TransUnion LLC v. Ramirez restructured the standing landscape for statutory class actions. The decision does not prohibit statutory damages class actions, but it imposes a rigorous concrete-injury requirement that forces plaintiffs' counsel to build their standing records as carefully as they build their merits records — and to calibrate class definitions so that every member can articulate the right kind of harm.
Doctrinal Framing: From Spokeo to TransUnion
The modern statutory standing problem has its origins in Spokeo, Inc. v. Robins, 578 U.S. 330 (2016), which held that Article III standing requires a concrete injury even in the context of a statutory violation. Spokeo remanded without resolving whether a particular inaccurate credit report constituted a concrete injury — leaving the lower courts to work out the line between bare procedural violations (insufficient) and real harm (sufficient).
TransUnion LLC v. Ramirez, 594 U.S. 413 (2021), drew that line with precision, in a fact pattern specifically designed by the defendant to test the reach of class certification for a statutory damages class. The implications for FCRA, TCPA, FDCPA, and analogous consumer-protection class actions are substantial.
TransUnion v. Ramirez: The Holding
TransUnion, a consumer credit reporting agency, operated a "Name Screen Alert" service. When a creditor subscribed, TransUnion would compare the credit applicant's name against the Treasury Department's Office of Foreign Assets Control (OFAC) list of terrorists, drug traffickers, and serious criminals. If the applicant's first and last name matched a name on the OFAC list — without any attempt to verify a match using other identifying information like date of birth or Social Security number — TransUnion would note a "potential match" on the credit report.
Sergio Ramirez, a California resident, discovered that his name had been flagged as a potential match for a person on the OFAC list when a car dealership refused to finalize his purchase after receiving a TransUnion report. He filed a class action under the Fair Credit Reporting Act, 15 U.S.C. § 1681 et seq., alleging that TransUnion's OFAC matching process violated the FCRA's requirement to use reasonable procedures to ensure maximum possible accuracy.
The class ultimately certified included 8,185 individuals. The parties stipulated that of those, 1,853 class members had their inaccurate credit reports actually disseminated to third-party creditors during the relevant period. The remaining 6,332 class members had inaccurate information in their TransUnion files but never had that information sent to anyone outside TransUnion.
A jury awarded statutory and punitive damages to all 8,185 class members. The Ninth Circuit affirmed. The Supreme Court, in a 5-4 decision authored by Justice Kavanaugh, reversed as to the 6,332 members.
The Rule: Concrete Injury Requires More Than a Statutory Violation
The Court articulated a two-step framework for concrete injury:
Step one: Close relationship to traditionally recognized harms. A statutory harm is concrete for Article III purposes if it "bears a close relationship to a harm traditionally recognized as providing a basis for a lawsuit in American courts." Physical harm, monetary harm, and various intangible harms — including reputational injury, disclosure of private information, and defamation — have historical roots in the common law. Courts should ask not whether the statutory cause of action precisely mirrors a common-law tort, but whether the statutory harm is analogous in kind.
Step two: Actual materialization of the harm. "An injury in law is not an injury in fact." A statutory violation, by itself, is insufficient. The plaintiff must demonstrate that the harm actually materialized — that the legislatively identified risk of harm actually produced some real-world consequence.
Applying this framework to the TransUnion class:
- The 1,853 class members whose inaccurate reports were disseminated to third-party creditors suffered concrete harm with a close relationship to defamation: a false statement about them was communicated to others. These class members had standing.
- The 6,332 class members whose inaccurate information sat in TransUnion's internal files without being shared had no concrete injury. The mere existence of inaccurate information in a private database, without dissemination, does not constitute a cognizable harm with a common-law analog.
The Court also addressed the 1,853 members' claims for harm from TransUnion's failure to send required disclosure notices in a specific format — holding that plaintiffs who did not open the mailed disclosures likely suffered no concrete injury because the harm from a formatting violation did not materialize in any real consequence.
Implications for FCRA Class Actions
TransUnion was itself an FCRA case, and its direct application to FCRA class litigation is immediate. The decision eliminates "all consumers who had an inaccurate file" as a viable class definition unless the claim is structured to capture only those whose inaccurate files were actually transmitted to third parties. A class of "all persons about whom TransUnion generated an OFAC flag" — or an analogous class defined by the mere existence of an error — no longer survives standing scrutiny as to members whose files were never disclosed.
Practical consequence: FCRA class definitions must be keyed to disclosures, not file contents. "All persons whose inaccurate credit reports containing [X] were transmitted to one or more third parties during the class period" captures the injury that TransUnion found concrete. "All persons whose credit files contained [X] during the class period" does not.
This precision requirement also creates an ascertainability challenge: plaintiffs must be able to identify, at certification, which class members' reports were transmitted and to whom. TransUnion's own records, obtained through targeted discovery, are the appropriate source. Where defendants resist producing transmission records, a protective order and document-level discovery are essential before the class definition is finalized.
Implications for TCPA Class Actions
Telephone Consumer Protection Act class actions present a slightly different standing picture. A TCPA violation — an unsolicited robocall or text message — typically involves a direct intrusion on the plaintiff's time, telephone line, and attention. Courts post-TransUnion have generally found concrete injury for recipients of actual calls or texts, reasoning that the harm has a close relationship to the common-law tort of intrusion upon seclusion or nuisance. The absence of a "dissemination" problem that split the TransUnion class is less likely to arise in TCPA cases where every class member received the offending communication.
The standing risk in TCPA class actions is more likely to arise at the fringes: putative class members who allege the defendant placed a call to a number that was reassigned to a new subscriber (who never provided consent) but who received only a "phantom" call that rang without connection or left a brief recorded message they never heard. Courts have divided on whether an unheard message or a single ring constitutes a cognizable TCPA injury after TransUnion.
Implications for FDCPA Class Actions
Fair Debt Collection Practices Act class actions face a significant TransUnion challenge where the alleged violation is a technical defect in a collection letter — an incorrect disclosure, improperly formatted validation notice, or wrong address for disputes — that caused no actual confusion, harm, or adverse consequence to the recipient. TransUnion's command that "an injury in law is not an injury in fact" maps directly onto these technical-violation cases.
The Eleventh Circuit, which has jurisdiction over Florida and Alabama FDCPA cases, has applied TransUnion to require that plaintiffs in technical-violation cases identify a real-world consequence: actual confusion about their debt-validation rights, a decision made in reliance on the defective notice, or interference with the consumer's ability to dispute the debt. A class of "all persons who received a collection letter containing [technical defect]" without any showing that members acted on or were confused by the defect faces standing problems as to many individual members.
Plaintiff Strategies Post-TransUnion
Define classes around materialized harms. The most durable post-TransUnion class definition is one where every member, by definition, experienced the concrete injury — not merely the risk of injury. In FCRA cases, that means transmitted files. In TCPA cases, actual receipt of the communication. In FDCPA cases, some articulable consequence from the defective notice.
Obtain and analyze defendant's disclosure and transmission records early. The difference between 1,853 members (who had standing) and 8,185 (the certified class, most of whom did not) was TransUnion's own transmission logs. In any case where concrete injury depends on disclosure, transmission, or communication to a specific plaintiff, those records must be obtained through targeted discovery before class definition is finalized. A class definition that turns out to include thousands of no-standing members is vulnerable to decertification at or after certification.
Plead the common-law analog. TransUnion's "close relationship" test requires counsel to identify the historical tort whose harm the statutory violation resembles. In privacy cases, the analogs are defamation (false statement to a third party), public disclosure of private facts, or intrusion upon seclusion. In debt collection cases, the relevant analog is fraud or deceptive business practices. In data breach cases, courts have debated whether the risk of future identity theft constitutes a cognizable harm; the answer turns on whether the plaintiff experienced actual misuse of their information, not merely the theoretical risk. These common-law analogs should be pleaded in the complaint, not just argued at certification.
Consider narrowing the class to high-certainty standing. In a case where only some class members experienced the concrete harm — some FCRA files were transmitted, others were not — consider defining the class to include only those whose files were transmitted. A smaller class with universal standing is substantially more litigation-robust than a larger class that will be challenged on standing grounds at every stage, including on appeal post-judgment.
Named plaintiffs must have concrete injury. Frank v. Gaos's standing analysis applies equally in cases where named plaintiffs' injuries are questionable. Ensure that each named class representative has experienced the concrete injury — not merely the statutory violation — before filing.
Open Questions
TransUnion does not resolve what level of dissemination or materialization is required. If a credit report is transmitted once to a single creditor who disregards it, is that sufficient? If a TCPA message is delivered to voicemail but the recipient never retrieves it, is the deposit of the message onto the carrier's system the injury or must the recipient actually experience the intrusion? Lower courts are developing these limits case by case.
The decision also does not disturb the principle that Congress can create new statutory rights and that violation of those rights constitutes injury-in-fact when the injury is sufficiently analogous to recognized harm. The line is difficult to locate precisely, but TransUnion's framework — close relationship to historical harm, plus actual materialization — will continue to define it for the foreseeable future.
Talk to Yates Anderson
If you are litigating a matter in this area — or weighing whether to — the working analysis above only goes so far. Request a case evaluation and a Yates Anderson attorney will respond within one business day.
Informational only. Not legal advice. No attorney-client relationship is created by reading this post. Consult a licensed attorney in your jurisdiction.