Wednesday, December 27, 2017
D.C. Circuit Declines to Halt Election Integrity Commission Request for Voter Information for Lack of Standing
The D.C. Circuit ruled that the Electronic Privacy Information Center lacked standing to obtain an injunction halting a request by the Presidential Advisory Commission on Election Integrity for voter information from the states. The district court ruled earlier that EPIC had standing, but was unlikely to succeed on the merits, because the Commission wasn't an "agency" under the Administrative Procedure Act. The D.C. Circuit ruling has the same effect--denial of a preliminary injunction--but for a different reason: EPIC hasn't demonstrated a substantial likelihood of standing.
The ruling is only on EPIC's motion for a preliminary injunction. But EPIC's lack of standing at this preliminary stage may also mean that it (later) lacks standing to bring the claim at all. Based on the D.C. Circuit's ruling, it seems that only voters themselves, or an organization that represents voters, would have standing to bring this kind of claim.
EPIC initially brought the case to challenge the Commission's request for voter information without first conducting, and producing, a privacy impact assessment under the E-Government Act. EPIC argued that it was entitled to the assessment, and that its failure to receive it formed the basis of its standing.
The D.C. Circuit rejected that argument. The court ruled that EPIC lacked both informational injury and organizational injury. As to the former, informational injury, the court said that EPIC "has not suffered the type of harm that section 208 of the E-Government Act seeks to prevent. Indeed, EPIC is not even the type of plaintiff that can suffer such harm." The court said that section 208 was designed to protect the privacy of individuals (here, voters), not an organization like EPIC, an organization that does not have members (much less voter members) and whose only interest is in "ensur[ing] public oversight of record systems."
As to organizational injury, the court said that, because the E-Government Act doesn't confer an informational interest on EPIC (as above), EPIC can't ground organizational injury on the Act. "It follows that any resources EPIC used to counteract the lack of a privacy impact assessment--an assessment in which it has no cognizable interest--were "a self-inflicted budgetary choice that cannot qualify as an injury in fact." Moreover, the Commission's request for voter information without an assessment didn't cause EPIC to take any particular measures.
Finally, the court said that halting the Commission's collection of voter data wouldn't likely redress any informational or organizational injury, anyway. That's because ordering the Commission to halt its collection of information--assuming the Commission is subject to the Act--"only negates the need (if any) to prepare an assessment, making it less likely that EPIC will obtain the information it says is essential to its mission of "focus[ing] public attention on emerging privacy and civil liberties issues."