Case Law Sandvig v. Barr

Sandvig v. Barr

Document Cited Authorities (45) Cited in (11) Related (1)

Arthur B. Spitzer, Scott Michelman, American Civil Liberties Union of the District of Columbia, Washington, DC, Esha Bhandari Pro hac Vice, Naomi Gilens, Pro Hac Vice, American Civil Liberties Union Foundation, Rachel Goodman, Pro Hac Vice, New York, NY, for Plaintiffs.

Daniel Stephen Garrett Schwei, John Russell Tyler, Serena Maya Schulz Orloff, Stephen J. Buckingham, U.S. Department of Justice, Washington, DC, for Defendant.

MEMORANDUM OPINION

JOHN D. BATES, United States District Judge

Plaintiffs are academic researchers who intend to test whether employment websites discriminate based on race and gender. In order to do so, they plan to provide false information to target websites, in violation of these websites' terms of service. Plaintiffs bring a pre-enforcement challenge, alleging that the Computer Fraud and Abuse Act ("CFAA"), 18 U.S.C. § 1030, as applied to their intended conduct of violating websites' terms of service, chills their First Amendment right to free speech. Without reaching this constitutional question, the Court concludes that the CFAA does not criminalize mere terms-of-service violations on consumer websites and, thus, that plaintiffs' proposed research plans are not criminal under the CFAA. The Court will therefore deny the parties' cross-motions for summary judgment and dismiss the case as moot.

BACKGROUND
A. Research Plans

Christopher Wilson and Alan Mislove are professors of computer science at Northeastern University. Decl. of Pl. Christopher "Christo" Wilson ("First Wilson Decl.") [ECF No. 48-1] ¶ 1; Decl. of Pl. Alan Mislove ("First Mislove Decl.") [ECF No. 48-2] ¶ 1. For their research, Wilson and Mislove "intend to access or visit certain online hiring websites for the purposes of conducting academic research regarding potential online discrimination." Pls.' Statement of Undisputed Material Facts ("SMF") [ECF No. 47-2] ¶ 61. Their plans include "audit testing" to examine whether various hiring websites' proprietary algorithms discriminate against online users "based on characteristics, such as race or gender, that constitute a protected class status under civil rights laws." Id. ¶¶ 64, 66. To conduct these audit tests, plaintiffs "will create profiles for fictitious job seekers, post fictitious job opportunities, and compare their fictitious users' rankings in a list of candidates for the fictitious jobs" in order to see "whether [the] ranking is influenced by race, gender, age, or other attributes." Id. ¶ 71.

Wilson and Mislove state that they will take steps to minimize the impact of their research both on the targeted websites' servers and on other users of those websites. Id. at ¶¶ 75–78. For instance, they will make it apparent to real job seekers and employers that their postings are fake by "stat[ing] in any fictitious job posting, or in any fictitious job seeker profile, that the job or the job seeker is not real." Id. at ¶¶ 75–78. Both researchers also intend to "comply with the payment requirement" of certain employment websites. Decl. of Pl. Christopher "Christo" Wilson ("Second Wilson Decl.") [ECF No. 65-1] ¶ 5; Decl. of Pl. Alan Mislove ("Second Mislove Decl.") [ECF No. 65-2] ¶ 5. But Wilson and Mislove acknowledge that their research plan will violate the target websites' terms of service prohibiting the provision of false information and/or creating fake accounts. SMF ¶ 86.

B. Procedural History

In June 2016, Wilson and Mislove, as well as two other researchers (Christian W. Sandvig and Kyratso Karahalios) and the nonprofit journalism group First Look Media Works, Inc., brought a pre-enforcement constitutional challenge to a provision of the CFAA. Compl. [ECF No. 1] ¶¶ 180–202. The provision at issue, 18 U.S.C. § 1030(a)(2)(C), or the "Access Provision," makes it a crime to "intentionally access[ ] a computer without authorization or exceed[ ] authorized access, and thereby obtain[ ] ... information from any protected computer." Plaintiffs argue that this provision violates the First and Fifth Amendments. Compl. ¶¶ 180–202. Specifically, they claim that the Access Provision (1) is overbroad and chills their First Amendment right to freedom of speech; (2) as applied to their research activities, unconstitutionally restricts their protected speech; (3) interferes with their ability to enforce their rights and therefore violates the Petition Clause; (4) is void for vagueness under the Fifth Amendment Due Process Clause; and (5) unconstitutionally delegates lawmaking authority to private actors in violation of the Fifth Amendment Due Process Clause. See id. On March 30, 2018, this Court partially granted the government's motion to dismiss. See Sandvig v. Sessions, 315 F. Supp. 3d 1, 34 (D.D.C. 2018). The Court dismissed all but the as-applied First Amendment free speech claim brought by Wilson and Mislove. Id.

Now before the Court are the parties' cross-motions for summary judgment. Wilson and Mislove renew their pre-enforcement challenge to the Access Provision of the CFAA, alleging that it unconstitutionally restricts their First Amendment rights to free speech by criminalizing their research plans and journalistic activities that involve violating websites' terms of service. Pls.' Mem. P. & A. in Supp. of Mot. for Summ. J. ("Pls.' Mem.") [ECF No. 48] at 1. The government, for its part, argues that plaintiffs have failed to establish standing and that the First Amendment's protections do not shield plaintiffs from private websites' choices about whom to exclude from their servers. Def.'s Mem. in Supp. of Cross-Mot. for Summ. J. & in Opp'n to Pls.' Mot. for Summ. J. ("Gov't's Opp'n") [ECF No. 50-1] at 1–4. The Court held a motions hearing on November 15, 2019, and subsequently ordered another round of briefing to clarify plaintiffs' specific research plans and both parties' understanding of particular terms within the CFAA. See November 26, 2019 Order [ECF No. 63] at 1–2. The parties each responded, see Def.'s Resp. to Court's Order for Clarification ("Def.'s Resp. for Clarification") [ECF No. 64]; Pls.' Mem. in Resp. to Court's Order [ECF No. 65], and the matter is now ripe for consideration.

LEGAL STANDARD

Summary judgment is appropriate when "the movant shows that there is no genuine dispute as to any material fact and the movant is entitled to judgment as a matter of law." Fed. R. Civ. P. 56(a). The party seeking summary judgment "bears the initial responsibility of informing the district court of the basis for its motion, and identifying those portions of [the record] ... demonstrat[ing] the absence of a genuine issue of material fact." Celotex Corp. v. Catrett, 477 U.S. 317, 323, 106 S.Ct. 2548, 91 L.Ed.2d 265 (1986) ; see Fed. R. Civ. P. 56(c)(1)(A) (explaining that a moving party may demonstrate that a fact is undisputed or not by citing "depositions, documents, electronically stored information, affidavits or declarations, stipulations ..., admissions, interrogatory answers, or other materials").

In determining whether a genuine issue of material fact exists, the Court must "view the facts and draw reasonable inferences in the light most favorable to the party opposing the motion." Scott v. Harris, 550 U.S. 372, 378, 127 S.Ct. 1769, 167 L.Ed.2d 686 (2007) (internal quotation marks and alteration omitted). But a non-moving party must establish more than the "mere existence of a scintilla of evidence" in support of its position. Anderson v. Liberty Lobby, Inc., 477 U.S. 242, 252, 106 S.Ct. 2505, 91 L.Ed.2d 202 (1986). To avoid summary judgment, "there must be evidence on which the jury could reasonably find for the [non-moving party]." Id.

ANALYSIS
I. Jurisdictional Standing

To have Article III standing, a "plaintiff must have (1) suffered an injury in fact, (2) that is fairly traceable to the challenged conduct of the defendant, and (3) that is likely to be redressed by a favorable judicial decision." Spokeo, Inc. v. Robins, ––– U.S. ––––, 136 S. Ct. 1540, 1547, 194 L.Ed.2d 635 (2016) (citing Lujan v. Defs. of Wildlife, 504 U.S. 555, 560–61, 112 S.Ct. 2130, 119 L.Ed.2d 351 (1992) ). This Court previously concluded that plaintiffs had plausibly alleged standing on their First Amendment claims at the motion-to-dismiss stage, Sandvig, 315 F. Supp. 3d at 16–22, but plaintiffs must now demonstrate standing "with specific facts set out by affidavit or other admissible evidence," In re Navy Chaplaincy, 323 F. Supp. 3d 25, 39 (D.D.C. 2018) (internal quotation marks omitted).

There are two ways in which litigants like plaintiffs here may establish the requisite ongoing injury when seeking to enjoin a statute alleged to violate the First Amendment. First, plaintiffs may show that they intend "to engage in a course of conduct arguably affected with a constitutional interest, but proscribed by a statute, and there exists a credible threat of prosecution thereunder." Susan B. Anthony List v. Driehaus, 573 U.S. 149, 159, 134 S.Ct. 2334, 189 L.Ed.2d 246 (2014) (quoting Babbitt v. United Farm Workers Nat. Union, 442 U.S. 289, 298, 99 S.Ct. 2301, 60 L.Ed.2d 895 (1979) ). Second, they may refrain from exposing themselves to sanctions under the statute, making a sufficient showing of self-censorship—i.e., they may establish a chilling effect on their free expression. See Laird v. Tatum, 408 U.S. 1, 11–14, 92 S.Ct. 2318, 33 L.Ed.2d 154 (1972). In either case, a constitutionally affected interest and a credible threat of enforcement are required; without them, plaintiffs can establish neither a realistic threat of legal sanction for engaging in protected speech nor an objectively good reason for self-censoring by not conducting their planned research. Here, plaintiffs take the first path and argue that they intend...

5 cases
Document | U.S. Supreme Court – 2021
Van Buren v. United States
"...the contrary, Van Buren cites instances where it hasn't. See Reply Brief 14–15, 17 (collecting cases); cf. Sandvig v. Barr , 451 F.Supp.3d 73, 81–82 (D.D.C. 2020) (discussing Department of Justice testimony indicating that the Government could " ‘bring a CFAA prosecution based’ " on terms-o..."
Document | U.S. District Court — Eastern District of Tennessee – 2020
Doe v. Rausch
"...Whitehouse v. Illinois Central R. Co. , 349 U.S. 366, 373, 75 S.Ct. 845, 99 L.Ed. 1155 (1955) ); Sandvig, et al. v. Barr , No. CV 16-1368 (JDB), 451 F.Supp.3d 73, 84(D.D.C. Mar. 27, 2020) (finding that resolution of issues on other grounds meant "that the First Amendment claims plaintiffs ‘..."
Document | U.S. District Court — District of Columbia – 2020
United States v. Harris, Criminal Action No. 19-356
"..."
Document | U.S. District Court — Southern District of New York – 2021
El Omari v. Buchanan
"...restrictions on a computer to obtain information or privileges not otherwise available to the public. See, e.g., Sandvig v. Barr, 451 F.Supp.3d 73, 85 (D.D.C. 2020) (noting that most courts have found accessing a computer “without authorization” involves “transitioning from a public area of..."
Document | U.S. District Court — Southern District of New York – 2022
Paravas v. Long Tran
"... ... computer to damage, steal, or tamper with [Plaintiff's] ... data ... Id. at 901. See generally, Sandvig v. Barr , ... 451 F.Supp.3d 73, 87 (D.D.C. 2020) (analyzing “without ... authorization” under the CFAA in relation to creating ... "

Try vLex and Vincent AI for free

Start a free trial
4 books and journal articles
Document | Núm. 58-3, July 2021 – 2021
COMPUTER CRIMES
"...(discussing the Van Buren case scheduled for oral arguments on November 30, 2020). 98. Sandvig v. Barr, 451 F. Supp. 3d 73, 92 (D.D.C. 2020), appeal docketed, No. 20-5153 (D.C. Cir. May 28, 2020). 99. See PROSECUTING COMPUTER CRIMES, supra note 1, at 3 (listing crimes). 100. PROSECUTING COM..."
Document | Núm. 60-3, July 2023 – 2023
Computer Crimes
"...v. John, 597 F.3d 263, 271 (5th Cir. 2010), abrogated by Van Buren v. United States, 141 S. Ct. 1648 (2021). 104. Sandvig v. Barr, 451 F. Supp. 3d 73, 92 (D.D.C. 2020), appeal dismissed sub nom. , Sandvig v. Garland, No. 20-5153, 2021 WL 2525027 (D.C. Cir. June 10, 2021). 105. See PROSECUTI..."
Document | Núm. 59-3, July 2022 – 2022
Computer Crimes
"...once it is validly accessed”). 96. See Van Buren v. United States, 141 S. Ct. 1648, 1652 (2021). 97. Id. 98. Sandvig v. Barr, 451 F. Supp. 3d 73, 92 (D.D.C. 2020), appeal docketed , No. 20-5153 (D.C. Cir. May 28, 2020). 2022] C OMPUTER C RIMES 525 2. Provisions The CFAA prohibits seven comp..."
Document | Vol. 120 Núm. 5, March 2022 – 2022
UNFAIR COLLECTION: RECLAIMING CONTROL OF PUBLICLY AVAILABLE PERSONAL INFORMATION FROM DATA SCRAPERS.
"...(9th Cir. 2019), vacated, 141 S. Ct. 2752 (2021); Sandvig v. Sessions, 315 F. Supp. 3d 1, 26-27 (D.D.C. 2018); Sandvig v. Barr, 451 F. Supp. 3d 73, 86-89 (D.D.C. (62.) For example, information may be made public when an individual is "doxed." See Alexander J. Lindvall, Political Hacktivism:..."

Try vLex and Vincent AI for free

Start a free trial
1 firm's commentaries
Document | JD Supra United States – 2020
US Supreme Court to Clarify ‘Exceeds Authorized Access’ Provision of Computer Fraud and Abuse Act
"...of the CFAA? At least one court says no, in a case now on appeal to the US Court of Appeals for the DC Circuit. Sandvig v. Barr, 451 F. Supp. 3d 73, 76 (D.D.C. 2020) (“the CFAA does not criminalize mere terms-of-service violations on consumer Such rulings might be in question if the Court s..."

Try vLex and Vincent AI for free

Start a free trial

Experience vLex's unparalleled legal AI

Access millions of documents and let Vincent AI power your research, drafting, and document analysis — all in one platform.

Start a free trial

Start Your 3-day Free Trial of vLex and Vincent AI, Your Precision-Engineered Legal Assistant

  • Access comprehensive legal content with no limitations across vLex's unparalleled global legal database

  • Build stronger arguments with verified citations and CERT citator that tracks case history and precedential strength

  • Transform your legal research from hours to minutes with Vincent AI's intelligent search and analysis capabilities

  • Elevate your practice by focusing your expertise where it matters most while Vincent handles the heavy lifting

vLex
4 books and journal articles
Document | Núm. 58-3, July 2021 – 2021
COMPUTER CRIMES
"...(discussing the Van Buren case scheduled for oral arguments on November 30, 2020). 98. Sandvig v. Barr, 451 F. Supp. 3d 73, 92 (D.D.C. 2020), appeal docketed, No. 20-5153 (D.C. Cir. May 28, 2020). 99. See PROSECUTING COMPUTER CRIMES, supra note 1, at 3 (listing crimes). 100. PROSECUTING COM..."
Document | Núm. 60-3, July 2023 – 2023
Computer Crimes
"...v. John, 597 F.3d 263, 271 (5th Cir. 2010), abrogated by Van Buren v. United States, 141 S. Ct. 1648 (2021). 104. Sandvig v. Barr, 451 F. Supp. 3d 73, 92 (D.D.C. 2020), appeal dismissed sub nom. , Sandvig v. Garland, No. 20-5153, 2021 WL 2525027 (D.C. Cir. June 10, 2021). 105. See PROSECUTI..."
Document | Núm. 59-3, July 2022 – 2022
Computer Crimes
"...once it is validly accessed”). 96. See Van Buren v. United States, 141 S. Ct. 1648, 1652 (2021). 97. Id. 98. Sandvig v. Barr, 451 F. Supp. 3d 73, 92 (D.D.C. 2020), appeal docketed , No. 20-5153 (D.C. Cir. May 28, 2020). 2022] C OMPUTER C RIMES 525 2. Provisions The CFAA prohibits seven comp..."
Document | Vol. 120 Núm. 5, March 2022 – 2022
UNFAIR COLLECTION: RECLAIMING CONTROL OF PUBLICLY AVAILABLE PERSONAL INFORMATION FROM DATA SCRAPERS.
"...(9th Cir. 2019), vacated, 141 S. Ct. 2752 (2021); Sandvig v. Sessions, 315 F. Supp. 3d 1, 26-27 (D.D.C. 2018); Sandvig v. Barr, 451 F. Supp. 3d 73, 86-89 (D.D.C. (62.) For example, information may be made public when an individual is "doxed." See Alexander J. Lindvall, Political Hacktivism:..."

Try vLex and Vincent AI for free

Start a free trial

Start Your 3-day Free Trial of vLex and Vincent AI, Your Precision-Engineered Legal Assistant

  • Access comprehensive legal content with no limitations across vLex's unparalleled global legal database

  • Build stronger arguments with verified citations and CERT citator that tracks case history and precedential strength

  • Transform your legal research from hours to minutes with Vincent AI's intelligent search and analysis capabilities

  • Elevate your practice by focusing your expertise where it matters most while Vincent handles the heavy lifting

vLex
5 cases
Document | U.S. Supreme Court – 2021
Van Buren v. United States
"...the contrary, Van Buren cites instances where it hasn't. See Reply Brief 14–15, 17 (collecting cases); cf. Sandvig v. Barr , 451 F.Supp.3d 73, 81–82 (D.D.C. 2020) (discussing Department of Justice testimony indicating that the Government could " ‘bring a CFAA prosecution based’ " on terms-o..."
Document | U.S. District Court — Eastern District of Tennessee – 2020
Doe v. Rausch
"...Whitehouse v. Illinois Central R. Co. , 349 U.S. 366, 373, 75 S.Ct. 845, 99 L.Ed. 1155 (1955) ); Sandvig, et al. v. Barr , No. CV 16-1368 (JDB), 451 F.Supp.3d 73, 84(D.D.C. Mar. 27, 2020) (finding that resolution of issues on other grounds meant "that the First Amendment claims plaintiffs ‘..."
Document | U.S. District Court — District of Columbia – 2020
United States v. Harris, Criminal Action No. 19-356
"..."
Document | U.S. District Court — Southern District of New York – 2021
El Omari v. Buchanan
"...restrictions on a computer to obtain information or privileges not otherwise available to the public. See, e.g., Sandvig v. Barr, 451 F.Supp.3d 73, 85 (D.D.C. 2020) (noting that most courts have found accessing a computer “without authorization” involves “transitioning from a public area of..."
Document | U.S. District Court — Southern District of New York – 2022
Paravas v. Long Tran
"... ... computer to damage, steal, or tamper with [Plaintiff's] ... data ... Id. at 901. See generally, Sandvig v. Barr , ... 451 F.Supp.3d 73, 87 (D.D.C. 2020) (analyzing “without ... authorization” under the CFAA in relation to creating ... "

Try vLex and Vincent AI for free

Start a free trial

Start Your 3-day Free Trial of vLex and Vincent AI, Your Precision-Engineered Legal Assistant

  • Access comprehensive legal content with no limitations across vLex's unparalleled global legal database

  • Build stronger arguments with verified citations and CERT citator that tracks case history and precedential strength

  • Transform your legal research from hours to minutes with Vincent AI's intelligent search and analysis capabilities

  • Elevate your practice by focusing your expertise where it matters most while Vincent handles the heavy lifting

vLex

Start Your 3-day Free Trial of vLex and Vincent AI, Your Precision-Engineered Legal Assistant

  • Access comprehensive legal content with no limitations across vLex's unparalleled global legal database

  • Build stronger arguments with verified citations and CERT citator that tracks case history and precedential strength

  • Transform your legal research from hours to minutes with Vincent AI's intelligent search and analysis capabilities

  • Elevate your practice by focusing your expertise where it matters most while Vincent handles the heavy lifting

vLex
1 firm's commentaries
Document | JD Supra United States – 2020
US Supreme Court to Clarify ‘Exceeds Authorized Access’ Provision of Computer Fraud and Abuse Act
"...of the CFAA? At least one court says no, in a case now on appeal to the US Court of Appeals for the DC Circuit. Sandvig v. Barr, 451 F. Supp. 3d 73, 76 (D.D.C. 2020) (“the CFAA does not criminalize mere terms-of-service violations on consumer Such rulings might be in question if the Court s..."

Try vLex and Vincent AI for free

Start a free trial