Unreported / Non-Citable
Background
This consolidated putative class action alleges Google violated the California Invasion of Privacy Act (CIPA) § 631(a) by recording customer service calls through its Cloud Contact Center AI product and using those recordings to train AI models. When consumers call companies using Google's service—such as Home Depot—they first interact with Google's virtual agent, which does not disclose its Google affiliation. If transferred to a human agent, Google continues listening, providing real-time transcripts, suggested articles, and smart replies, and retains the capability to use recordings to improve its own AI models. Three named plaintiffs remain after others were compelled to arbitration: James Fox and Peter Samish, who hold Home Depot accounts, and Christopher Barulich, who does not allege having an account. All three assert a single cause of action under CIPA § 631(a) for Google's alleged nonconsensual interception of their Home Depot calls.
Google moved to dismiss under Rule 12(b)(6). The court applied the plausibility standard from Twombly and Iqbal, accepting well-pleaded factual allegations as true but not conclusory statements. The court also granted Google's unopposed request for judicial notice of Home Depot's Account Terms and Conditions and Privacy and Security Statement, which were incorporated by reference in the complaint. The court analyzed two elements of § 631(a): consent and intent, addressing each plaintiff's allegations separately.
The Court’s Holding
The court dismissed all three plaintiffs' claims with leave to amend. For Fox and Samish, the court held they failed to plausibly allege lack of consent because, as Home Depot accountholders, they agreed to Home Depot's Privacy and Security Statement. That statement disclosed collection of customer care call recordings and disclosure to 'service providers that process information on [Home Depot's] behalf,' a category that plainly includes Google given the complaint's allegations that Google analyzed calls and provided smart replies to Home Depot agents. The statement did not limit disclosure to delayed sharing or require service providers to be named individually, nor did it restrict subsequent use of the data by service providers. Because Fox and Samish consented to the initial collection, they could not state a claim under § 631(a)(1) or (a)(2), and their § 631(a)(3) claim failed for lack of a predicate violation. For Barulich, the court found he adequately alleged lack of consent because he is not a Home Depot accountholder and Google did not show he assented to or was aware of the privacy policy. However, all three plaintiffs failed to plausibly allege Google acted 'intentionally' or 'willfully' without consent. The complaint contained only conclusory repetitions of the statutory elements without factual support for Google's intent to record without consent. The court rejected Google's argument that amendment would be futile based on its contract with Home Depot requiring consent, noting the record does not foreclose allegations that Google knew Home Depot was not obtaining consent.
The court granted leave to amend by November 12, 2026, noting this is the first opportunity for plaintiffs to amend with the benefit of the court's analysis. Plaintiffs may not add new claims or parties without leave of court or stipulation. If no amended complaint is filed, claims will be dismissed with prejudice.
Key Takeaways
- Consent is an element of a CIPA § 631(a) claim, not an affirmative defense, placing the burden on plaintiffs to plead lack of consent.
- A company's privacy policy disclosing call recordings may be shared with 'service providers' can constitute consent to real-time processing by third-party AI vendors like Google, even if the vendor is not specifically named.
- Plaintiffs must allege specific facts showing the defendant intended to intercept communications without consent; conclusory allegations tracking statutory language are insufficient.
- A non-accountholder plaintiff may adequately allege lack of consent where there is no evidence they agreed to or were aware of the relevant privacy policy.
- Claims under § 631(a)(3) for subsequent use of recordings require a predicate violation of § 631(a)(1) or (a)(2); consent to initial collection defeats the predicate.
Why It Matters
This ruling clarifies the pleading standards for CIPA § 631(a) claims in the context of AI-powered contact center services. By holding that consent is an element and that broad service-provider disclosures in privacy policies can encompass real-time AI processing by unnamed third parties, the decision raises the bar for plaintiffs challenging data flows in modern customer service ecosystems. The intent requirement adds a further hurdle: plaintiffs must allege facts suggesting the technology provider knew or recklessly disregarded that the business customer failed to obtain user consent. The decision reflects a growing judicial trend of scrutinizing privacy claims against AI infrastructure providers where the direct customer relationship runs through an intermediary business. The leave to amend allows plaintiffs to attempt to plead facts showing Google's awareness of Home Depot's consent failures, which could shape future discovery in similar AI privacy litigation.