Last week, Judge Armstrong of the Northern District of California dismissed a putative class action against Pandora alleging the Internet radio service had violated two Michigan state statutes by disclosing to third parties information about the plaintiff’s listening activity. The plaintiff in Deacon v. Pandora Media, Inc. alleged that by (1) making publicly available his Pandora profile information and (2) posting his listening activity on Facebook, Pandora violated Michigan’s Video Rental Privacy Act (“VRPA”), Mich. Comp. Laws § 445.1711-1715, and its Consumer Protection Act (“CPA”), Mich. Comp. Laws § 445.903.
The VRPA is among more than a dozen state analogues to the federal Video Privacy Protection Act (“VPPA”), 18 U.S.C. § 2710, which limits the ability of “video tape service providers’” to disclose information about specific video materials their customers have requested or obtained. Although the VRPA similarly limits the ability of such entities to disclose information about their customers, the statute also applies to a broader class of entities and media. Specifically, the VRPA provides that, absent a statutory exception:
“a person, or an employee or agent of the person, engaged in the business of selling at retail, renting, or lending books or other written materials, sound recordings, or video recordings shall not disclose to any person, other than the customer, a record or information concerning the purchase, lease, rental, or borrowing of those materials by a customer that indicates the identity of the customer.”
The plaintiff in Deacon asserted that by sharing information about his listening activities with third parties, Pandora ran afoul of this provision’s prohibition against disclosure of information about a customer’s having obtained “sound recordings.”