Tuesday, July 25, 2017
Judge Colleen Kollar-Kotelly (D.D.C.) yesterday denied a motion by the Electronic Privacy Information Center for a Temporary Restraining Order and Preliminary Injunction to stop the Presidential Advisory Commission on Election Integrity from collecting voter roll data from the states.
The ruling also says that EPIC lacks organizational standing to sue on behalf of members of its advisory board, and that, while it has standing to seek redress for informational injuries under the E-Government Act, the Act isn't enforceable against the Commission (because it's not an "agency").
But the court went to lengths to say that the Commission limited its request to the states for only publicly available information, that the request is only a request (not a mandate) of the states, and that publicized voter information will be de-identified. If these things change, the court's analysis could well change, too. As a result, while the ruling allows the Commission's requests for voter roll information to go forward, the ruling also reminds us that states may decline to provide the information, and that the Commission will only get already-publicily-available information, and will have to store and use it with certain limitations.
The court said that EPIC lacked organizational standing to sue on behalf of members of its advisory board, because, even if EPIC is considered a membership organization for organizational standing purposes (which the court suggested it's not), "the only practical harms that Plaintiff's advisory board members would suffer, assuming their respective states decide to comply with the Commission's request in the future, is that their already publicly available information would be rendered more easily accessible by virtue of its consolidation on the [Commission's] computer systems . . . ." According to the court, that's not enough for standing.
But the court went on to say that EPIC had informational standing under the E-Government Act. The Act requires government agencies to conduct a privacy impact statement and publicize it. The court said that EPIC (1) had been deprived of this information and (2) therefore suffered the kind of harm that Congress sought to prevent by requiring it. The court also said that EPIC had standing under circuit precedent recognizing standing for an organization that "suffered a concrete and demonstrable injury to its activities . . . ." The court held that EPIC "has a long-standing mission to educate the public regarding privacy rights, and engage in this process by obtaining information from the government," and thus suffered such an injury.
But the court held that the Administrative Procedures Act (the basis of EPIC's suit, because the E-Government Act doesn't create a separate cause of action) doesn't apply to the Commission, because the Commission isn't an "agency" under the APA.
So even though EPIC has standing, it's not likely to succeed on the merits, and the court rejected its motion for a TRO and Preliminary Injunction.