP,","paragraph_id":"para_73"},{"text":"Denver, Colorado; Thomas P. Schmidt, Hogan Lovells US","paragraph_id":"para_74"},{"text":"LLP, New York, New York; Sara Solow, Hogan Lovells US","paragraph_id":"para_75"},{"text":"LLP, Philadelphia, Pennsylvania; for Amicus Curiae Internet","paragraph_id":"para_76"},{"text":"Association.","paragraph_id":"para_77"},{"text":"Nathan Freed Wessler, American Civil Liberties Union, New","paragraph_id":"para_78"},{"text":"York, New York; Rebecca K. Glenberg, Roger Baldwin","paragraph_id":"para_79"},{"text":"Foundation of ACLU, Chicago, Illinois; Jacob A. Snow,","paragraph_id":"para_80"},{"text":"American Civil Liberties Union Foundation of Northern","paragraph_id":"para_81"},{"text":"California, San Francisco, California; Jennifer Lynch and","paragraph_id":"para_82"},{"text":"Adam Schwartz, Electronic Frontier Foundation, San","paragraph_id":"para_83"},{"text":"PATEL V. FACEBOOK4","paragraph_id":"para_84"},{"text":"Francisco, California; Joseph Jerome, Center for Democracy","paragraph_id":"para_85"},{"text":"& Technology, Washington, D.C.; Michael C. Landis, Illinois","paragraph_id":"para_86"},{"text":"PIRG Education Fund Inc., Chicago, Illinois; for Amici","paragraph_id":"para_87"},{"text":"Curiae American Civil Liberties Union, American Civil","paragraph_id":"para_88"},{"text":"Liberties Union of Illinois, American Civil Liberties Union","paragraph_id":"para_89"},{"text":"Foundation of Northern California, American Civil Liberties","paragraph_id":"para_90"},{"text":"Union Foundation of Southern California, Center for","paragraph_id":"para_91"},{"text":"Democracy & Technology, Electronic Frontier Foundation,","paragraph_id":"para_92"},{"text":"and Illinois PIRG Education Fund Inc.","paragraph_id":"para_93"},{"text":"Marc Rotenberg, Alan Butler, and John Davisson, Electronic","paragraph_id":"para_94"},{"text":"Privacy Information Center, Washington, D.C., for Amicus","paragraph_id":"para_95"},{"text":"Curiae Electronic Privacy Information Center (EPIC).","paragraph_id":"para_96"},{"text":"Kelly P. Dunbar, Reginald J. Brown, Patrick J. Carome,","paragraph_id":"para_97"},{"text":"Jonathan G. Cedarbaum, and Samuel M. Strongin, Wilmer","paragraph_id":"para_98"},{"text":"Cutler Pickering Hale and Dorr LLP, Washington, D.C.;","paragraph_id":"para_99"},{"text":"Steven P. Lehotsky and Jonathan D. Urick, U.S. Chamber","paragraph_id":"para_100"},{"text":"Litigation Center, Washington, D.C.; for Amicus Curiae","paragraph_id":"para_101"},{"text":"Chamber of Commerce of the United States of America.","paragraph_id":"para_102"},{"text":"OPINION","paragraph_id":"para_103"},{"text":"IKUTA, Circuit Judge:","paragraph_id":"para_104"},{"text":"Plaintiffs’ complaint alleges that Facebook subjected","paragraph_id":"para_105"},{"text":"them to facial-recognition technology without complying","paragraph_id":"para_106"},{"text":"with an Illinois statute intended to safeguard their privacy.","paragraph_id":"para_107"},{"text":"Because a violation of the Illinois statute injures an","paragraph_id":"para_108"},{"text":"individual’s concrete right to privacy, we reject Facebook’s","paragraph_id":"para_109"},{"text":"claim that the plaintiffs have failed to allege a concrete","paragraph_id":"para_110"},{"text":"injury-in-fact for purposes of Article III standing.","paragraph_id":"para_111"},{"text":"PATEL V. FACEBOOK 5","paragraph_id":"para_112"},{"text":"Additionally, we conclude that the district court did not abuse","paragraph_id":"para_113"},{"text":"its discretion in certifying the class.","paragraph_id":"para_114"},{"text":"I","paragraph_id":"para_115"},{"text":"Facebook operates one of the largest social media","paragraph_id":"para_116"},{"text":"platforms in the world, with over one billion active users.","paragraph_id":"para_117"},{"text":"Packingham v. North Carolina, 137 S. Ct. 1730, 1735 (2017).","paragraph_id":"para_118"},{"text":"About seven in ten adults in the United States use Facebook.1","paragraph_id":"para_119"},{"text":"A","paragraph_id":"para_120"},{"text":"When a new user registers for a Facebook account, the","paragraph_id":"para_121"},{"text":"user must create a profile and agree to Facebook’s terms and","paragraph_id":"para_122"},{"text":"conditions, which permit Facebook to collect and use data in","paragraph_id":"para_123"},{"text":"accordance with Facebook’s policies. To interact with other","paragraph_id":"para_124"},{"text":"users on the platform, a Facebook user identifies another user","paragraph_id":"para_125"},{"text":"as a friend and sends a friend request. If the request is","paragraph_id":"para_126"},{"text":"accepted, the two users are able to share content, such as text","paragraph_id":"para_127"},{"text":"and photographs.","paragraph_id":"para_128"},{"text":"For years, Facebook has allowed users to tag their","paragraph_id":"para_129"},{"text":"Facebook friends in photos posted to Facebook. A tag","paragraph_id":"para_130"},{"text":"identifies the friend in the photo by name and includes a link","paragraph_id":"para_131"},{"text":"to that friend’s Facebook profile. Users who are tagged are","paragraph_id":"para_132"},{"text":"notified of the tag, granted access to the photo, and allowed","paragraph_id":"para_133"},{"text":"to share the photo with other friends or “un-tag” themselves","paragraph_id":"para_134"},{"text":"if they choose.","paragraph_id":"para_135"},{"text":"1 See John Gramlich, 10 Facts about Americans and Facebook, Pew","paragraph_id":"para_136"},{"text":"Research Ctr. (May 16, 2019), https://www.pewresearch.org/fact-","paragraph_id":"para_137"},{"text":"tank/2019/05/16/facts-about-americans-and-facebook/.","paragraph_id":"para_138"},{"text":"PATEL V. FACEBOOK6","paragraph_id":"para_139"},{"text":"In 2010, Facebook launched a feature called Tag","paragraph_id":"para_140"},{"text":"Suggestions. If Tag Suggestions is enabled, Facebook may","paragraph_id":"para_141"},{"text":"use facial-recognition technology to analyze whether the","paragraph_id":"para_142"},{"text":"user’s Facebook friends are in photos uploaded by that user.","paragraph_id":"para_143"},{"text":"When a photo is uploaded, the technology scans the photo","paragraph_id":"para_144"},{"text":"and detects whether it contains images of faces. If so, the","paragraph_id":"para_145"},{"text":"technology extracts the various geometric data points that","paragraph_id":"para_146"},{"text":"make a face unique, such as the distance between the eyes,","paragraph_id":"para_147"},{"text":"nose, and ears, to create a face signature or map. The","paragraph_id":"para_148"},{"text":"technology then compares the face signature to faces in","paragraph_id":"para_149"},{"text":"Facebook’s database of user face templates (i.e., face","paragraph_id":"para_150"},{"text":"signatures that have already been matched to the user’s","paragraph_id":"para_151"},{"text":"profiles).2 If there is a match between the face signature and","paragraph_id":"para_152"},{"text":"the face template, Facebook may suggest tagging the person","paragraph_id":"para_153"},{"text":"in the photo.","paragraph_id":"para_154"},{"text":"Facebook’s face templates are stored on its servers, which","paragraph_id":"para_155"},{"text":"are located in nine data centers maintained by Facebook. The","paragraph_id":"para_156"},{"text":"six data centers located in the United States are in Oregon,","paragraph_id":"para_157"},{"text":"California, Iowa, Texas, Virginia, and North Carolina.","paragraph_id":"para_158"},{"text":"Facebook’s headquarters are in California.","paragraph_id":"para_159"},{"text":"B","paragraph_id":"para_160"},{"text":"Facebook users living in Illinois brought a class action","paragraph_id":"para_161"},{"text":"against Facebook, claiming that Facebook’s facial-","paragraph_id":"para_162"},{"text":"recognition technology violates Illinois law. Class","paragraph_id":"para_163"},{"text":"representatives Adam Pezen, Carlo Licata, and Nimesh Patel","paragraph_id":"para_164"},{"text":"each live in Illinois. They joined Facebook in 2005, 2009,","paragraph_id":"para_165"},{"text":"2 According to Facebook, it creates and stores a template for a user","paragraph_id":"para_166"},{"text":"when the user (1) has been tagged in at least one photo; (2) has not opted","paragraph_id":"para_167"},{"text":"out of Tag Suggestions; and (3) satisfies other privacy-based and","paragraph_id":"para_168"},{"text":"regulatory criteria.","paragraph_id":"para_169"},{"text":"PATEL V. FACEBOOK 7","paragraph_id":"para_170"},{"text":"and 2008, respectively, and each uploaded photos to","paragraph_id":"para_171"},{"text":"Facebook while in Illinois. Facebook created and stored face","paragraph_id":"para_172"},{"text":"templates for each of the plaintiffs.","paragraph_id":"para_173"},{"text":"The three named plaintiffs filed the operative","paragraph_id":"para_174"},{"text":"consolidated complaint in a California district court in August","paragraph_id":"para_175"},{"text":"2015. The plaintiffs allege that Facebook violated the Illinois","paragraph_id":"para_176"},{"text":"Biometric Information Privacy Act (BIPA), 740 Ill. Comp.","paragraph_id":"para_177"},{"text":"Stat. 14/1 et seq. (2008), which provides that “[a]ny person","paragraph_id":"para_178"},{"text":"aggrieved” by a violation of its provisions “shall have a right","paragraph_id":"para_179"},{"text":"of action” against an “offending party,” id. 14/20. According","paragraph_id":"para_180"},{"text":"to the complaint, Facebook violated sections 15(a) and 15(b)","paragraph_id":"para_181"},{"text":"of BIPA by collecting, using, and storing biometric identifiers","paragraph_id":"para_182"},{"text":"(a “scan” of “face geometry,” id. 14/10) from their photos","paragraph_id":"para_183"},{"text":"without obtaining a written release and without establishing","paragraph_id":"para_184"},{"text":"a compliant retention schedule.3","paragraph_id":"para_185"},{"text":"3 Sections 15(a) and (b) of BIPA provide:","paragraph_id":"para_186"},{"text":"(a) A private entity in possession of biometric","paragraph_id":"para_187"},{"text":"identifiers or biometric information must develop a","paragraph_id":"para_188"},{"text":"written policy, made available to the public,","paragraph_id":"para_189"},{"text":"establishing a retention schedule and guidelines for","paragraph_id":"para_190"},{"text":"permanently destroying biometric identifiers and","paragraph_id":"para_191"},{"text":"biometric information when the initial purpose for","paragraph_id":"para_192"},{"text":"collecting or obtaining such identifiers or information","paragraph_id":"para_193"},{"text":"has been satisfied or within 3 years of the individual’s","paragraph_id":"para_194"},{"text":"last interaction with the private entity, whichever occurs","paragraph_id":"para_195"},{"text":"first. Absent a valid warrant or subpoena issued by a","paragraph_id":"para_196"},{"text":"court of competent jurisdiction, a private entity in","paragraph_id":"para_197"},{"text":"possession of biometric identifiers or biometric","paragraph_id":"para_198"},{"text":"information must comply with its established retention","paragraph_id":"para_199"},{"text":"schedule and destruction guidelines.","paragraph_id":"para_200"},{"text":"(b) No private entity may collect, capture, purchase,","paragraph_id":"para_201"},{"text":"receive through trade, or otherwise obtain a person’s or","paragraph_id":"para_202"},{"text":"a customer’s biometric identifier or biometric","paragraph_id":"para_203"},{"text":"PATEL V. FACEBOOK8","paragraph_id":"para_204"},{"text":"The Illinois General Assembly enacted BIPA in 2008 to","paragraph_id":"para_205"},{"text":"enhance Illinois’s “limited State law regulating the collection,","paragraph_id":"para_206"},{"text":"use, safeguarding, and storage of biometrics.” 740 Ill. Comp.","paragraph_id":"para_207"},{"text":"Stat. 14/5(e). BIPA defines a “biometric identifier” as","paragraph_id":"para_208"},{"text":"including a “scan of hand or face geometry.” Id. 14/10.4 In","paragraph_id":"para_209"},{"text":"a series of findings, the state legislature provided its views","paragraph_id":"para_210"},{"text":"about the costs and benefits of biometric data use. The","paragraph_id":"para_211"},{"text":"legislature stated that “[t]he use of biometrics is growing in","paragraph_id":"para_212"},{"text":"the business and security screening sectors and appears to","paragraph_id":"para_213"},{"text":"promise streamlined financial transactions and security","paragraph_id":"para_214"},{"text":"information, unless it first:","paragraph_id":"para_215"},{"text":"(1) informs the subject or the subject’s legally","paragraph_id":"para_216"},{"text":"authorized representative in writing that a","paragraph_id":"para_217"},{"text":"biometric identifier or biometric information is","paragraph_id":"para_218"},{"text":"being collected or stored;","paragraph_id":"para_219"},{"text":"(2) informs the subject or the subject’s legally","paragraph_id":"para_220"},{"text":"authorized representative in writing of the specific","paragraph_id":"para_221"},{"text":"purpose and length of term for which a biometric","paragraph_id":"para_222"},{"text":"identifier or biometric information is being","paragraph_id":"para_223"},{"text":"collected, stored, and used; and","paragraph_id":"para_224"},{"text":"(3) receives a written release executed by the","paragraph_id":"para_225"},{"text":"subject of the biometric identifier or biometric","paragraph_id":"para_226"},{"text":"information or the subject’s legally authorized","paragraph_id":"para_227"},{"text":"representative.","paragraph_id":"para_228"},{"text":"740 Ill. Comp. Stat. 14/15 (a)–(b).","paragraph_id":"para_229"},{"text":"4 Section 10 of BIPA defines “biometric identifier” to mean “a retina","paragraph_id":"para_230"},{"text":"or iris scan, fingerprint, voiceprint, or scan of hand or face geometry.”","paragraph_id":"para_231"},{"text":"740 Ill. Comp. Stat. 14/10. Biometric identifiers do not include “writing","paragraph_id":"para_232"},{"text":"samples, written signatures, photographs, human biological samples used","paragraph_id":"para_233"},{"text":"for valid scientific testing or screening, demographic data, tattoo","paragraph_id":"para_234"},{"text":"descriptions, or physical descriptions such as height, weight, hair color, or","paragraph_id":"para_235"},{"text":"eye color.” Id.","paragraph_id":"para_236"},{"text":"PATEL V. FACEBOOK 9","paragraph_id":"para_237"},{"text":"screenings,” and also noted that “[m]ajor national","paragraph_id":"para_238"},{"text":"corporations have selected the City of Chicago and other","paragraph_id":"para_239"},{"text":"locations in this State as pilot testing sites for new","paragraph_id":"para_240"},{"text":"applications of biometric-facilitated financial transactions.”","paragraph_id":"para_241"},{"text":"Id. 14/5(a)–(b). Nevertheless, “[b]iometrics are unlike other","paragraph_id":"para_242"},{"text":"unique identifiers that are used to access finances or other","paragraph_id":"para_243"},{"text":"sensitive information,” because while social security numbers","paragraph_id":"para_244"},{"text":"can be changed if compromised by hackers, biometric data","paragraph_id":"para_245"},{"text":"are “biologically unique to the individual,” and “once","paragraph_id":"para_246"},{"text":"compromised, the individual has no recourse, is at heightened","paragraph_id":"para_247"},{"text":"risk for identity theft, and is likely to withdraw from","paragraph_id":"para_248"},{"text":"biometric-facilitated transactions.” Id. 14/5(c). Moreover,","paragraph_id":"para_249"},{"text":"“[t]he full ramifications of biometric technology are not fully","paragraph_id":"para_250"},{"text":"known.” Id. 14/5(f). The legislature concluded that “[t]he","paragraph_id":"para_251"},{"text":"public welfare, security, and safety will be served by","paragraph_id":"para_252"},{"text":"regulating the collection, use, safeguarding, handling, storage,","paragraph_id":"para_253"},{"text":"retention, and destruction of biometric identifiers and","paragraph_id":"para_254"},{"text":"information.” Id. 14/5(g).","paragraph_id":"para_255"},{"text":"To further these goals, section 15 of BIPA imposes","paragraph_id":"para_256"},{"text":"“various obligations regarding the collection, retention,","paragraph_id":"para_257"},{"text":"disclosure, and destruction of biometric identifiers and","paragraph_id":"para_258"},{"text":"biometric information” on private entities. Rosenbach v. Six","paragraph_id":"para_259"},{"text":"Flags Entm’t Corp., — N.E.3d —, 2019 IL 123186, at *4 (Ill.","paragraph_id":"para_260"},{"text":"2019). These requirements include “establishing a retention","paragraph_id":"para_261"},{"text":"schedule and guidelines for permanently destroying biometric","paragraph_id":"para_262"},{"text":"identifiers and biometric information” the earlier of three","paragraph_id":"para_263"},{"text":"years after the individual’s last interaction with the private","paragraph_id":"para_264"},{"text":"entity or “when the initial purpose for collecting or obtaining","paragraph_id":"para_265"},{"text":"such identifiers or information has been satisfied.” 740 Ill.","paragraph_id":"para_266"},{"text":"Comp. Stat. 14/15(a). The statute also requires the private","paragraph_id":"para_267"},{"text":"entity to notify the individual in writing and secure a written","paragraph_id":"para_268"},{"text":"release before obtaining a biometric identifier. Id. 14/15(b).","paragraph_id":"para_269"},{"text":"PATEL V. FACEBOOK10","paragraph_id":"para_270"},{"text":"BIPA also provides for actual and liquidated damages for","paragraph_id":"para_271"},{"text":"violations of the Act’s requirements. Id. 14/20.","paragraph_id":"para_272"},{"text":"C","paragraph_id":"para_273"},{"text":"In June 2016, Facebook moved to dismiss the plaintiffs’","paragraph_id":"para_274"},{"text":"complaint for lack of Article III standing on the ground that","paragraph_id":"para_275"},{"text":"the plaintiffs had not alleged any concrete injury. While","paragraph_id":"para_276"},{"text":"Facebook’s motion to dismiss was pending, the plaintiffs","paragraph_id":"para_277"},{"text":"moved to certify a class under Rule 23 of the Federal Rules","paragraph_id":"para_278"},{"text":"of Civil Procedure. The district court denied Facebook’s","paragraph_id":"para_279"},{"text":"motion to dismiss, and certified a Rule 23(b)(3) class of","paragraph_id":"para_280"},{"text":"“Facebook users located in Illinois for whom Facebook","paragraph_id":"para_281"},{"text":"created and stored a face template after June 7, 2011.”","paragraph_id":"para_282"},{"text":"Facebook filed a timely petition for leave to appeal the","paragraph_id":"para_283"},{"text":"district court’s ruling under Rule 23(f). Fed. R. Civ. P. 23(f)","paragraph_id":"para_284"},{"text":"(providing that “[a] court of appeals may permit an appeal","paragraph_id":"para_285"},{"text":"from an order granting or denying class-action certification","paragraph_id":"para_286"},{"text":"under this rule”).","paragraph_id":"para_287"},{"text":"We have jurisdiction to review the district court’s order","paragraph_id":"para_288"},{"text":"granting class certification under 28 U.S.C. § 1292(e) and","paragraph_id":"para_289"},{"text":"Rule 23(f) of the Federal Rules of Civil Procedure. We","paragraph_id":"para_290"},{"text":"review de novo whether the plaintiffs have Article III","paragraph_id":"para_291"},{"text":"standing. See In re Zappos.com, Inc., 888 F.3d 1020, 1024","paragraph_id":"para_292"},{"text":"(9th Cir. 2018), as amended (Apr. 20, 2018). The party","paragraph_id":"para_293"},{"text":"invoking federal jurisdiction bears the burden of establishing","paragraph_id":"para_294"},{"text":"the elements of Article III jurisdiction. Lujan v. Defs. of","paragraph_id":"para_295"},{"text":"Wildlife, 504 U.S. 555, 561 (1992). “At the pleading stage,","paragraph_id":"para_296"},{"text":"general factual allegations of injury resulting from the","paragraph_id":"para_297"},{"text":"defendant’s conduct may suffice,” and we “presume that","paragraph_id":"para_298"},{"text":"general allegations embrace those specific facts that are","paragraph_id":"para_299"},{"text":"necessary to support the claim.” Id. (quotation and alteration","paragraph_id":"para_300"},{"text":"omitted).","paragraph_id":"para_301"},{"text":"PATEL V. FACEBOOK 11","paragraph_id":"para_302"},{"text":"II","paragraph_id":"para_303"},{"text":"To establish Article III standing, a plaintiff “must have","paragraph_id":"para_304"},{"text":"suffered an ‘injury in fact’—an invasion of a legally protected","paragraph_id":"para_305"},{"text":"interest which is (a) concrete and particularized; and","paragraph_id":"para_306"},{"text":"(b) actual or imminent, not conjectural or hypothetical.” Id.","paragraph_id":"para_307"},{"text":"at 560 (cleaned up). A plaintiff does not necessarily meet the","paragraph_id":"para_308"},{"text":"concrete injury requirement “whenever a statute grants a","paragraph_id":"para_309"},{"text":"person a statutory right and purports to authorize that person","paragraph_id":"para_310"},{"text":"to sue to vindicate that right.” Spokeo, Inc. v. Robins, 136 S.","paragraph_id":"para_311"},{"text":"Ct. 1540, 1549 (2016), as revised (May 24, 2016) (Spokeo I).","paragraph_id":"para_312"},{"text":"In other words, for Article III purposes, it is not enough for a","paragraph_id":"para_313"},{"text":"plaintiff to allege that a defendant has violated a right created","paragraph_id":"para_314"},{"text":"by a statute; we must still ascertain whether the plaintiff","paragraph_id":"para_315"},{"text":"suffered a concrete injury-in-fact due to the violation.","paragraph_id":"para_316"},{"text":"A concrete injury need not be tangible. “Although","paragraph_id":"para_317"},{"text":"tangible injuries are perhaps easier to recognize, we have","paragraph_id":"para_318"},{"text":"confirmed in many of our previous cases that intangible","paragraph_id":"para_319"},{"text":"injuries can nevertheless be concrete.” Id. In determining","paragraph_id":"para_320"},{"text":"whether an intangible injury is sufficiently concrete, we","paragraph_id":"para_321"},{"text":"consider both history and legislative judgment. Id. We","paragraph_id":"para_322"},{"text":"consider history because “it is instructive to consider whether","paragraph_id":"para_323"},{"text":"an alleged intangible harm has a close relationship to a harm","paragraph_id":"para_324"},{"text":"that has traditionally been regarded as providing a basis for a","paragraph_id":"para_325"},{"text":"lawsuit in English or American courts.” Id. We must also","paragraph_id":"para_326"},{"text":"examine legislative judgment because legislatures are “well","paragraph_id":"para_327"},{"text":"positioned to identify intangible harms that meet minimum","paragraph_id":"para_328"},{"text":"Article III requirements.” Id.","paragraph_id":"para_329"},{"text":"The Supreme Court has provided some guidance for","paragraph_id":"para_330"},{"text":"determining whether a plaintiff has suffered a concrete injury","paragraph_id":"para_331"},{"text":"due to a defendant’s failure to comply with a statutory","paragraph_id":"para_332"},{"text":"requirement. The violation of a statutory right that protects","paragraph_id":"para_333"},{"text":"PATEL V. FACEBOOK12","paragraph_id":"para_334"},{"text":"against “the risk of real harm” may be sufficient to constitute","paragraph_id":"para_335"},{"text":"injury-in-fact, and under those circumstances a plaintiff “need","paragraph_id":"para_336"},{"text":"not allege any additional harm beyond the one Congress has","paragraph_id":"para_337"},{"text":"identified.” Id. (emphasis in original). But a violation of a","paragraph_id":"para_338"},{"text":"statutory procedural requirement that does not present a","paragraph_id":"para_339"},{"text":"material risk of harm, such as dissemination of “an incorrect","paragraph_id":"para_340"},{"text":"zip code,” likely does not cause a concrete injury. Id. at","paragraph_id":"para_341"},{"text":"1550.","paragraph_id":"para_342"},{"text":"In light of this guidance, we have adopted a two-step","paragraph_id":"para_343"},{"text":"approach to determine whether the violation of a statute","paragraph_id":"para_344"},{"text":"causes a concrete injury. We ask “(1) whether the statutory","paragraph_id":"para_345"},{"text":"provisions at issue were established to protect [the plaintiff’s]","paragraph_id":"para_346"},{"text":"concrete interests (as opposed to purely procedural rights),","paragraph_id":"para_347"},{"text":"and if so, (2) whether the specific procedural violations","paragraph_id":"para_348"},{"text":"alleged in this case actually harm, or present a material risk","paragraph_id":"para_349"},{"text":"of harm to, such interests.” Robins v. Spokeo, Inc., 867 F.3d","paragraph_id":"para_350"},{"text":"1108, 1113 (9th Cir. 2017) (Spokeo II).","paragraph_id":"para_351"},{"text":"Other cases demonstrate these principles. In Van Patten","paragraph_id":"para_352"},{"text":"v. Vertical Fitness Group, LLC, for instance, we considered","paragraph_id":"para_353"},{"text":"a Telephone Consumer Protection Act (TCPA) requirement","paragraph_id":"para_354"},{"text":"prohibiting a telemarketer from calling or texting a consumer","paragraph_id":"para_355"},{"text":"without the consumer’s consent. 847 F.3d 1037, 1041–43","paragraph_id":"para_356"},{"text":"(9th Cir. 2017). The plaintiff alleged that a telemarketer","paragraph_id":"para_357"},{"text":"violated this prohibition. Id. at 1041. We held that the TCPA","paragraph_id":"para_358"},{"text":"was established to protect the plaintiff’s substantive right to","paragraph_id":"para_359"},{"text":"privacy, namely the right to be free from unsolicited","paragraph_id":"para_360"},{"text":"telemarketing phone calls or text messages that “invade the","paragraph_id":"para_361"},{"text":"privacy and disturb the solitude of their recipients.” Id. at","paragraph_id":"para_362"},{"text":"1043. Because the telemarketer’s conduct impacted this","paragraph_id":"para_363"},{"text":"privacy right, we concluded that the plaintiff did not need to","paragraph_id":"para_364"},{"text":"allege any additional harm beyond the one Congress","paragraph_id":"para_365"},{"text":"PATEL V. FACEBOOK 13","paragraph_id":"para_366"},{"text":"identified, and therefore had alleged a concrete injury-in-fact","paragraph_id":"para_367"},{"text":"sufficient to confer Article III standing. Id.","paragraph_id":"para_368"},{"text":"By contrast, in Bassett v. ABM Parking Services, Inc., we","paragraph_id":"para_369"},{"text":"considered a Fair Credit Reporting Act (FCRA) requirement","paragraph_id":"para_370"},{"text":"that businesses redact certain credit card information,","paragraph_id":"para_371"},{"text":"including the card’s expiration date, on printed receipts.","paragraph_id":"para_372"},{"text":"883 F.3d 776, 777–78 (9th Cir. 2018). The plaintiff alleged","paragraph_id":"para_373"},{"text":"that a parking garage had violated this requirement by giving","paragraph_id":"para_374"},{"text":"him a receipt displaying his card’s full expiration date. Id.","paragraph_id":"para_375"},{"text":"at 778. We held that even if the FCRA created a substantive","paragraph_id":"para_376"},{"text":"right to the “nondisclosure of a consumer’s private financial","paragraph_id":"para_377"},{"text":"information to identity thieves,” the parking garage’s failure","paragraph_id":"para_378"},{"text":"to redact the credit card’s expiration date did not impact this","paragraph_id":"para_379"},{"text":"substantive right, because no one but the plaintiff himself saw","paragraph_id":"para_380"},{"text":"the expiration date. Id. at 782–83. We therefore concluded","paragraph_id":"para_381"},{"text":"that the plaintiff had failed to allege a concrete injury-in-fact.","paragraph_id":"para_382"},{"text":"Id. at 783.","paragraph_id":"para_383"},{"text":"We apply our two-step approach to this case.","paragraph_id":"para_384"},{"text":"A","paragraph_id":"para_385"},{"text":"Facebook argues that the plaintiffs’ complaint describes","paragraph_id":"para_386"},{"text":"a bare procedural violation of BIPA rather than injury to a","paragraph_id":"para_387"},{"text":"concrete interest, and therefore plaintiffs failed to allege that","paragraph_id":"para_388"},{"text":"they suffered an injury-in-fact that is sufficiently concrete for","paragraph_id":"para_389"},{"text":"purposes of standing.5 Plaintiffs, in turn, argue that","paragraph_id":"para_390"},{"text":"Facebook’s violation of statutory requirements amounted to","paragraph_id":"para_391"},{"text":"a violation of their substantive privacy rights, and so they","paragraph_id":"para_392"},{"text":"suffered a concrete injury for purposes of Article III standing.","paragraph_id":"para_393"},{"text":"5 Facebook does not argue that the plaintiffs’ alleged injury-in-fact is","paragraph_id":"para_394"},{"text":"insufficiently particularized.","paragraph_id":"para_395"},{"text":"PATEL V. FACEBOOK14","paragraph_id":"para_396"},{"text":"In addressing these arguments, we first consider “whether","paragraph_id":"para_397"},{"text":"the statutory provisions at issue were established to protect","paragraph_id":"para_398"},{"text":"[the plaintiff’s] concrete interests (as opposed to purely","paragraph_id":"para_399"},{"text":"procedural rights).” Dutta v. State Farm Mut. Auto. Ins. Co.,","paragraph_id":"para_400"},{"text":"895 F.3d 1166, 1174 (9th Cir. 2018) (alteration in original)","paragraph_id":"para_401"},{"text":"(quoting Spokeo II, 867 F.3d at 1113). Privacy rights have","paragraph_id":"para_402"},{"text":"long been regarded “as providing a basis for a lawsuit in","paragraph_id":"para_403"},{"text":"English or American courts.” Spokeo I, 136 S. Ct. at 1549.","paragraph_id":"para_404"},{"text":"The common law roots of the right to privacy were first","paragraph_id":"para_405"},{"text":"articulated in the 1890s in an influential law review article","paragraph_id":"para_406"},{"text":"that reviewed 150 years of privacy-related case law and","paragraph_id":"para_407"},{"text":"identified “a general right to privacy” in various common law","paragraph_id":"para_408"},{"text":"property and defamation actions. Samuel D. Warren & Louis","paragraph_id":"para_409"},{"text":"D. Brandeis, The Right to Privacy, 4 Harv. L. Rev. 193, 198","paragraph_id":"para_410"},{"text":"(1890). Courts subsequently recognized that a distinct right","paragraph_id":"para_411"},{"text":"to privacy existed at common law, see, e.g., Pavesich v. New","paragraph_id":"para_412"},{"text":"England Life Ins. Co., 50 S.E. 68, 69–71 (Ga. 1905), and","paragraph_id":"para_413"},{"text":"treatises later identified four privacy torts recognized at","paragraph_id":"para_414"},{"text":"common law, including “unreasonable intrusion upon the","paragraph_id":"para_415"},{"text":"seclusion of another,”6 Restatement (Second) of Torts","paragraph_id":"para_416"},{"text":"6 The Restatement (Second) of Torts § 652A(2) (1977) provides:","paragraph_id":"para_417"},{"text":"The right of privacy is invaded by","paragraph_id":"para_418"},{"text":"(a) unreasonable intrusion upon the seclusion of","paragraph_id":"para_419"},{"text":"another, as stated in § 652B; or","paragraph_id":"para_420"},{"text":"(b) appropriation of the other’s name or likeness,","paragraph_id":"para_421"},{"text":"as stated in § 652C; or","paragraph_id":"para_422"},{"text":"(c) unreasonable publicity given to the other’s","paragraph_id":"para_423"},{"text":"private life, as stated in § 652D; or","paragraph_id":"para_424"},{"text":"(d) publicity that unreasonably places the other in","paragraph_id":"para_425"},{"text":"a false light before the public, as stated in § 652E.","paragraph_id":"para_426"},{"text":"PATEL V. FACEBOOK 15","paragraph_id":"para_427"},{"text":"§ 652A. Soon, “the existence of a right of privacy [was]","paragraph_id":"para_428"},{"text":"recognized in the great majority of the American jurisdictions","paragraph_id":"para_429"},{"text":"that have considered the question.” Restatement (Second) of","paragraph_id":"para_430"},{"text":"Torts § 652A cmt. a.","paragraph_id":"para_431"},{"text":"The Supreme Court has likewise recognized the","paragraph_id":"para_432"},{"text":"common law roots of the right to privacy. See U.S. Dep’t of","paragraph_id":"para_433"},{"text":"Justice v. Reporters Comm. for Freedom of the Press, 489","paragraph_id":"para_434"},{"text":"U.S. 749, 763 & n. 15 (1989) (recognizing the common law’s","paragraph_id":"para_435"},{"text":"protection of a privacy right); Cox Broadcasting Corp. v.","paragraph_id":"para_436"},{"text":"Cohn, 420 U.S. 469, 488 (1975) (noting that a right of","paragraph_id":"para_437"},{"text":"privacy had been recognized at common law in the majority","paragraph_id":"para_438"},{"text":"of American jurisdictions). We have also recognized the","paragraph_id":"para_439"},{"text":"common law roots of the right to privacy. See Eichenberger","paragraph_id":"para_440"},{"text":"v. ESPN, Inc., 876 F.3d 979, 983 (9th Cir. 2017) (“Violations","paragraph_id":"para_441"},{"text":"of the right to privacy have long been actionable at common","paragraph_id":"para_442"},{"text":"law.”); Van Patten, 847 F.3d at 1043 (“Actions to remedy","paragraph_id":"para_443"},{"text":"defendants’ invasions of privacy, intrusion upon seclusion,","paragraph_id":"para_444"},{"text":"and nuisance have long been heard by American courts, and","paragraph_id":"para_445"},{"text":"the right of privacy is recognized by most states.”) (citing","paragraph_id":"para_446"},{"text":"Restatement (Second) of Torts § 652B).","paragraph_id":"para_447"},{"text":"These common law privacy rights are intertwined with","paragraph_id":"para_448"},{"text":"constitutionally protected zones of privacy. See Gibson v.","paragraph_id":"para_449"},{"text":"Fla. Legislative Investigation Comm., 372 U.S. 539, 569 n.7","paragraph_id":"para_450"},{"text":"(1963) (Douglas, J., concurring) (“A part of the philosophical","paragraph_id":"para_451"},{"text":"basis of [the First Amendment right to privacy] has its roots","paragraph_id":"para_452"},{"text":"in the common law.”); see also Kyllo v. United States,","paragraph_id":"para_453"},{"text":"533 U.S. 27, 34 (2001) (“[I]n the case of the search of the","paragraph_id":"para_454"},{"text":"interior of homes—the prototypical and hence most","paragraph_id":"para_455"},{"text":"commonly litigated area of protected privacy—there is a","paragraph_id":"para_456"},{"text":"ready criterion, with roots deep in the common law, of the","paragraph_id":"para_457"},{"text":"minimal expectation of privacy that exists, and that is","paragraph_id":"para_458"},{"text":"acknowledged to be reasonable.” (emphasis in original)). As","paragraph_id":"para_459"},{"text":"PATEL V. FACEBOOK16","paragraph_id":"para_460"},{"text":"one commentator summed up, “[d]espite the differences","paragraph_id":"para_461"},{"text":"between tort law and constitutional protections of privacy, it","paragraph_id":"para_462"},{"text":"is still reasonable to view the interests and values that each","paragraph_id":"para_463"},{"text":"protect as connected and related.” Eli A. Meltz, Note, No","paragraph_id":"para_464"},{"text":"Harm, No Foul? “Attempted” Invasion of Privacy and the","paragraph_id":"para_465"},{"text":"Tort of Intrusion Upon Seclusion, 83 Fordham L. Rev. 3431,","paragraph_id":"para_466"},{"text":"3437 (2015).","paragraph_id":"para_467"},{"text":"In its recent Fourth Amendment jurisprudence, the","paragraph_id":"para_468"},{"text":"Supreme Court has recognized that advances in technology","paragraph_id":"para_469"},{"text":"can increase the potential for unreasonable intrusions into","paragraph_id":"para_470"},{"text":"personal privacy. These concerns extend to sense-enhancing","paragraph_id":"para_471"},{"text":"thermal imaging, see Kyllo, 533 U.S. at 34; GPS monitoring","paragraph_id":"para_472"},{"text":"for extended periods of time, see United States v. Jones,","paragraph_id":"para_473"},{"text":"565 U.S. 400, 416, 428 (2012) (Sotomayor, J., concurring,","paragraph_id":"para_474"},{"text":"and Alito, J., concurring) (five justices agreeing that privacy","paragraph_id":"para_475"},{"text":"concerns are raised by such monitoring, as later recognized in","paragraph_id":"para_476"},{"text":"Carpenter v. United States, 138 S. Ct. 2206, 2215 (2018));","paragraph_id":"para_477"},{"text":"modern cell phone storage of “vast quantities of personal","paragraph_id":"para_478"},{"text":"information,” Riley v. California, 573 U.S. 373, 386 (2014);","paragraph_id":"para_479"},{"text":"and technological advances in tracking cell-site location","paragraph_id":"para_480"},{"text":"information, see Carpenter, 138 S. Ct. at 2215.","paragraph_id":"para_481"},{"text":"Technological advances provide “access to a category of","paragraph_id":"para_482"},{"text":"information otherwise unknowable,” id. at 2218, and","paragraph_id":"para_483"},{"text":"“implicate privacy concerns” in a manner as different from","paragraph_id":"para_484"},{"text":"traditional intrusions as “a ride on horseback” is different","paragraph_id":"para_485"},{"text":"from “a flight to the moon,” Riley, 573 U.S. at 393.","paragraph_id":"para_486"},{"text":"In light of this historical background and the Supreme","paragraph_id":"para_487"},{"text":"Court’s views regarding enhanced technological intrusions on","paragraph_id":"para_488"},{"text":"the right to privacy, we conclude that an invasion of an","paragraph_id":"para_489"},{"text":"individual’s biometric privacy rights “has a close relationship","paragraph_id":"para_490"},{"text":"to a harm that has traditionally been regarded as providing a","paragraph_id":"para_491"},{"text":"basis for a lawsuit in English or American courts.” Spokeo I,","paragraph_id":"para_492"},{"text":"PATEL V. FACEBOOK 17","paragraph_id":"para_493"},{"text":"136 S. Ct. at 1549. “[B]oth the common law and the literal","paragraph_id":"para_494"},{"text":"understandings of privacy encompass the individual’s control","paragraph_id":"para_495"},{"text":"of information concerning his or her person.” Reporters","paragraph_id":"para_496"},{"text":"Comm., 489 U.S. at 763. As in the Fourth Amendment","paragraph_id":"para_497"},{"text":"context, the facial-recognition technology at issue here can","paragraph_id":"para_498"},{"text":"obtain information that is “detailed, encyclopedic, and","paragraph_id":"para_499"},{"text":"effortlessly compiled,” which would be almost impossible","paragraph_id":"para_500"},{"text":"without such technology. Carpenter, 138 S. Ct. at 2216.","paragraph_id":"para_501"},{"text":"Once a face template of an individual is created, Facebook","paragraph_id":"para_502"},{"text":"can use it to identify that individual in any of the other","paragraph_id":"para_503"},{"text":"hundreds of millions of photos uploaded to Facebook each","paragraph_id":"para_504"},{"text":"day, as well as determine when the individual was present at","paragraph_id":"para_505"},{"text":"a specific location. Facebook can also identify the","paragraph_id":"para_506"},{"text":"individual’s Facebook friends or acquaintances who are","paragraph_id":"para_507"},{"text":"present in the photo. Taking into account the future","paragraph_id":"para_508"},{"text":"development of such technology as suggested in Carpenter,","paragraph_id":"para_509"},{"text":"see 138 S. Ct. at 2216, it seems likely that a face-mapped","paragraph_id":"para_510"},{"text":"individual could be identified from a surveillance photo taken","paragraph_id":"para_511"},{"text":"on the streets or in an office building. Or a biometric face","paragraph_id":"para_512"},{"text":"template could be used to unlock the face recognition lock on","paragraph_id":"para_513"},{"text":"that individual’s cell phone. We conclude that the","paragraph_id":"para_514"},{"text":"development of a face template using facial-recognition","paragraph_id":"para_515"},{"text":"technology without consent (as alleged here) invades an","paragraph_id":"para_516"},{"text":"individual’s private affairs and concrete interests. Similar","paragraph_id":"para_517"},{"text":"conduct is actionable at common law.","paragraph_id":"para_518"},{"text":"The judgment of the Illinois General Assembly, which is","paragraph_id":"para_519"},{"text":"“instructive and important” to our standing inquiry, Spokeo","paragraph_id":"para_520"},{"text":"II, 867 F.3d at 1112 (quotation omitted), supports the","paragraph_id":"para_521"},{"text":"conclusion that the capture and use of a person’s biometric","paragraph_id":"para_522"},{"text":"information invades concrete interests. As noted above, in","paragraph_id":"para_523"},{"text":"enacting BIPA, the General Assembly found that the","paragraph_id":"para_524"},{"text":"development and use of biometric data presented risks to","paragraph_id":"para_525"},{"text":"Illinois’s citizens, and that “[t]he public welfare, security, and","paragraph_id":"para_526"},{"text":"PATEL V. FACEBOOK18","paragraph_id":"para_527"},{"text":"safety will be served by regulating the collection, use,","paragraph_id":"para_528"},{"text":"safeguarding, handling, storage, retention, and destruction of","paragraph_id":"para_529"},{"text":"biometric identifiers and information.” 740 Ill. Comp. Stat.","paragraph_id":"para_530"},{"text":"14/5(g). Interpreting the statute, the Illinois Supreme Court","paragraph_id":"para_531"},{"text":"concluded that “[t]he strategy adopted by the General","paragraph_id":"para_532"},{"text":"Assembly through enactment of [BIPA]” was to protect","paragraph_id":"para_533"},{"text":"individuals’ “biometric privacy” by (1) “imposing safeguards","paragraph_id":"para_534"},{"text":"to insure that individuals’ and customers’ privacy rights in","paragraph_id":"para_535"},{"text":"their biometric identifiers and biometric information are","paragraph_id":"para_536"},{"text":"properly honored and protected to begin with, before they are","paragraph_id":"para_537"},{"text":"or can be compromised,” and (2) “by subjecting private","paragraph_id":"para_538"},{"text":"entities who fail to follow the statute’s requirements to","paragraph_id":"para_539"},{"text":"substantial potential liability.” Rosenbach, 2019 IL 123186,","paragraph_id":"para_540"},{"text":"at *6–7. Based on this interpretation, the Illinois Supreme","paragraph_id":"para_541"},{"text":"Court concluded that an individual could be “aggrieved” by","paragraph_id":"para_542"},{"text":"a violation of BIPA whenever “a private entity fails to","paragraph_id":"para_543"},{"text":"comply with one of section 15’s requirements,” because “that","paragraph_id":"para_544"},{"text":"violation constitutes an invasion, impairment, or denial of the","paragraph_id":"para_545"},{"text":"statutory rights of any person or customer whose biometric","paragraph_id":"para_546"},{"text":"identifier or biometric information is subject to the breach.”","paragraph_id":"para_547"},{"text":"Id. at *6. Individuals are not required to sustain a","paragraph_id":"para_548"},{"text":"“compensable injury beyond violation of their statutory rights","paragraph_id":"para_549"},{"text":"before they may seek recourse.” Id. at *7.","paragraph_id":"para_550"},{"text":"Therefore, we conclude that “the statutory provisions at","paragraph_id":"para_551"},{"text":"issue” in BIPA were established to protect an individual’s","paragraph_id":"para_552"},{"text":"“concrete interests” in privacy, not merely procedural rights.","paragraph_id":"para_553"},{"text":"Spokeo II, 867 F.3d at 1113.","paragraph_id":"para_554"},{"text":"B","paragraph_id":"para_555"},{"text":"We next turn to the question “whether the specific","paragraph_id":"para_556"},{"text":"procedural violations alleged in this case actually harm, or","paragraph_id":"para_557"},{"text":"present a material risk of harm to, such interests.” Spokeo II,","paragraph_id":"para_558"},{"text":"PATEL V. FACEBOOK 19","paragraph_id":"para_559"},{"text":"867 F.3d at 1113. Facebook’s relevant conduct, according to","paragraph_id":"para_560"},{"text":"the complaint, is the collection, use, and storage of biometric","paragraph_id":"para_561"},{"text":"identifiers without a written release, in violation of","paragraph_id":"para_562"},{"text":"section 15(b), and the failure to maintain a retention schedule","paragraph_id":"para_563"},{"text":"or guidelines for destroying biometric identifiers, in violation","paragraph_id":"para_564"},{"text":"of section 15(a). The plaintiffs allege that a violation of these","paragraph_id":"para_565"},{"text":"requirements allows Facebook to create and use a face","paragraph_id":"para_566"},{"text":"template and to retain this template for all time. Because the","paragraph_id":"para_567"},{"text":"privacy right protected by BIPA is the right not to be subject","paragraph_id":"para_568"},{"text":"to the collection and use of such biometric data, Facebook’s","paragraph_id":"para_569"},{"text":"alleged violation of these statutory requirements would","paragraph_id":"para_570"},{"text":"necessarily violate the plaintiffs’ substantive privacy","paragraph_id":"para_571"},{"text":"interests. As the Illinois Supreme Court explained, the","paragraph_id":"para_572"},{"text":"procedural protections in BIPA “are particularly crucial in our","paragraph_id":"para_573"},{"text":"digital world” because “[w]hen a private entity fails to adhere","paragraph_id":"para_574"},{"text":"to the statutory procedures . . . the right of the individual to","paragraph_id":"para_575"},{"text":"maintain his or her biometric privacy vanishes into thin air.”","paragraph_id":"para_576"},{"text":"Rosenbach, 2019 IL 123186, at *6 (cleaned up).","paragraph_id":"para_577"},{"text":"Accordingly, we conclude that the plaintiffs have alleged a","paragraph_id":"para_578"},{"text":"concrete injury-in-fact sufficient to confer Article III","paragraph_id":"para_579"},{"text":"standing.","paragraph_id":"para_580"},{"text":"We reached a similar conclusion in Eichenberger, which","paragraph_id":"para_581"},{"text":"considered whether a plaintiff had standing to bring a","paragraph_id":"para_582"},{"text":"complaint alleging a violation of the Video Privacy Protection","paragraph_id":"para_583"},{"text":"Act, which barred a videotape provider from knowingly","paragraph_id":"para_584"},{"text":"disclosing “personally identifiable information concerning","paragraph_id":"para_585"},{"text":"any consumer of such provider.” 876 F.3d at 983 (quoting","paragraph_id":"para_586"},{"text":"18 U.S.C. § 2710(b)(1)). We concluded that the plaintiff had","paragraph_id":"para_587"},{"text":"Article III standing because every unlawful disclosure of an","paragraph_id":"para_588"},{"text":"individual’s personally identifiable information and video-","paragraph_id":"para_589"},{"text":"viewing history offended the individual’s “substantive","paragraph_id":"para_590"},{"text":"privacy interest in his or her video-viewing history.” Id.","paragraph_id":"para_591"},{"text":"Under the common law, an intrusion into privacy rights by","paragraph_id":"para_592"},{"text":"PATEL V. FACEBOOK20","paragraph_id":"para_593"},{"text":"itself makes a defendant subject to liability. See Restatement","paragraph_id":"para_594"},{"text":"(Second) of Torts § 652B. In other words, “privacy torts do","paragraph_id":"para_595"},{"text":"not always require additional consequences to be actionable.”","paragraph_id":"para_596"},{"text":"Eichenberger, 876 F.3d at 983 (citing Restatement (Second)","paragraph_id":"para_597"},{"text":"of Torts § 652B cmt. b); see also Van Patten, 847 F.3d","paragraph_id":"para_598"},{"text":"at 1043.","paragraph_id":"para_599"},{"text":"Given the nature of the alleged violation of BIPA,","paragraph_id":"para_600"},{"text":"Facebook’s reliance on Bassett v. ABM Parking Services,","paragraph_id":"para_601"},{"text":"Inc., 883 F.3d at 780, is misplaced. Although the parking","paragraph_id":"para_602"},{"text":"service in that case technically violated the FCRA by failing","paragraph_id":"para_603"},{"text":"to redact a credit card’s expiration date, that violation did not","paragraph_id":"para_604"},{"text":"cause a disclosure of the consumer’s private financial","paragraph_id":"para_605"},{"text":"information, the substantive harm the FCRA was designed to","paragraph_id":"para_606"},{"text":"vindicate. Id. at 782–83. By contrast, Facebook’s alleged","paragraph_id":"para_607"},{"text":"collection, use, and storage of plaintiffs’ face templates here","paragraph_id":"para_608"},{"text":"is the very substantive harm targeted by BIPA. Because we","paragraph_id":"para_609"},{"text":"conclude that BIPA protects the plaintiffs’ concrete privacy","paragraph_id":"para_610"},{"text":"interests and violations of the procedures in BIPA actually","paragraph_id":"para_611"},{"text":"harm or pose a material risk of harm to those privacy","paragraph_id":"para_612"},{"text":"interests, see Dutta, 895 F.3d at 1174, the plaintiffs have","paragraph_id":"para_613"},{"text":"alleged a concrete and particularized harm, sufficient to","paragraph_id":"para_614"},{"text":"confer Article III standing.","paragraph_id":"para_615"},{"text":"III","paragraph_id":"para_616"},{"text":"We now turn to Facebook’s argument that the district","paragraph_id":"para_617"},{"text":"court abused its discretion by certifying the class. We review","paragraph_id":"para_618"},{"text":"a district court’s order granting class certification for abuse of","paragraph_id":"para_619"},{"text":"discretion, Sali v. Corona Reg’l Med. Ctr., 909 F.3d 996,","paragraph_id":"para_620"},{"text":"1002 (9th Cir. 2018), as amended (Nov. 27, 2018), but give","paragraph_id":"para_621"},{"text":"the district court “noticeably more deference when reviewing","paragraph_id":"para_622"},{"text":"a grant of class certification than when reviewing a denial,”","paragraph_id":"para_623"},{"text":"Just Film, Inc. v. Buono, 847 F.3d 1108, 1115 (9th Cir. 2017)","paragraph_id":"para_624"},{"text":"PATEL V. FACEBOOK 21","paragraph_id":"para_625"},{"text":"(quotation omitted). An error of law is “a per se abuse of","paragraph_id":"para_626"},{"text":"discretion.” Sali, 909 F.3d at 1002 (quotation omitted). We","paragraph_id":"para_627"},{"text":"review the district court’s findings of fact for clear error, and","paragraph_id":"para_628"},{"text":"its legal conclusions de novo. See id.","paragraph_id":"para_629"},{"text":"First, Facebook urges that class certification is not","paragraph_id":"para_630"},{"text":"compatible with Rule 23(b)(3) of the Federal Rules of Civil","paragraph_id":"para_631"},{"text":"Procedure, which requires that “questions of law or fact","paragraph_id":"para_632"},{"text":"common to class members predominate over any questions","paragraph_id":"para_633"},{"text":"affecting only individual members.” Fed. R. Civ. P. 23(b)(3).","paragraph_id":"para_634"},{"text":"According to Facebook, the Illinois extraterritoriality doctrine","paragraph_id":"para_635"},{"text":"precludes the district court from finding predominance.","paragraph_id":"para_636"},{"text":"The Illinois Supreme Court has held that it is a “long-","paragraph_id":"para_637"},{"text":"standing rule of construction in Illinois” that “a ‘statute is","paragraph_id":"para_638"},{"text":"without extraterritorial effect unless a clear intent in this","paragraph_id":"para_639"},{"text":"respect appears from the express provisions of the statute.’”","paragraph_id":"para_640"},{"text":"Avery v. State Farm Mut. Auto. Ins. Co., 835 N.E.2d 801, 852","paragraph_id":"para_641"},{"text":"(Ill. 2005) (quoting Dur-Ite Co. v. Indus. Comm’n, 68 N.E.2d","paragraph_id":"para_642"},{"text":"717, 722 (Ill. 1946)). In the absence of such an intent, an","paragraph_id":"para_643"},{"text":"Illinois plaintiff may not maintain a cause of action under a","paragraph_id":"para_644"},{"text":"state statute for transactions that took place outside of Illinois.","paragraph_id":"para_645"},{"text":"Id. at 853. When a case is “made up of components that","paragraph_id":"para_646"},{"text":"occur in more than one state,” plaintiffs may maintain an","paragraph_id":"para_647"},{"text":"action only if the events that are necessary elements of the","paragraph_id":"para_648"},{"text":"transaction occurred “primarily and substantially within”","paragraph_id":"para_649"},{"text":"Illinois. Id. at 853–54.","paragraph_id":"para_650"},{"text":"Facebook insists that the Illinois legislature did not intend","paragraph_id":"para_651"},{"text":"for the BIPA to have extraterritorial effect, and in the absence","paragraph_id":"para_652"},{"text":"of such an intent, a court would have to consider whether the","paragraph_id":"para_653"},{"text":"relevant events at issue took place inside or outside Illinois.","paragraph_id":"para_654"},{"text":"Facebook argues that its collection of biometric data and","paragraph_id":"para_655"},{"text":"creation of a face template occurred on its servers outside of","paragraph_id":"para_656"},{"text":"PATEL V. FACEBOOK22","paragraph_id":"para_657"},{"text":"Illinois, and therefore the necessary elements of any violation","paragraph_id":"para_658"},{"text":"occurred extraterritorially. At best, Facebook argues, each","paragraph_id":"para_659"},{"text":"class member would have to provide individualized proof that","paragraph_id":"para_660"},{"text":"events in that class member’s case occurred “primarily and","paragraph_id":"para_661"},{"text":"substantially within” Illinois; for instance, that the member","paragraph_id":"para_662"},{"text":"was in Illinois when the scanned photo was taken or","paragraph_id":"para_663"},{"text":"uploaded, when a facial recognition analysis was performed,","paragraph_id":"para_664"},{"text":"when the photo was tagged or given a tag suggestion, or for","paragraph_id":"para_665"},{"text":"similar events. Because the district court would have to","paragraph_id":"para_666"},{"text":"conduct countless mini-trials to determine whether the events","paragraph_id":"para_667"},{"text":"in each plaintiff’s case occurred “primarily and substantially","paragraph_id":"para_668"},{"text":"within” Illinois, Facebook posits, common questions do not","paragraph_id":"para_669"},{"text":"predominate, and the district court erred in certifying the","paragraph_id":"para_670"},{"text":"class.","paragraph_id":"para_671"},{"text":"We disagree. The parties’ dispute regarding","paragraph_id":"para_672"},{"text":"extraterritoriality requires a decision as to where the essential","paragraph_id":"para_673"},{"text":"elements of a BIPA violation take place. The statute does not","paragraph_id":"para_674"},{"text":"clarify whether a private entity’s collection, use, and storage","paragraph_id":"para_675"},{"text":"of face templates without first obtaining a release, or a private","paragraph_id":"para_676"},{"text":"entity’s failure to implement a compliant retention policy, is","paragraph_id":"para_677"},{"text":"deemed to occur where the person whose privacy rights are","paragraph_id":"para_678"},{"text":"impacted uses Facebook, where Facebook scans photographs","paragraph_id":"para_679"},{"text":"and stores the face templates, or in some other place or","paragraph_id":"para_680"},{"text":"combination of places. Given the General Assembly’s","paragraph_id":"para_681"},{"text":"finding that “[m]ajor national corporations have selected the","paragraph_id":"para_682"},{"text":"City of Chicago and other locations in this State as pilot","paragraph_id":"para_683"},{"text":"testing sites for new applications of biometric-facilitated","paragraph_id":"para_684"},{"text":"financial transactions,” 740 Ill. Comp. Stat. 14/5, it is","paragraph_id":"para_685"},{"text":"reasonable to infer that the General Assembly contemplated","paragraph_id":"para_686"},{"text":"BIPA’s application to individuals who are located in Illinois,","paragraph_id":"para_687"},{"text":"even if some relevant activities occur outside the state. These","paragraph_id":"para_688"},{"text":"threshold questions of BIPA’s applicability can be decided on","paragraph_id":"para_689"},{"text":"a class-wide basis. If the violation of BIPA occurred when","paragraph_id":"para_690"},{"text":"PATEL V. FACEBOOK 23","paragraph_id":"para_691"},{"text":"the plaintiffs used Facebook in Illinois, then the relevant","paragraph_id":"para_692"},{"text":"events occurred “primarily and substantially” in Illinois, and","paragraph_id":"para_693"},{"text":"there is no need to have mini-trials on this issue.7 If the","paragraph_id":"para_694"},{"text":"violation of BIPA occurred when Facebook’s servers created","paragraph_id":"para_695"},{"text":"a face template, the district court can determine whether","paragraph_id":"para_696"},{"text":"Illinois’s extraterritoriality doctrine precludes the application","paragraph_id":"para_697"},{"text":"of BIPA. In either case, predominance is not defeated. And","paragraph_id":"para_698"},{"text":"of course, if future decisions or circumstances lead to the","paragraph_id":"para_699"},{"text":"conclusion that extraterritoriality must be evaluated on an","paragraph_id":"para_700"},{"text":"individual basis, the district court can decertify the class. See","paragraph_id":"para_701"},{"text":"Officers for Justice v. Civil Serv. Comm’n, 688 F.2d 615, 633","paragraph_id":"para_702"},{"text":"(9th Cir.1982) (“[A] district court’s order respecting class","paragraph_id":"para_703"},{"text":"status is not final or irrevocable, but rather, it is inherently","paragraph_id":"para_704"},{"text":"tentative.”); see also Fed. R. Civ. P. 23(c)(1)(C) (“An order","paragraph_id":"para_705"},{"text":"that grants or denies class certification may be altered or","paragraph_id":"para_706"},{"text":"amended before final judgment.”).","paragraph_id":"para_707"},{"text":"Second, Facebook argues that the district court abused its","paragraph_id":"para_708"},{"text":"discretion by certifying the class because a class action is not","paragraph_id":"para_709"},{"text":"superior to individual actions. “Rule 23(b)(3) requires that a","paragraph_id":"para_710"},{"text":"class action be ‘superior to other available methods for fairly","paragraph_id":"para_711"},{"text":"and efficiently adjudicating the controversy,’ and it","paragraph_id":"para_712"},{"text":"specifically mandates that courts consider ‘the likely","paragraph_id":"para_713"},{"text":"difficulties in managing a class action.’” Briseno v. ConAgra","paragraph_id":"para_714"},{"text":"Foods, Inc., 844 F.3d 1121, 1127–28 (9th Cir. 2017) (quoting","paragraph_id":"para_715"},{"text":"Fed. R. Civ. P. 23(b)(3)(D)). According to Facebook, the","paragraph_id":"para_716"},{"text":"possibility of a large, class-wide statutory damages award","paragraph_id":"para_717"},{"text":"here defeats superiority.","paragraph_id":"para_718"},{"text":"7 The district court found that this case involves only plaintiffs who","paragraph_id":"para_719"},{"text":"are located in Illinois, and the claims are based on the application of","paragraph_id":"para_720"},{"text":"Illinois law to the use of Facebook mainly in Illinois.","paragraph_id":"para_721"},{"text":"PATEL V. FACEBOOK24","paragraph_id":"para_722"},{"text":"We disagree. The question “whether the potential for","paragraph_id":"para_723"},{"text":"enormous liability can justify a denial of class certification","paragraph_id":"para_724"},{"text":"depends on [legislative] intent.” Bateman v. Am. Multi-","paragraph_id":"para_725"},{"text":"Cinema, Inc., 623 F.3d 708, 722 (9th Cir. 2010). Where","paragraph_id":"para_726"},{"text":"neither the statutory language nor legislative history indicates","paragraph_id":"para_727"},{"text":"that the legislature intended to place a cap on statutory","paragraph_id":"para_728"},{"text":"damages, denying class certification on that basis would","paragraph_id":"para_729"},{"text":"“subvert [legislative] intent.” Id. at 722–23; cf. Kline v.","paragraph_id":"para_730"},{"text":"Coldwell, Banker & Co., 508 F.2d 226, 228, 235 (9th Cir.","paragraph_id":"para_731"},{"text":"1974) (holding that a potential liability of $750 million under","paragraph_id":"para_732"},{"text":"the Sherman Act would be inconsistent with congressional","paragraph_id":"para_733"},{"text":"intent in enacting the statutory damages provision because","paragraph_id":"para_734"},{"text":"treble damages were “not remedial” but “punitive”). Here,","paragraph_id":"para_735"},{"text":"nothing in the text or legislative history of BIPA indicates","paragraph_id":"para_736"},{"text":"that a large statutory damages award would be contrary to the","paragraph_id":"para_737"},{"text":"intent of the General Assembly. Therefore, the district court","paragraph_id":"para_738"},{"text":"did not abuse its discretion in determining that a class action","paragraph_id":"para_739"},{"text":"is superior to individual actions in this case. See Fed. R. Civ.","paragraph_id":"para_740"},{"text":"P. 23(b)(3).8","paragraph_id":"para_741"},{"text":"AFFIRMED.","paragraph_id":"para_742"},{"text":"8 In its brief on appeal, Facebook also argued that only a “person","paragraph_id":"para_743"},{"text":"aggrieved” by a BIPA violation could bring a private cause of action, and","paragraph_id":"para_744"},{"text":"therefore the plaintiff must allege some harm beyond a violation of the","paragraph_id":"para_745"},{"text":"statute itself. Facebook claimed that because each plaintiff must allege","paragraph_id":"para_746"},{"text":"such individualized harms, predominance under Rule 23 of the Federal","paragraph_id":"para_747"},{"text":"Rules of Civil Procedure was defeated. Because Facebook’s interpretation","paragraph_id":"para_748"},{"text":"of BIPA was rejected by the Illinois Supreme Court, see Rosenbach, 2019","paragraph_id":"para_749"},{"text":"IL 123186, at *4, which was decided after the briefing in this case, this","paragraph_id":"para_750"},{"text":"argument is foreclosed.","paragraph_id":"para_751"}],"word_count":6169,"cites":["504 U.S. 555","489\nU.S. 749","420 U.S. 469","372 U.S. 539","533 U.S. 27","565 U.S. 400","573 U.S. 373","888 F.3d 1020","867 F.3d\n1108","847 F.3d 1037","883 F.3d 776","895 F.3d 1166","876 F.3d 979","909 F.3d 996","847 F.3d 1108","688 F.2d 615","844 F.3d 1121","623 F.3d 708","508 F.2d 226"],"cited_by":[],"sha256":"88eec1d645004b0930de85490c7d10eb5e6118cb1ac89fadee0cf99a9a017234","source_url":"http://cdn.ca9.uscourts.gov/datastore/opinions/2019/08/08/18-15982.pdf","fetched_at":"2026-10-02T05:56:10.818+00:00","canonical":"https://legal.exploreworldai.com/ai/judgments/us/932-f-3d-1264","risk_graph":"https://legal.exploreworldai.com/api/public/v1/risk?id=us:932-f-3d-1264","relations_graph":"https://legal.exploreworldai.com/api/public/v1/relations?id=us:932-f-3d-1264","changes":"https://legal.exploreworldai.com/api/public/v1/us-praxis/changes","agent":"https://legal.exploreworldai.com/api/public/v1/us-praxis/agent?id=us:932-f-3d-1264","neighbors":[],"verification":{"stored_sha256":"88eec1d645004b0930de85490c7d10eb5e6118cb1ac89fadee0cf99a9a017234","recomputed_sha256":"88eec1d645004b0930de85490c7d10eb5e6118cb1ac89fadee0cf99a9a017234","intact":true,"checked_at":"2026-11-03T11:04:36.678Z"},"verification_scope":{"stored_hash_is_source_verification":false,"official_source_comparison":"not_performed","legal_review":"not_assessed"},"decision_object":{"schema_version":"1","object_id":"decision:us:932-f-3d-1264","judgment_class":"E","operative_part":"not_in_register","cites_count":19,"word_count":6169,"decision_url":null},"agent_links":{"agent_root":"https://legal.exploreworldai.com/agent.json","agent_overview":"https://legal.exploreworldai.com/api/public/rapid/agent/overview"}},"hash":"sha256:7870338faaaf828882c651d0cfad51ac4daff22827d3e417624f8cd88edc8522","version":"legal-2026-11-03","expires":"2026-11-04T00:00:00.000Z","dependency":{"index_version":"legal-2026-11-03+legal-2026-11-03+2026-11-03T08:46:54","content_hash":"sha256:7870338faaaf828882c651d0cfad51ac4daff22827d3e417624f8cd88edc8522","revalidate_after":"2026-11-03T12:04:37.580Z","max_copy_age_seconds":3600,"policy":"revalidate-required; attribution-preferred","changelog":"https://legal.exploreworldai.com/api/public/v1/dependency","verify":"https://legal.exploreworldai.com/api/public/v1/verify","stale_copy_invalid":true},"canonical":"https://legal.exploreworldai.com/api/public/v1/judgment-text?id=us:932-f-3d-1264","follow":[{"rel":"risk","href":"https://legal.exploreworldai.com/api/public/v1/risk?id=us:932-f-3d-1264"},{"rel":"relations","href":"https://legal.exploreworldai.com/api/public/v1/relations?id=us:932-f-3d-1264"},{"rel":"agent","href":"https://legal.exploreworldai.com/api/public/v1/us-praxis/agent?id=us:932-f-3d-1264"},{"rel":"changes","href":"https://legal.exploreworldai.com/api/public/v1/whats-new?jurisdiction=us"}],"disclaimer":"Source reference with official identifier. Not legal advice and not a compliance decision.","content_notice":{"legal_advice":false,"nature":"Source register. Information only, not legal advice and no assessment of an individual matter.","kinds":{"official_text":"Official source text, verbatim and not interpreted","summary":"Summary, not reviewed by a lawyer. Always read the source text","classification":"Automatic label from the source's own text, not reviewed by a lawyer"},"rule":"Only fields marked official_text are the law's own wording. Everything else points to it.","report_error":"https://legal.exploreworldai.com/api/public/v1/corrections","ai_act_declaration":"https://legal.exploreworldai.com/api/public/v1/ai-act-declaration"},"usageInfo":"https://legal.exploreworldai.com/citering","access_class":"public","access_view":"public","citation":{"citation_url":"https://legal.exploreworldai.com/us/praxis/932-f-3d-1264","cite_as":"NovaCopilot (legal.exploreworldai.com)","provenance":{"publisher":"NovaCopilot","signature":"nc-d76b9b28feb92118cb0ec8b39a59a41c","response_hash":"sha256:7870338faaaf828882c651d0cfad51ac4daff22827d3e417624f8cd88edc8522"}},"freshness":{"freshness_class":"live","as_of":"2026-11-03T11:04:38.157Z","valid_for":3600,"recheck":"https://legal.exploreworldai.com/api/public/v1/judgment-text?id=us%3A932-f-3d-1264&verify=1","note":"Kontrollera mot recheck efter valid_for sekunder. If-None-Match ger 304 när inget ändrats.","tokens":29049}}