State Supreme Court Rules Against Walgreens in Landmark FACTA Credit Card Truncation Case

The State Supreme Court recently ruled against a plaintiff who filed a class action lawsuit against Walgreens under the Fair and Accurate Credit Transactions Act (FACTA) of 2003. The plaintiff alleged that the drugstore chain violated FACTA’s requirement to truncate credit card information on receipts. Specifically, she claimed that her receipt included the first six and last four digits of her 16-digit credit card number, which she argued breached the truncation rules. For more details, the decision can be read here.

FACTA was designed to prevent identity theft by requiring retailers to truncate credit card numbers on printed receipts, allowing only the last five digits to be visible. The plaintiff’s argument hinged on the premise that displaying more than these digits increased the risk of credit card fraud. However, the State Supreme Court found that the presence of additional pre-paid card digits did not present a substantial risk of harm to consumers.

In its ruling, the court emphasized the necessity for a plaintiff to prove concrete harm or a credible risk of harm to succeed in a FACTA claim. This aligns with the broader judicial trend following the U.S. Supreme Court’s decision in Spokeo, Inc. v. Robins, which established that plaintiffs must demonstrate actual harm to have standing in federal court.

The decision sheds light on the judiciary’s approach to consumer protection laws and highlights the challenges plaintiffs face when seeking class action certification. Without clear evidence of harm or a tangible breach of privacy, similar FACTA-related claims may struggle to proceed as class actions, potentially discouraging litigation based solely on statutory violations without accompanying damages.

This ruling also underscores the importance for retailers to remain vigilant in complying with credit card information protection laws, even as courts may be narrowing the scope of potential liability. Businesses should ensure they adhere to statutory requirements to both safeguard consumer information and protect themselves against future legal actions.