Summary
concluding that Thompson Reuters was not acting as a "consumer reporting agency" by furnishing criminal background information
Summary of this case from Rossini v. PNC Fin. Servs. Grp.Opinion
No. 17-3550 August Term, 2018
05-30-2019
Lindsey A. KIDD, Plaintiff-Appellant, v. THOMSON REUTERS CORPORATION, Defendant-Appellee.
James A. Francis, Francis & Mailman, Philadelphia, PA, for Appellant. Kevin King (Eric C. Bosset & Neil K. Roman, on the brief), Covington & Burling, Washington, D.C., for Appellee.
James A. Francis, Francis & Mailman, Philadelphia, PA, for Appellant.
Kevin King (Eric C. Bosset & Neil K. Roman, on the brief), Covington & Burling, Washington, D.C., for Appellee.
Before: Calabresi, Droney, Circuit Judges, and Underhill, Chief District Judge.
Judge Stefan R. Underhill, of the United States District Court for the District of Connecticut, sitting by designation.
Droney, Circuit Judge: Plaintiff-Appellant Lindsey A. Kidd was the subject of a background check as part of an employment application process with the state of Georgia Department of Health ("Department"). The background check was performed using Defendant-Appellee Thomson Reuters' subscription-based internet platform, "CLEAR." The CLEAR report obtained by the Department falsely showed that Kidd had been previously convicted of theft. Believing the report to be correct, the Department rejected Kidd's application. Kidd then filed this action in the Southern District of New York, alleging that Thomson Reuters is a "consumer reporting agency" subject to the Fair Credit Reporting Act and that it violated that act by providing the false report. After the conclusion of discovery, the district court (Furman, J. ) granted Thomson Reuters' motion for summary judgment, concluding that because Thomson Reuters is not a "consumer reporting agency," it is not subject to the Act. For the reasons that follow, we AFFIRM the district court's judgment in favor of Thomson Reuters.
I.
The Fair Credit Reporting Act ("FCRA") regulates, among other things, the circumstances in which a "consumer reporting agency" may furnish "consumer reports" to third parties, and the information contained in those reports. 15 U.S.C. §§ 1681b, 1681c. Typically, consumer reporting agencies sell consumer reports to lenders, credit card companies, insurers, and employers for credit, insurance, and employment decisions. CONSUMER FINANCIAL PROTECTION BUREAU,_LIST OF CONSUMER REPORTING COMPANIES , 3 (2019), https://www.consumerfinance.gov/consumer-tools/credit-reports-and-scores/consumer-reporting-companies/companies-list/ (last visited Apr. 23, 2019). Examples of government-designated consumer reporting agencies are Equifax, Transunion, and Experian. Id. at 8. If a "consumer reporting agency" fails to comply with the Act, it may be subject to civil liability to consumers, which includes actual and punitive damages. 15 U.S.C. §§ 1681n, 1681o. This appeal turns on whether Thomson Reuters qualifies as a "consumer reporting agency" under the Act.
The following facts are undisputed and taken from the parties' summary judgment submissions.
Thomson Reuters operates an online research platform named "Consolidated Lead Evaluation and Reporting," or "CLEAR," that provides its subscribers summary reports of motor vehicle records, court records, aliases, the status of professional licenses, real property transactions, and similar information. CLEAR subscribers are principally government agencies and law enforcement entities, but also include financial institutions, corporate security offices, and insurance claims departments. The platform receives approximately 100,000 search queries each day and is designed to help combat fraud and assist public agencies in criminal investigations.
Although Thomson Reuters maintains that it is not subject to the FCRA, it acknowledges that it is regulated by the Gramm-Leach-Bliley Act, 15 U.S.C. § 6801 et seq. , the Drivers' Privacy Protection Act, 18 U.S.C. § 2721 et seq. , and state voter-identification laws. These statutes are not relevant to the parties' dispute, however.
Thomson Reuters prohibits its subscribers from utilizing CLEAR for any purpose covered by the FCRA, such as credit inquiries or background checks related to employment, and has established measures to prevent those uses of its reports. For example, the company markets CLEAR for law enforcement, fraud prevention, or identity verification purposes only. Employees tasked with marketing CLEAR to potential subscribers are trained that CLEAR "may not be promoted or used for FCRA-regulated purposes." App'x at 141.
Thomson Reuters also screens potential subscribers before granting them access to CLEAR. They are required to indicate how they intend to use the platform on an "Account Validation and Credentialing" form, which Thomson Reuters employees then review to confirm that the use of CLEAR is not for an FCRA purpose. If an employee suspects an applicant intends to use the platform for an improper purpose, the applicant will be flagged for review by a "Credentialing Committee" that may reject the applicant or require the applicant to affirm she will not improperly use CLEAR. Once approved, the customer enters into a contract with Thomson Reuters in which she specifically represents that she will not use CLEAR for a purpose covered by the FCRA. Thomson Reuters "offers complimentary training to new CLEAR subscribers" to ensure compliance. App'x at 145. Every two years, Thomson Reuters requires subscribers to reaffirm their commitment to using CLEAR for a non-FCRA purpose, and before a subscriber may enter an individual search request, she must verify that her search is for an approved purpose.
Thomson Reuters also investigates reports of CLEAR misuse through its in-house compliance office. If the office determines misuse has occurred it will "remind[ ] the subscriber that FCRA use of CLEAR is prohibited and require[ ] the subscriber to provide a written ‘attestation’ of its authorized uses of CLEAR and its intent to enforce the subscriber's contractual obligation not to use CLEAR for any FCRA purpose." App'x at 146. It is undisputed that reports of misuse are rare. Of the 144 million CLEAR searches conducted between 2012 and 2016, only 46 were alleged to be for an FCRA purpose. Thomson Reuters determined that 12 of the 46 reports did not involve misuse, required the users responsible for 24 of the searches to reaffirm their promise to perform non-FCRA searches, and terminated the accounts of the subscribers responsible for the remaining 10 improper searches.
This reflects only reported misuses of the platform.
B.
This case involves one of those 46 reports of misuse. In November 2014, Plaintiff-Appellant Lindsey Kidd was the leading candidate for a position as an "Immunization Program Consultant" with the Georgia Department of Public Health, a CLEAR subscriber. The Department received Kidd's authorization to obtain a background check during the application process. Using the CLEAR platform, the Department discovered that Kidd had a prior state conviction for theft. Although the Department regarded Kidd as the "top candidate" for the position, the report led the Department not to hire her. But Kidd had not been convicted of theft; the CLEAR report contained false information. Kidd was not able to correct the mistake in the report in time to obtain the position.
Kidd subsequently filed a putative class action complaint in the Southern District of New York against Thomson Reuters in March 2016, alleging that operating the CLEAR platform renders Thomson Reuters a "consumer reporting agency" under the FCRA and that the company violated several provisions of the Act in providing false information to the Georgia agency.
After the conclusion of discovery, the district court granted summary judgment in favor of Thomson Reuters. Starting with the text of the FCRA, the district court determined that an entity is a "consumer reporting agency" under the Act if it "regularly assembles consumer information with a particular purpose or subjective intention—namely, of providing it to third parties for use (actual or expected) in connection with an FCRA-regulated end, such as employment eligibility." Kidd v. Thomson Reuters Corp., 299 F. Supp. 3d 400, 404 (S.D.N.Y. 2017). "That is because," the court explained, "an entity qualifies as a [consumer reporting agency] only if it ‘regularly’ assembles information on consumers ‘for the purpose of furnishing consumer reports to third parties,’ and ‘purpose’ means ‘[t]he reason for which something is done or created or for which something exists’ or to ‘[h]ave as one's intention or objective.’ " Id. (quoting Purpose , OXFORD ENGLISH ONLINE DICTIONARY , https://en.oxforddictionaries.com/definition/purpose).
Applying that definition to Thomson Reuters, the district court determined that the company does not qualify as a "consumer reporting agency" because Thomson Reuters did not intend to furnish "consumer reports" through the CLEAR platform. The court explained that Thomson Reuters took "affirmative steps ... at every stage of the customer acquisition, application, contracting, and support processes to ensure that subscribers are not using CLEAR for FCRA-regulated purposes," thereby establishing that it did not intend to furnish reports for FCRA purposes. Thus, its reports would not constitute "consumer reports." Id. at 407.
Kidd timely appealed from the district court's judgment.
II.
We review a "district court's grant of a motion for summary judgment de novo, construing the evidence in the light most favorable to the non-moving party." Irby v. N.Y.C. Transit Auth. , 262 F.3d 412, 413 (2d Cir. 2001) (internal quotation marks omitted).
Kidd's appeal presents a question of first impression for us: Whether, to qualify as a "consumer reporting agency" under the FCRA, an entity must specifically intend to furnish a "consumer report." For the reasons that follow, we conclude that it must have such an intent, and we affirm the district court's order granting summary judgment in favor of Thomson Reuters.
A.
To answer questions of statutory interpretation, we "begin with the text." Life Techs. Corp. v. Promega Corp. , ––– U.S. ––––, 137 S. Ct. 734, 741, 197 L.Ed.2d 33 (2017).
Under the Act, a "consumer reporting agency" is:
any person which, for monetary fees, dues, or on a cooperative nonprofit basis, regularly engages in whole or in part in the practice of assembling or evaluating consumer credit information or other information on consumers for the purpose of furnishing consumer reports to third parties, and which uses any means or facility of interstate commerce for the purpose of preparing or furnishing consumer reports.
Under the Act, "person" includes individuals and corporate entities. 15 U.S.C. § 1681a(b).
15 U.S.C. § 1681a(f) (emphasis added). The Act defines a "consumer report" as:
any written, oral, or other communication of any information by a consumer reporting agency bearing on a consumer's credit worthiness, credit standing, credit capacity, character, general reputation, personal characteristics, or mode of living which is used or expected to be used or collected in whole or in part for the purpose of serving as a factor in establishing the consumer's eligibility for—(A) credit or insurance to be used primarily for personal, family or household purposes; (B) employment purposes; or (C) any other purpose authorized under section 1681b of this title.
15 U.S.C. § 1681a(d)(1). Thus, the principal uses of "consumer reports" are for determining eligibility of consumers for extensions of credit, providing insurance, or reviewing employment applications.
Section 1681b enumerates the permissible purposes to which a "consumer report" may be put under the FCRA. Those purposes include credit inquiries and employment purposes. See 15 U.S.C. § 1681b.
The ordinary meaning of " ‘purpose’ corresponds loosely with the common-law concept of specific intent." United States v. Bailey , 444 U.S. 394, 405, 100 S.Ct. 624, 62 L.Ed.2d 575 (1980) ; cf. United States v. Technodyne LLC , 753 F.3d 368, 383 (2d Cir. 2014) (finding, in the civil context, that the phrase "in order to" constitutes a specific intent requirement). Specific intent may be found where a person acts with "[t]he intent to accomplish the precise ... act." Specific Intent , BLACK'S LAW DICTIONARY (10th ed. 2014). Thus, "a person who causes a particular result is said to act purpose[ly] if ‘he consciously desires that result, whatever the likelihood of that result happening from his conduct.’ " Bailey , 444 U.S. at 404, 100 S.Ct. 624 (quoting United States v. U.S. Gypsum Co. , 438 U.S. 422, 445, 98 S.Ct. 2864, 57 L.Ed.2d 854 (1978) ). This understanding comports with the common dictionary definition of "purpose" as "something set up as an object or end to be attained." Purpose, MERRIAM-WEBSTER ONLINE DICTIONARY , https://www.merriam-webster.com/dictionary/purpose (last visited March 21, 2019).
"When a term goes undefined in a statute, we give the term its ordinary meaning." Taniguchi v. Kan Pac. Saipan, Ltd. , 566 U.S. 560, 566, 132 S.Ct. 1997, 182 L.Ed.2d 903 (2012).
"Corporate intent is shown by the actions and statements of the officers, directors, and employees who are in positions of authority or have apparent authority to make policy for the corporation." District Lodge 26, Intern. Ass'n of Machinists & Aerospace Workers, AFL-CIO v. United Techs. Corp. , 610 F.3d 44, 53 (2d Cir. 2010) (quoting United States v. Basic Constr. Co. , 711 F.2d 570, 573 (4th Cir. 1983) (alteration omitted)).
The meaning of "for the purpose of" in § 1681a(f) is therefore plain: A "consumer reporting agency" is an entity that intends the information it furnishes to constitute a "consumer report." See Williams v. Wilmington Trust Co. , 345 F.3d 128, 133 (2d Cir. 2003) ("[W]hen Congress uses in a statute a term of art with a long history of judicial interpretation, we must presume that Congress intends to use the word in its technical sense."). Such purpose can, of course, be established in all the ways intent can be found in our law, including explicit attestation, concrete evidence, or, in some circumstances, inference from the foreseeable and logical consequences of a course of conduct.
We have interpreted the same phrase in other statutes to describe a specific intent requirement. Section 2511(2)(d) of Title 18, for example, prohibits the interception of communications "for the purpose of committing any criminal or tortious act." (emphasis added). We held in Caro v. Weintraub , 618 F.3d 94 (2d Cir. 2010), "that a cause of action under § 2511(2)(d) requires that the interceptor intend to commit a crime or tort independent of the act of recording itself." 618 F.3d at 100 (emphasis added); see also United States v. Tarantino , 617 F. App'x 62, 65 (2d Cir. 2015) (summary order) (finding that § 2511(2)(d) did not apply to defendant because it was not clear that a crime was his "primary motivation" or the "determinative factor" in his intercepting of communications).
Other circuits have also concluded that the FCRA includes a specific intent requirement in its definition of a "consumer reporting agency." In Zabriskie v. Fed. Nat'l Mortg. Assoc. , 912 F.3d 1192 (9th Cir. 2019), for example, lenders providing mortgage refinancing used a Fannie Mae computer program called "Desktop Underwriter"—a platform used to determine a loan's eligibility for purchase by Fannie Mae—to evaluate the plaintiffs' loan application. 912 F.3d at 1195-96. The program, however, incorrectly reported that the plaintiffs had been the subject of a recent foreclosure, and the lenders rejected the plaintiffs' application as a result. Id. at 1196. The plaintiffs then sued Fannie Mae under the FCRA. Id. Fannie Mae argued that it was not a "consumer reporting agency," and therefore not liable under the Act, because it did not provide Desktop Underwriter for the purpose of furnishing a consumer report about prospective borrowers to lenders, but rather for the purpose of facilitating "a transaction between the lender and Fannie Mae." Id. at 1199 (internal quotation marks omitted). The Ninth Circuit agreed, explaining that " ‘[p]urpose’ means ‘something set up as an object or end to be attained’ " and accordingly, "[b]y its plain meaning, ... the FCRA applies only to an entity that assembles or evaluates with the intent of providing a consumer report to third parties." Id. (internal quotation marks and citation omitted).
The Seventh Circuit has reached a similar conclusion. In Tierney v. Advocate Health & Hosps. Corp. , 797 F.3d 449 (7th Cir. 2015), a number of computers containing unencrypted patient data were stolen from the defendant-hospital's administrative offices. 797 F.3d at 450. Several patients sued the defendant, claiming that the release of their records violated the FCRA, which requires that "consumer reporting agencies" employ procedures to prevent disclosures of consumer information to unauthorized third parties. Id. at 451. The Seventh Circuit concluded, however, that the plaintiffs failed to state a claim under the FCRA because the patients' information was collected to obtain payments from medical insurers and government agencies and not assembled for the purpose of furnishing consumer reports. Id. at 452. Therefore, the court explained, the defendant-hospital was not a "consumer reporting agency" under the Act. Id. at 453.
Finally, our interpretation of the FCRA accords with 2010 guidance provided by the Federal Trade Commission. In examples meant to illustrate the meaning of "for the purpose of furnishing consumer reports to third parties," the FTC guidance indicates that an entity is not a "consumer reporting agency" unless it possesses the specific intent to provide a "consumer report." See FED. TRADE COMM'N, 40 YEARS OF EXPERIENCE WITH THE FAIR CREDIT REPORTING ACT , 2011 WL 3020575 at *23 (2011). Although the FTC's guidance is given no more than persuasive deference, see Skidmore v. Swift & Co. , 323 U.S. 134, 140, 65 S.Ct. 161, 89 L.Ed. 124 (1944), we find that it is helpful and, as it tracks the language of the statute, persuasive.
The Consumer Protection Act of 2010 transferred authority from the FTC "to prescribe rules" or "issue guidelines" regarding the FCRA to the Consumer Financial Protection Bureau. 12 U.S.C. § 5581(b)(5)(A), (B)(i) ; 15 U.S.C. § 1681s(e)(1). Nevertheless, the FTC retains authority to enforce the FCRA. 12 U.S.C. § 5581(b)(5)(C)(i) ; 15 U.S.C. § 1681s(a)(1).
In sum, "[t]he statute says what it says," Cyan, Inc. v. Beaver Cnty. Emps. Ret. Fund , ––– U.S. ––––, 138 S. Ct. 1061, 1069, 200 L.Ed.2d 332 (2018) —a "consumer reporting agency" is an entity that assembles consumer information "for the purpose of furnishing consumer reports to third parties."
B.
Kidd's arguments to the contrary are unavailing. Starting with the text, she argues that an entity qualifies as a "consumer reporting agency" if it "assembles consumer information in order to sell reports which satisfy the statutory definition of ‘consumer report,’ " whether or not the entity actually intended to furnish a "consumer report." Appellant's Br. at 13. Kidd suggests section 1681a(f) imposes something akin to a general intent requirement—an entity need not specifically intend to furnish a "consumer report" to be a "consumer reporting agency." Rather, in Kidd's view, the Act merely requires that an entity intend to furnish a report (consumer or otherwise) that ultimately constitutes a "consumer report."
Kidd's interpretation, however, finds no support in the text. As explained above, the long-standing meaning of "for the purpose of," which we presume Congress understood when it drafted the FCRA, see Williams , 345 F.3d at 133, requires specific intent to provide a statutorily-defined "consumer report," Bailey , 444 U.S. at 405, 100 S.Ct. 624. Most naturally read, then, "for the purpose of furnishing consumer reports to third parties" means an entity must act with the specific intent to supply such a report.
Congress could have achieved the result suggested by Kidd by drafting section 1681a(f) to read "for the purpose of furnishing reports that constitute ‘consumer reports regardless of the intent for which the report was provided .’ " But the statute does not include this language, and we may not "add words to the law to produce what is thought to be a desirable result." EEOC v. Abercrombie & Fitch Stores, Inc. , ––– U.S. ––––, 135 S. Ct. 2028, 2033, 192 L.Ed.2d 35 (2015). Our interpretation must conform to the language of the statute.
Next, Kidd warns that if we adopt Thomson Reuters' interpretation we "would permit a company to purpose[ly] gather consumer information and intentionally sell person-specific reports to third parties, which in all ways meet the statutory definition of ‘consumer report,’ yet avoid the reach of the FCRA by making a strategic decision to include disclaimers in its contractual and promotional language." Appellant's Br. at 14. However, an entity may not escape regulation as a "consumer reporting agency" by merely disclaiming an intent to furnish "consumer reports." For the purposes of the FCRA, indeed for any scienter determination, the totality of a defendant's actions is the determining factor, not the defendant's mere disclaimer of the requisite intent. Cf. , Tellabs, Inc. v. Makor Issues & Rights, Ltd. , 551 U.S. 308, 322-24, 127 S.Ct. 2499, 168 L.Ed.2d 179 (2007) (holding, in the securities fraud context, that courts must consider the total mix of allegations when determining if the defendant had the requisite intent); Ricci v. DeStefano , 557 U.S. 557, 579-80, 129 S.Ct. 2658, 174 L.Ed.2d 490 (2009) (considering the whole of the defendant's conduct in determining discriminatory intent in the employment discrimination context). Indeed, the FTC has enforced the Act against an entity despite its disclaiming any designation as a "consumer reporting agency." See Tony Rodriguez & Jessica Lyon, Background Screening Reports and the FCRA: Just Saying You're Not a Consumer Reporting Agency Isn't Enough , FTC BUSINESS BLOG (Jan. 10, 2013, 2:00 pm), https://www.ftc.gov/news-events/blogs/business-blog/2013/01/background-screening-reports-fcra-just-saying-youre-not.
Finally, Kidd argues that our analysis renders part of the Act's definition of "consumer report"—specifically its focus on the use of the report by the subscriber to make credit, insurance, and employment decisions—irrelevant. Not so. Even if a court were to conclude that an entity is a "consumer reporting agency" because it specifically intended to furnish a "consumer report," a court must still consider whether the report qualifies as such a "consumer report." In doing so, the court must give meaning to each of section 1681a(f)'s terms, including its focus on the conduct of the end-user.
No doubt, the definitions are connected, but not in a manner that supports Kidd's reading of the Act. 40 Years of Experience With the Fair Credit Reporting Act , FTC, 2011 WL 3020575 at *13 ("The terms ‘consumer reporting agency’ in section 603(f) and ‘consumer report’ in section 603(d) are mutually dependent and must be construed together.").
Nor is § 1681a(f)'s focus on the intent of the entity furnishing consumer information indifferent to the purchaser's use of the report. For example, if the issuer of such reports were aware of the substantial use of the information it supplied as "consumer reports" and did not take adequate measures to stop such use, or did not adequately monitor the actual uses of its information, a fact finder could infer the requisite intent to satisfy the definition of "consumer reporting agency."
Accordingly, we are not persuaded by Kidd's proposed interpretation of the FCRA's definition of "consumer reporting agency."
II.
Having concluded that to qualify as a "consumer reporting agency" an entity must intend to furnish a "consumer report" under the FCRA, we must now determine whether the district court was correct in concluding at summary judgment that Thomson Reuters did not intend that information provided by its CLEAR platform would constitute "consumer reports." Like the district court, we conclude that because it is undisputed that Thomson Reuters took numerous—and effective—measures to prevent CLEAR reports from being utilized as "consumer reports," no reasonable juror could conclude that Thomson Reuters intended to furnish such reports, and therefore it is not a "consumer reporting agency" under the FCRA.
A.
At each gateway to the CLEAR platform, Thomson Reuters instructed users and potential subscribers that the platform was not to be used for FCRA purposes and required them to affirm their understanding of that restriction. Marketing material sent to prospective subscribers explained that CLEAR is meant to be used for law enforcement, fraud prevention, and identity verification (non-FCRA) purposes only, and when potential subscribers apply for access to the platform, Thomson Reuters requires them to indicate how they intend to use CLEAR to ensure compliance with the company's restrictions. When a Thomson Reuters employee suspects an applicant of misrepresenting its reasons, the applicant's application will be reviewed again by a special Thomson Reuters committee established for that purpose. If a customer is granted access to the platform, she is required to sign a contract promising to not use CLEAR in a manner prohibited by Thomson Reuters. Thomson Reuters also periodically requires its CLEAR subscribers to reaffirm that commitment, and each time a user enters a search she must affirm her reason for using CLEAR complies with Thomson Reuters' requirements.
Kidd points to an advertisement in which Thomson Reuters suggested the CLEAR platform may be used to "thoroughly investigate ... employees." App'x at 350. At the bottom of the page, however, Thomson Reuters stated "[t]he data provided to you by CLEAR may not be used as a factor in establishing a consumer's eligibility for credit, insurance, employment purposes or for any other purpose authorized under the FCRA." Id.
In the event these controls fail, Thomson Reuters also employs additional measures to prevent further misuse of the CLEAR platform. If its compliance office determines a user has used CLEAR for an FCRA purpose it will "remind[ ] the subscriber that FCRA use of CLEAR is prohibited and require[ ] the subscriber to provide a written ‘attestation’ of its authorized uses of CLEAR and its intent to enforce the subscriber's contractual obligation not to use CLEAR for any FCRA purpose." App'x at 146.
These numerous, undisputed controls are sufficient to establish at summary judgment that Thomson Reuters aimed to prevent users from putting CLEAR reports to uses covered by the FCRA. This negates any inferences that Thomson Reuters intended to provide reports for FCRA purposes. Hence, the reports it provided do not qualify as "consumer reports."
B.
Kidd does not dispute any of the foregoing facts. Instead, she argues that we can infer Thomson Reuters' intent to furnish "consumer reports" because it was aware that its controls did not prevent all misuse of CLEAR by its subscribers.
To be sure, the record shows that Thomson Reuters was aware of some instances of misuse of its CLEAR platform. But, it is undisputed that the number of reports misused by subscribers was minuscule in comparison to the number of reports generated. No doubt in some cases such knowledge may at least raise a genuine dispute as to whether the entity furnishing the consumer information intended to furnish "consumer reports." That is not the case here, however. Thomson Reuters' extensive efforts to prevent misuse, and to investigate and eliminate it when it occurs, shows that even in the few instances where CLEAR was misused for FCRA purposes, Thomson Reuters did not intend that result. We agree with the district court that the undisputed summary judgment record shows that Thomson Reuters did not intend its CLEAR platform to furnish "consumer reports." We conclude, therefore, that the district court was correct in deciding that Thomson Reuters does not qualify as a "consumer reporting agency" under the FCRA and in granting summary judgment on that basis.
Kidd also argues that those most likely to abuse the CLEAR platform are not required to certify, during the application process, that they will use the platform for only non-FCRA purposes. But Kidd ignores a key part of Thomson Reuters' protection measures. Each subscriber must certify, each time they attempt to search CLEAR, that their purpose is not covered by the FCRA. Thus, every CLEAR user is warned that using the search platform for FCRA purposes is prohibited.
Conclusion
For the foregoing reasons, we AFFIRM the district court's judgment in favor of Thomson Reuters.