Summary
The United States District Court for the Southern District of Ohio dismisses Branden McAfee’s Fair Credit Reporting Act claims against DataX, Ltd. McAfee alleged that DataX improperly conditioned disclosure of his consumer file on submission of a Social Security card, W-2, or 1099 form. The court held that the FCRA and implementing regulation permitted DataX to require reasonable additional proof of identity, denied McAfee’s motion for leave to file a surreply, and denied leave to amend as futile.
Topics
Practice areas
Questions Presented
- Whether McAfee stated a claim under 15 U.S.C. § 1681g(a)(1) by alleging that DataX required a Social Security card, W-2, or 1099 form before disclosing his consumer file.
- Whether DataX's identification requirements were permissible under 15 U.S.C. § 1681h(a)(1) and 12 C.F.R. § 1022.123.
- Whether McAfee demonstrated good cause to file a surreply.
- Whether McAfee's proposed amended complaint would be futile.
- Whether McAfee was entitled to sanctions under Federal Rule of Civil Procedure 11.
Holdings
- A consumer reporting agency may require reasonable forms of identification as a condition of disclosing a consumer file, and the FCRA and 12 C.F.R. § 1022.123 do not require the agency to accept every form of identification the consumer considers sufficient. Because McAfee did not provide the documents DataX required, he failed to state a viable § 1681g claim.
- Leave to amend was properly denied because the proposed amended complaint did not cure the legal defect in McAfee's original complaint and therefore would be futile.
- McAfee did not demonstrate good cause for a surreply because DataX's reply responded to arguments raised in McAfee's opposition and did not introduce grounds requiring a further response.
- McAfee was not entitled to Rule 11 sanctions because DataX's legal arguments were not frivolous or improper and the later transmission of McAfee's file did not establish that DataX had made false factual assertions.
Key quotations
“In short, the regulation does not require DataX to accept any one of those forms of identification that McAfee may choose to present. Rather, DataX could specify any reasonable form of identification it thought appropriate.” (Law and Analysis, Part B)
“Because McAfee cannot cure the deficiencies in his Complaint, the Court DISMISSES this case WITH PREJUDICE.” (Conclusion)
Factual background
McAfee requested his consumer file from DataX, an alleged consumer reporting agency, providing his name, address, date of birth, Social Security number, driver's license, and, according to an exhibit, utility bills. DataX refused to disclose the file unless McAfee supplied a Social Security card, W-2, or 1099 form. McAfee alleged that this requirement violated the Fair Credit Reporting Act and caused him emotional and other damages, but he did not provide the additional documents DataX requested.
Procedural history
McAfee filed suit in Hamilton County Municipal Court on June 6, 2025, and served DataX on June 27, 2025. DataX removed the action to the Southern District of Ohio on July 25, 2025, and moved to dismiss. The court denied McAfee's motion for a surreply, granted DataX's motion to dismiss, denied leave to amend as futile, denied sanctions, dismissed the case with prejudice, and directed the Clerk to enter judgment.