TransUnion LLC v. Ramirez

In TransUnion LLC v. Ramirez, the U.S. Supreme Court reviewed whether a class of 8,185 consumers had Article III standing to sue TransUnion under the Fair Credit Reporting Act. TransUnion had flagged Sergio Ramirez's credit report as matching a terrorist watchlist because its system compared names against the Office of Foreign Assets Control database. Ramirez sued, and a class was certified. The Court held that only the 1,853 class members whose misleading credit reports were actually disseminated to third parties suffered concrete harm and had standing. The remaining 6,332 class members whose reports were not provided to outside businesses lacked standing because the mere existence of inaccurate internal records did not constitute a concrete injury. The decision clarified that Congress cannot confer standing for bare procedural violations without real-world harm.

The U.S. Supreme Court, in a 5-4 decision written by Justice Kavanaugh, held that only the 1,853 class members whose credit reports containing OFAC alerts were disseminated to third parties had standing to sue for damages. The remaining 6,332 class members whose reports were never disclosed lacked standing, and the judgment below was reversed in part and remanded.

The central dispute was whether all class members suffered a concrete injury sufficient to establish Article III standing under the Fair Credit Reporting Act, or only those whose inaccurate terrorist-alert credit reports were disclosed to third parties.

The ruling significantly narrowed standing doctrine in consumer and privacy class actions. It established that statutory violations alone do not create Article III standing; plaintiffs must show concrete harm, such as disclosure of inaccurate information to third parties. This decision limits the ability of Congress to authorize damages suits for purely procedural breaches and has broad implications for data privacy, credit reporting, and consumer protection litigation.