Zip Code Requests Off-Limits in Massachusetts Credit Card Transactions

21 March 2013 Publication
Authors: Thomas I. Elkind

Legal News Alert: Litigation

In a recent decision, Tyler v. Michaels Stores, Inc., the Massachusetts Supreme Judicial Court held that zip codes are “personal identification information” and that a merchant asking for that information during a credit card transaction violates a Massachusetts statute [G.L.c. 93, Section 105(a)] designed to protect consumer privacy, becoming the second state high court, after California, to declare that merchants can no longer request zip codes in credit card transactions with their customers. The Court also made clear that its decision applies equally to electronic and paper transaction forms.

The Court reasoned that a zip code, “when combined with the consumer's name, provides the merchant with enough information to identify through publicly available databases the consumer's address or telephone number, the very information Section 105(a) expressly identifies as personal identification information … .”

Because G.L.c. 93, Section 105(d) provides that a violation of Section 105(a) also violates G.L.c. 93A, Sections 2 and 9 (which prohibit unfair or deceptive acts or practices in the conduct of a trade or business), the procuring of a zip code creates exposure to the severe penalties that can be imposed under Chapter 93A. The Court found that the procuring of a zip code can lead to “the actual receipt by a consumer of unwanted marketing materials ... and the merchant's sale of a customer's personal identification information or the data obtained from that information to a third party.” The Court held that either of these results constituted “an injury that is distinct from the statutory violation itself and cognizable under G.L.c. 93A, Section 9 ... .” Chapter 93A provides not only that the consumer can recover damages for injuries caused by a violation of that statute, but also that the consumer can recover up to three times the actual damages suffered, and reasonable attorneys fees, in certain situations.

This decision establishes that in Massachusetts a consumer need not be the victim of identity theft or suffer a loss of money in order to sue a merchant who requests and receives the consumer’s zip code during a credit card transaction. As a result, Massachusetts merchants who continue to request a customer's zip code as a part of a credit card transaction should expect to be targeted by class actions on behalf of consumers, and will need to be prepared to prove that no marketing materials were sent to the consumer and that no data regarding the consumer was provided to any third party.

Therefore, Massachusetts merchants must now weigh the cost of dealing with such potential claims against the benefit of obtaining zip codes from their customers.


Legal News Alert is part of our ongoing commitment to providing up-to-the-minute information about pressing concerns or industry issues affecting our clients and our colleagues. If you have any questions about this update or would like to discus this topic further, please contact your Foley attorney or the following:

Thomas Elkind
Partner
Boston, Massachusetts
617.342.4010
telkind@foley.com

Michael C. Lueder
Partner and Chair, Consumer Financial Services Practice
Milwaukee, Wisconsin
414.297.5643
mlueder@foley.com

Martin J. Bishop
Partner and Chair, Consumer Financial Services Practice
Chicago, Illinois
312.832.5154
mbishop@foley.com

Authors

Insights

Bad Holiday Season News! Estimates of an increase of Cyberattacks 20%!
13 December 2019
Internet, IT & e-Discovery Blog
Driving the Future of Automotive Technology
12 December 2019
Manufacturing Industry Advisor
Massachusetts Governor Proposes Facility Fee Ban
12 December 2019
Health Care Law Today
American Rule Prevails; PTO May Not Collect In-House Attorneys' Fees as "Expenses"
12 December 2019
IP Litigation Current
ACCC 46th Annual Meeting & Cancer Center Business Summit
04-05 March 2020
Washington, D.C.
Foley/Deloitte Compliance and Privacy Officer Roundtable
27 February 2020
Boston, MA
Let’s Talk Compliance
24 January 2020
Orlando, FL
New England Alliance Annual Meeting
15-17 January 2020
Woodstock, VT