TransUnion sold credit reports that included an OFAC Name Screen Alert when a consumer’s first and last name matched a name on the Treasury Department’s list of terrorists, drug traffickers, and other specially designated nationals. Because the system compared only first and last names, it generated numerous false positives. Sergio Ramirez was denied the ability to buy a car in his own name after a dealer received a report identifying him as a potential OFAC match.
Ramirez requested his file from TransUnion. TransUnion first mailed him a disclosure that omitted the OFAC alert and included a summary of FCRA rights. The next day, it mailed a separate letter disclosing the potential OFAC match, but that letter did not include another summary of rights. Ramirez brought a class action under the Fair Credit Reporting Act (FCRA), alleging that TransUnion used unreasonable procedures to assure accuracy, failed to disclose all file information in one disclosure, and failed to provide a summary of rights with each written disclosure.
The class contained 8,185 people. The parties stipulated that, during the seven-month class period, TransUnion had sent reports containing OFAC alerts to third parties for 1,853 members, including Ramirez, but had not sent the reports of the other 6,332 members to third parties. A jury awarded statutory and punitive damages to every class member. The Ninth Circuit affirmed the conclusion that all class members had Article III standing, while reducing the total damages award to about $40 million. The Supreme Court reversed and remanded.
Issue #1
Whether a statutory violation and statutory cause of action, without more, establish Article III standing to seek damages in federal court.
Holding
No. A plaintiff must show a concrete injury in fact; a bare statutory violation or injury in law alone does not establish Article III standing.
Reasoning
Article III limits federal courts to actual cases and controversies. A plaintiff therefore must show a concrete, particularized injury that is caused by the defendant and likely redressable by judicial relief. The concrete-injury requirement ensures that federal courts resolve real disputes affecting real people rather than supervise general compliance with federal law.
To determine whether an intangible injury is concrete, courts ask whether it bears a close relationship to a harm traditionally recognized as a basis for suit in American courts. Physical and monetary injuries readily qualify, and intangible injuries such as reputational harm, disclosure of private information, and intrusion on seclusion may also qualify.
Congress's judgment is important but not conclusive. Congress may recognize and make actionable real-world injuries that previously lacked a remedy, but it cannot transform a harmless legal violation into an Article III injury merely by authorizing a private lawsuit. Thus, every class member seeking individual damages must establish standing for each claim and each form of relief.
Issue #2
Whether the 1,853 class members whose OFAC-alert credit reports were provided to third parties suffered a concrete injury on the reasonable-procedures claim.
Holding
Yes. Disseminating reports that labeled those consumers as potential terrorists, drug traffickers, or serious criminals inflicted a concrete reputational injury.
Reasoning
The FCRA claim alleged that TransUnion failed to use reasonable procedures to assure maximum possible accuracy in consumer reports. For the 1,853 members whose reports were actually sent to potential creditors or other businesses, the allegedly misleading OFAC alerts were communicated to third parties.
That harm closely resembles defamation. Defamation traditionally recognizes injury when a statement exposing a person to hatred, contempt, or ridicule is published to another person. Although the reports described the consumers as a "potential match" rather than definitively calling them terrorists, the misleading label bore a sufficiently close relationship to defamatory reputational harm.
Issue #3
Whether the 6,332 class members whose OFAC alerts remained only in TransUnion's internal files suffered a concrete injury or a sufficient risk of injury to seek damages on the reasonable-procedures claim.
Holding
No. An undisclosed inaccurate alert in an internal credit file, and an unmaterialized risk that it might later be disclosed, did not establish concrete harm for a damages claim.
Reasoning
The mere presence of inaccurate information in an internal database is not closely analogous to a traditionally actionable harm. The Court emphasized that publication is essential to defamation: an insulting or defamatory letter kept in a desk drawer does not injure its subject. Likewise, misleading information retained in a credit file but not sent to a third party does not itself create reputational injury.
A risk of future harm may support forward-looking injunctive relief when the risk is sufficiently imminent and substantial, but standing must be shown separately for damages. For retrospective damages, a risk that never materialized ordinarily does not suffice unless exposure to that risk itself caused a separate concrete injury, such as an independently established emotional harm.
The 6,332 members offered no evidence that their OFAC alerts were later disclosed, caused a credit denial, or otherwise materialized in injury. They also did not show that they knew of the alerts or were independently harmed by the risk of dissemination. Nor did the evidence establish a sufficiently likely future disclosure for any particular member.
Issue #4
Whether all class members had standing to seek damages for TransUnion's allegedly defective two-part disclosures and omitted summary of rights.
Holding
No. Except for Ramirez, the class members did not show that the alleged disclosure-format violations caused concrete harm.
Reasoning
The disclosure claim alleged that TransUnion should have included OFAC information in the same mailing as the consumer file disclosure. The summary-of-rights claim alleged that TransUnion should have included another summary of FCRA rights with the second OFAC letter. The Court treated these as procedural and formatting violations unless the plaintiffs could connect them to a concrete adverse effect.
The plaintiffs offered no evidence that any class member other than Ramirez opened the mailings, was confused or distressed by them, relied on them, or would have attempted to correct an OFAC alert if TransUnion had used the required format. Without proof of a real consequence, the claims alleged only bare procedural violations divorced from concrete harm.
The Court rejected the Government's informational-injury theory. The class members did receive the relevant information, even if in an allegedly improper format, and they identified no downstream adverse consequence from that format. TransUnion did not meaningfully dispute Ramirez's individual standing on these two claims, so the Court left his standing intact.