Case 2:10-cv-00530-JJT Document 64-1 Filed 12/17/15 Page 1 of 16
UNITED STATES DISTRICT COURT FOR THE DISTRICT OF ARIZONA
Federal Trade Commission, Plaintiff,
LifeLock, Inc., et al.,
STIPULATED ORDER RESOLVING FTC’S ALLEGATIONS OF CONTEMPT AND MODIFYING STIPULATED FINAL JUDGMENT AND ORDER FOR
Plaintiff Federal Trade Commission (“FTC” or “Commission”) and defendant LifeLock, Inc. (“LifeLock”) settle and resolve all matters in dispute arising from the FTC’s Contempt action initiated against LifeLock on July 21, 2015 (DE #20), and pursuant to Federal Rule of Civil Procedure 60(b), to modify this Court’s March 15, 2010 Stipulated Final Judgment and Order for Permanent Injunction and Other Equitable Relief (DE #9) (“Permanent Injunction”).
1.This Court entered the Permanent Injunction enjoining LifeLock from, inter alia, “misrepresenting in any manner, expressly or by implication, the means, methods, procedures, effects, effectiveness, coverage, or scope” of its identity theft protection service (Section I.A.5);
2.The Permanent Injunction enjoins LifeLock from “misrepresenting in any manner, expressly or by implication, the manner or extent to which they maintain and protect the privacy, confidentiality, or security of any personal information collected from or about consumers” (Section I.B.);
- 1 -
Case 2:10-cv-00530-JJT Document 64-1 Filed 12/17/15 Page 2 of 16
3.The Permanent Injunction requires LifeLock to “establish and implement, and thereafter maintain, a comprehensive information security program” (Section II);
4.The Permanent Injunction further requires LifeLock to create and retain “[a]ll records and documents necessary to determine full compliance with each provision” of the Permanent Injunction (Section VIII.A.7);
5.On July 21, 2015, the Commission alleged that LifeLock violated the Permanent Injunction by: (a) failing to establish and maintain a comprehensive information security program to protect its users’ sensitive personal data, including credit card, social security, and bank account numbers; (b) falsely advertising that it protected consumers’ sensitive data with the same high-level safeguards as financial institutions; (c) failing to meet the Permanent Injunction’s recordkeeping requirements; and (d) falsely claiming it protected consumers’ identity 24/7/365 by providing alerts “as soon as” it received any indication there was a problem;
LifeLock neither admits nor denies the allegations identified in Paragraph 5
7.These findings constitute an appropriate change in circumstances to warrant modifying Sections VI through IX of the Permanent Injunction pursuant to Rule 60(b) of the Federal Rules of Civil Procedure; and
8.The parties have agreed to settle the Commission’s allegations with the entry of this Order.
- 2 -
Case 2:10-cv-00530-JJT Document 64-1 Filed 12/17/15 Page 3 of 16
1.“Affected Consumer(s)” means any person(s) who has subscribed to any LifeLock fee-based identity theft protection service, and could assert a claim arising from the types of violations alleged in Paragraph 5 of the Findings, excluding: LifeLock; any parent, subsidiary, affiliate, or controlled person of LifeLock; the officers, directors, agents, employees of LifeLock; any counsel in the Covered Class Action; and any judge or court staff presiding over the Covered Class Action or this action.
2.“Covered Class Action” means Napoleon Ebarle et al. v. LifeLock, Inc., No. 3:15- cv-258 (N.D. Cal. filed Jan. 19, 2015).
3.“Money Received” means money paid as restitution by LifeLock to Affected Consumers by check, charge-back, or other transfer of funds, to the extent:
Such money was issued by LifeLock pursuant to settlement: (i) of the Covered Class Action, or (ii) with any State Attorney General’s Office entered within four (4) months from the date of this Order;
Either: (i) a credit card company, bank, or other financial institution has credited the Affected Consumer’s financial account with such money, or
(ii) any such check has been cashed by the Affected Consumer; and
Consumer information involved in payment of such money is handled in a manner that is consistent with the Commission’s privacy and data security standards, policies, and practices.
For the purpose of clarification, Money Received shall not include any administrative fees, attorneys’ fees, or any other amount not directly issued to an Affected Consumer, or any coupons, credits, or other consideration applicable
- 3 -
Case 2:10-cv-00530-JJT Document 64-1 Filed 12/17/15 Page 4 of 16
towards the purchase of products or services offered by LifeLock or any other entity.
IT IS ORDERED that the Permanent Injunction shall remain in full force and effect except Sections VI through IX of the Permanent Injunction as to LifeLock, which are replaced with Sections V through VIII below.
II.MONETARY JUDGMENT AND CONSUMER REDRESS IT IS FURTHER ORDERED that:
A.Judgment in the amount of One Hundred Million Dollars ($100,000,000) is entered in favor of the Commission against LifeLock as equitable monetary relief.
LifeLock shall satisfy the judgment as follows:
Pursuant to L.R. Civ. 67.1 and Fed. R. Civ. P. 67, LifeLock shall: (a) deposit One Hundred Million Dollars ($100,000,000) (“Settlement Funds”) into the Court’s Registry within five (5) business days of entry of this Order to be held in escrow for the sole purpose of distributing the funds in accordance with this Order, and (b) comply fully with all of its obligations under Section II of this Order. LifeLock is hereby authorized to deposit One Hundred Million Dollars ($100,000,000) into the Court’s Registry.
If LifeLock fails to comply with Section II.B.1(a), the judgment amount of One Hundred Million Dollars ($100,000,000) shall become immediately due and payable to the Commission, and LifeLock shall not have any right
- 4 -
Case 2:10-cv-00530-JJT Document 64-1 Filed 12/17/15 Page 5 of 16
to any credit, offset, or any other reimbursement for any Money Received by Affected Consumers as provided in this Order.
C.The Settlement Funds shall include any interest that the funds accrue while in the Court’s Registry, minus costs pursuant to L.R. Civ. 67.1.
D.The Settlement Funds shall be disbursed by motions pursuant to this Section II, if both of the following conditions are met: (1) LifeLock acts expeditiously to obtain final court approval of the settlement agreement in the Covered Class Action; and (2) all such motions are filed by the earlier of eighteen (18) months from the date of this Order or two hundred seventy
(270) days from the date of final court approval of the settlement agreement in the Covered Class Action.
E.Subject to Section II.D, LifeLock may use up to Sixty Eight Million Dollars ($68,000,000) of the Settlement Funds to fund an escrow account established in the Covered Class Action if all of the following conditions are met:
LifeLock has obtained preliminary court approval of the settlement agreement in the Covered Class Action; and
The agreement governing the escrow fund ensures that:
All payments from the escrow account are issued directly to Affected Consumers for the sole purpose of providing consumer redress;
All payments from the escrow account either become Money Received by Affected Consumers within one hundred twenty (120) days of such payment or are returned immediately to the escrow account;
- 5 -
Case 2:10-cv-00530-JJT Document 64-1 Filed 12/17/15 Page 6 of 16
The escrow account transfers all remaining funds, including any interest that has accrued in the escrow account, to the Commission after the expiration of the deadline for motions in Section II.D.2; and
As many Affected Consumers as reasonably practicable receive payments from the escrow fund.
F.If an agreement governing an escrow account funded pursuant to Section II.E ceases to comply with any of the criteria in Section II.E.2, or such escrow account ceases to be administered in compliance with all of the criteria in Section II.E.2, LifeLock shall immediately:
(1) deposit into the Court’s Registry as Settlement Funds the amount of money in the escrow fund immediately prior to such non-compliance, or if the Settlement Funds have already been transferred by the Court to the Commission under Section II.J, (2) pay such amount directly to the Commission.
G.Subject to Sections II.D and H through M, LifeLock shall have a right to the amount of Settlement Funds remaining in the Court’s Registry equal to: (1) Money Received by Affected Consumers, other than such Money Received that was paid out of an escrow account funded under Section II.D and compliant with Section II.D.2 at the time of issuance of payment to the Affected Consumer, plus (2) the interest accrued on such amount specified in subsection
(1) while in the Court’s Registry.
H.LifeLock shall have a right to seek disbursement of the funds identified in Section A. by motion in up to three (3) installments.
I.Under no circumstances shall LifeLock receive more than one (1) disbursement from the Settlement Funds for each payment of Money Received by Affected Consumers.
- 6 -
Case 2:10-cv-00530-JJT Document 64-1 Filed 12/17/15 Page 7 of 16
J. The Commission shall be entitled to all remaining Settlement Funds in the Court’s Registry: (1) upon the Court’s resolution of all motions timely filed under this Section II, or if no such timely filed motion is pending, (2) upon the expiration of the deadline for motions in Section II.D.2.
K.If any portion of the Money Received by Affected Consumers for which LifeLock received disbursement from the Settlement Funds is returned to LifeLock, LifeLock shall remit such portion to the Commission within ten (10) business days.
L.All money paid to the Commission pursuant to this Order may be deposited into a fund administered by the Commission or its designee to be used for equitable relief, including consumer redress and any attendant expenses for the administration of any redress fund. If a representative of the Commission decides that direct redress to consumers is wholly or partially impracticable or money remains after redress is completed, the Commission may apply any remaining money for such other equitable relief (including consumer information remedies) as it determines to be reasonably related to LifeLock’s practices as set forth in this Order. Any money not used for such equitable relief is to be deposited to the U.S. Treasury as disgorgement. LifeLock has no right to challenge any actions the Commission or its representatives may take pursuant to this Subsection.
M.LifeLock relinquishes dominion and all legal and equitable right, title, and interest in all assets transferred to the Court’s Registry or to the Commission pursuant to this Order, except as specified in Sections II.D through II.J.
N.Lifelock warrants and represents that as of the date it executes this Order, after giving effect to Section II, Lifelock will not: (1) be insolvent (either because its financial condition is such that the sum of its debts is greater than the fair market value of its assets or
- 7 -
Case 2:10-cv-00530-JJT Document 64-1 Filed 12/17/15 Page 8 of 16
because the fair saleable value of its assets is less than the amount required to pay its probable liabilities on its existing debts as they mature); (2) have unreasonably small capital with which to engage in its business; or (3) have incurred debts beyond its ability to pay as they become due.
O.LifeLock acknowledges that its Taxpayer Identification Numbers which it previously submitted to the Commission may be used for collecting and reporting any delinquent amount arising out of this Order, in accordance with 31 U.S.C. §7701.
P.All payments to the Commission under this Order must be made by electronic fund transfer in accordance with instructions previously provided by a representative of the Commission.
IT IS FURTHER ORDERED that LifeLock shall provide customer information requested by the Commission to enable the Commission to efficiently administer customer redress. If a representative of the Commission requests in writing any information related to redress, LifeLock must provide it, in the form prescribed by the Commission, within ten (10) days.
IT IS FURTHER ORDERED that there is no just reason for delay of entry of this Order, and the clerk shall enter this Order immediately.
IT IS FURTHER ORDERED that, in order that compliance with the provisions of the Permanent Injunction and this Order may be monitored:
A.For a period of five (5) years from the date of entry of this Order, LifeLock shall notify the Commission of any changes in its corporate structure or any business entity that
- 8 -
Case 2:10-cv-00530-JJT Document 64-1 Filed 12/17/15 Page 9 of 16
LifeLock directly or indirectly controls, or has ownership interest in, that may affect compliance obligations under the Permanent Injunction or this Order, including, but not limited to: incorporation or other organization; a dissolution, assignment, sale, merger, or other action; the creation or dissolution of a subsidiary, parent, or affiliate that engages in any practices subject to the Permanent Injunction or this Order; or a change in the business name or address, at least thirty (30) days prior to such change, provided that, with respect to any proposed change in the business entity of which LifeLock learns less than thirty (30) days prior to the date such action is to take place, LifeLock shall notify the Commission as soon as practicable after obtaining such knowledge.
B.One hundred eighty (180) days after the date of entry of this Order and annually thereafter for a period of five (5) years, LifeLock shall provide a written report to the FTC, which is true and accurate and sworn to under penalty of perjury, setting forth in detail the manner and form in which it has complied and is complying with the Permanent Injunction and this Order. This report shall include, but not be limited to: (1) a copy of each acknowledgement of receipt of the Permanent Injunction and this Order obtained pursuant to the Section titled “Distribution of Order;” and (2) any other changes required to be reported under Subsection A of this Section.
C.LifeLock shall notify the Commission of the filing of any bankruptcy petition, insolvency proceeding, or similar proceeding within fifteen (15) days of its filing. Unless directed otherwise by a Commission representative in writing, all submissions to the Commission pursuant to this Order must be emailed to DEbrief@ftc.gov or sent by overnight courier (not the U.S. Postal Service) to: Associate Director for Enforcement, Bureau of
- 9 -
Case 2:10-cv-00530-JJT Document 64-1 Filed 12/17/15 Page 10 of 16
Consumer Protection, Federal Trade Commission, 600 Pennsylvania Avenue, NW, Washington, DC 20580. The subject line must begin: FTC v. LifeLock, Inc., X100023.
IT IS FURTHER ORDERED that, for the purpose of monitoring LifeLock’s compliance with the Permanent Injunction and this Order:
A.Within fourteen (14) days of receipt of written notice from a representative of the Commission, LifeLock shall submit additional written reports or other requested information, which are true and accurate and sworn to under penalty of perjury; produce documents for inspection and copying; appear for deposition; and provide entry during normal business hours to any business location in LifeLock’s possession or direct or indirect control to inspect the business operation;
B.In addition, the Commission is authorized to use all other lawful means, including but not limited to:
Obtaining discovery from any person, without further leave of court, using any of the procedures prescribed by Federal Rules of Civil Procedure 29, 30 (including telephonic depositions), 31, 33, 34, 36, 45, and 69;
Posing as consumers and suppliers to LifeLock, their employees, or any other entity managed or controlled in whole or in part by LifeLock without the necessity of identification or prior notice;
C.LifeLock shall permit representatives of the Commission to interview any employer, consultant, independent contractor, representative, agent or employee who has agreed to such an interview, relating in any way to any conduct subject to the Permanent Injunction or this Order. The person interviewed may have counsel present; and
- 10 -
Case 2:10-cv-00530-JJT Document 64-1 Filed 12/17/15 Page 11 of 16
D.Nothing in this Order limits the Commission’s lawful use of compulsory process, pursuant to Sections 9 and 20 of the FTC Act, 15 U.S.C. §§ 49, 57b-1, to obtain any documentary material, tangible things, testimony, or information relevant to unfair or deceptive acts or practices in or affecting commerce (within the meaning of 15 U.S.C. § 45(a)(1)).
VII.RECORD KEEPING PROVISIONS
IT IS FURTHER ORDERED that:
LifeLock is hereby restrained and enjoined from failing to create and retain the following records for the following periods:
A.For a period of thirteen (13) years from the date of entry of the Permanent Injunction, the following records in connection with the sale or provision of products or services related to identity theft:
Accounting records that reflect the cost of goods or services sold, revenues generated, and the distribution of such revenues;
Personnel records accurately reflecting: the name, address, and telephone number of each person employed in any capacity by such business, including as an independent contractor; that person’s job title or position; the date upon which the person commenced work; and the date and reason for the person’s termination, if applicable;
Consumer files containing the names, addresses, phone numbers, dollar amounts paid, quantity of items or services purchased, and description of items or services purchased, to the extent such information is obtained in the ordinary course of business;
- 11 -
Case 2:10-cv-00530-JJT Document 64-1 Filed 12/17/15 Page 12 of 16
Complaints and refund requests (whether received directly, indirectly, or through any third party) and any responses to those complaints and requests;
Copies of all sales scripts, training materials, advertisements, or other marketing materials;
Any documents, whether prepared by or on behalf of LifeLock, that contradict, qualify or call into question LifeLock’s compliance with Sections I, II, and III of the Permanent Injunction; and
All records and documents necessary to demonstrate full compliance with each provision of the Permanent Injunction and this Order, including but not limited to, copies of acknowledgments of receipt required by the Permanent Injunction and this Order, all reports submitted to the FTC pursuant to the Section of this Order titled “Compliance Reporting.”
B.For a period of three (3) years after the date of preparation of each Assessment required under the Section of the Permanent Injunction titled “Biennial Assessment Requirements”: All materials relied upon to prepare the Assessment, whether prepared by or on behalf of LifeLock, including but not limited to all plans, reports, studies, reviews, audits, audit trails, policies, training materials, and assessments, and any other materials relating to LifeLock’s compliance with the Section of the Permanent Injunction titled “Biennial Assessment Requirements.”
C.For a period of five (5) years from the date of entry of this Order, records and documents sufficient to provide all material facts regarding Money Received by Affected Consumers and the administration of the escrow account funded under Section II.E, including
- 12 -
Case 2:10-cv-00530-JJT Document 64-1 Filed 12/17/15 Page 13 of 16
but not limited to: (1) identity of each Affected Consumer who received a payment, (2) the amount of each payment, (3) the manner in which LifeLock issued each payment, (4) the date of each payment, (5) evidence that each payment was credited to an Affected Consumer’s financial account or was otherwise cashed, and (6) all escrow account activity and balances.
VIII.DISTRIBUTION OF ORDER
IT IS FURTHER ORDERED that:
For a period of five (5) years from the date of entry of this Order, LifeLock shall deliver copies of the Permanent Injunction and this Order as directed below:
A.LifeLock must deliver a copy of the Permanent Injunction and this Order to: (1) all of its principals, officers, directors, and managers; (2) all of its employees, agents, and representatives who engage in conduct related to the subject matter of the Permanent Injunction and this Order; and (3) any business entity resulting from any change in structure set forth in Subsection A of the Section of this Order titled “Compliance Reporting.” For current personnel, delivery shall occur within seven (7) days of entry of this Order. For all others, delivery shall occur prior to them assuming their responsibilities. For any business entity resulting from any change in structure set forth in Subsection A of the Section of this Order titled “Compliance Reporting,” delivery shall be at least ten (10) days prior to the change in structure.
B.LifeLock must secure a signed and dated statement acknowledging receipt of the Permanent Injunction and this Order, within thirty (30) days of delivery, from all persons receiving a copy of the Permanent Injunction and this Order pursuant to this Section.
- 13 -
Case 2:10-cv-00530-JJT Document 64-1 Filed 12/17/15 Page 14 of 16
ACKNOWLEDGEMENT OF RECEIPT OF THIS ORDER
IT IS FURTHER ORDERED that LifeLock, within five (5) business days of receipt of this Order as entered by the Court, must submit to the Commission a truthful sworn statement acknowledging receipt of this Order.
RETENTION OF JURISDICTION
IT IS FURTHER ORDERED that the Court shall continue to retain jurisdiction of this matter for all purposes.
IT IS SO ORDERED, this day of 2015.
U.S. District Judge
United States District Court for the
District of Arizona
- 14 -
Case 2:10-cv-00530-JJT Document 64-1 Filed 12/17/15 Page 15 of 16
STIPULATED AND AGREED TO BY:
FOR DEFENDANT LIFELOCK:
/s/ Todd Davis /s/ David Boies
Richard Todd Davis David Boies
Chief Executive Officer, LifeLock, Inc. Boies, Schiller & Flexner LLP
333 Main Street
Armonk, NY 10504
(914) 749-8200 (telephone)
(914) 749-8300 (facsimile)
Counsel for LifeLock, Inc.
- 15 -
Case 2:10-cv-00530-JJT Document 64-1 Filed 12/17/15 Page 16 of 16
FOR PLAINTIFF FEDERAL TRADE COMMISSION
/s/ Gregory J. Madden
Gregory J. Madden
Federal Trade Commission
600 Pennsylvania Ave, NW
Mail Drop CC-9528
Washington , DC 20580
(202) 326-2426 (Madden)
(202) 326-3197 (facsimile) firstname.lastname@example.org
- 16 -