CFDBPA Confined to Consumer Transactions; Speculative Cybersecurity Risk Cannot Establish Article III Standing; Utility Shutoff Due Process Satisfied by Notice and Meaningful Bill-Dispute Procedures

I. Introduction

This appeal arose from a putative class action brought by electricity ratepayers against the Virgin Islands Water and Power Authority (“VIWAPA”) and vendors involved in VIWAPA’s metering system, including Tantalus Systems, Inc. (“Tantalus”) and Itron, Inc. (“Itron”). Plaintiffs attributed alleged overbilling, threatened discontinuation notices, and system malfunction to the meter reading/advanced metering infrastructure supplied to the utility.

The case presented three core sets of issues:

• Territorial consumer protection scope: whether the Virgin Islands Consumer Fraud and Deceptive Business Practices Act (“CFDBPA”), 12A V.I.C. §§ 303–304, applies to a utility’s purchase of a metering system from vendors.
• Constitutional standing: whether alleged vulnerability of the metering system to cyberattack—without an actual or imminent attack—creates an Article III injury-in-fact supporting a failure-to-warn tort theory.
• Procedure and case management: (a) whether plaintiffs preserved a challenge to a magistrate judge’s discovery stay under Fed. R. Civ. P. 72(a), and (b) whether the district court properly struck witness declarations under Fed. R. Civ. P. 26 and 37(c)(1) at summary judgment on plaintiffs’ Fourteenth Amendment procedural due process claim about utility shutoff process.

II. Summary of the Opinion

The Third Circuit affirmed across the board:

• CFDBPA claim dismissed: The court held the CFDBPA does not reach the transaction at issue because it was a commercial sale of an electric-metering system to a public utility, not the sale of “merchandise” usually sold directly to household consumers.
• Failure-to-warn tort claim dismissed for lack of standing: Plaintiffs’ alleged harms (fear/anxiety and potential future power loss from a speculative cyberattack) were not “actual or imminent,” and thus did not constitute an injury-in-fact.
• Discovery stay challenge forfeited: Plaintiffs failed to appeal the magistrate judge’s stay to the district judge under Rule 72(a); absent “truly exceptional circumstances,” the appellate court declined review.
• Witness declarations properly struck: The district court did not abuse its discretion in excluding late/undisclosed witnesses under Rule 37(c)(1).
• Summary judgment for VIWAPA on due process: VIWAPA’s disconnection notice and dispute mechanisms, coupled with the ability to appeal to the Virgin Islands Public Services Commission (“PSC”), satisfied procedural due process requirements under Memphis Light, Gas, and Water Div. v. Craft.

III. Analysis

A. Precedents Cited (and How They Shaped the Decision)

1. Pleading and dismissal standards

• Mayer v. Belichick — Provided the Third Circuit’s de novo framework for reviewing Rule 12(b)(6) dismissals and the “facially plausible” pleading requirement. The panel used it to anchor the threshold question: whether plaintiffs’ CFDBPA theory and standing allegations plausibly stated a claim within the court’s jurisdiction.

2. CFDBPA scope and interpretive methodology for Virgin Islands law

• Gov't of U.S.V.I. v. Takata Corp. — Treated as persuasive authority for the proposition that the CFDBPA’s definition of “merchandise” (“usually sold directly to the consumer”) limits the statute to consumer transactions, not general commercial supply-chain transactions. The panel relied on this logic to classify the VIWAPA metering-system procurement as outside CFDBPA coverage.
• Ndungu v. Att'y Gen. United States; Singh v. Att'y Gen.; Keeley v. Loomis Fargo & Co. — These cases supplied the Erie-like principle for using non-binding local decisions: Superior Court authority is persuasive “in the absence of persuasive data that the highest court of the state would decide otherwise.” This legitimized reliance on Takata as a guidepost for CFDBPA interpretation.
• Banks v. Int'l Rental & Leasing Corp. — Mentioned (but not reached) in a forfeiture/alternative-grounds note. Its presence signals that parties disputed the analytic framework for determining Virgin Islands common law, but the panel avoided it because the CFDBPA claim failed categorically on statutory scope.
• Laurel Gardens, LLC v. Mckenna; In re Google Inc. Cookie Placement Consumer Priv. Litig. — Cited for the appellate principle that a court of appeals may affirm on any ground supported by the record. The panel used this to resolve the CFDBPA issue on statutory scope without addressing other defenses (e.g., the CFDBPA “Authorized-Action Exemption,” 12A V.I.C. § 333).

3. Article III standing and speculative future harm

• Food & Drug Admin. v. All. for Hippocratic Med. — Supplied the modern three-part standing test (injury-in-fact, causation, redressability) and the requirement that injury be “concrete,” “particularized,” and “actual or imminent.” The panel applied it to conclude that fear of a hypothetical cyberattack is not an injury-in-fact.
• Reilly v. Ceridian Corp. — Reinforced that speculative chains of possibilities (e.g., risk of future misuse/harm) do not satisfy imminence for standing. The court analogized plaintiffs’ cyber-vulnerability allegations to Reilly’s rejection of standing based on contingent future events.
• Russell v. DeJongh — Confirmed that although the District Court of the Virgin Islands is an Article IV court, litigants must still satisfy Article III standing requirements. This foreclosed any argument that territorial court status relaxes constitutional standing constraints.

4. Forfeiture of objections to magistrate judge orders; mootness

• Simko v. U.S. Steel Corp. — Established that failure to object/appeal a magistrate judge’s non-dispositive order to the district judge under Fed. R. Civ. P. 72(a) forfeits appellate review absent “truly exceptional circumstances.” The panel applied Simko to reject the discovery-stay challenge.
• Chafin v. Chafin — Cited on mootness (“effectual relief”). The panel observed that even if the discovery stay were erroneous, dismissal of the underlying claims undermined any meaningful relief—supporting a mootness rationale as an additional barrier.

5. Summary judgment review and sanctions for disclosure failures

• Jutrowski v. Township of Riverdale — Provided the de novo standard for reviewing grants of summary judgment under Fed. R. Civ. P. 56.
• Nicholas v. Pa. State Univ.; Konstantopoulos v. Westvaco Corp. — Provided the abuse-of-discretion standard for discovery sanctions and, crucially, Nicholas’s four-factor framework (prejudice/surprise, ability to cure, disruption, bad faith/willfulness). The district court applied these factors to strike late/undisclosed witness declarations under Fed. R. Civ. P. 37(c)(1).

6. Procedural due process for utility termination; exhaustion-like principles

• Memphis Light, Gas, and Water Div. v. Craft — The controlling due process benchmark: before termination, customers must receive notice and an opportunity to present billing disputes to a designated employee empowered to review and rectify error. The panel held VIWAPA’s notice and dispute processes (plus PSC appeal) met Memphis Light.
• Alvin v. Suzuki — Supplied the principle that plaintiffs ordinarily cannot bypass available procedures and recast the dispute as a federal due process claim; only if procedures are “unavailable,” “patently inadequate,” or a “sham” may plaintiffs skip them. The panel used Alvin to reject plaintiffs’ futility argument where the record lacked evidence of sham or inadequacy.
• Gagliardo v. Connaught Lab'ys, Inc. — Used to reject emotional-distress damages as insufficiently supported/linked; in this opinion it reinforced that alleged distress did not establish damages “as a result of a due process violation” without evidence of a due-process defect causing compensable harm.

B. Legal Reasoning

1. CFDBPA: a consumer statute limited to consumer transactions

The panel’s CFDBPA analysis is textual and categorical. The statute targets deceptive acts “in the conduct of any trade or commerce,” but the definitions narrow its reach to misrepresentations “made in connection with the sale … of consumer goods or services” to a “consumer” who purchases “merchandise” for household use. The court emphasized the definitional hinge: “merchandise” is “any article of commerce usually sold directly to the consumer.”

Applying those definitions, the court characterized the metering-system sale as a commercial procurement by a public utility for grid operations—not a sale “directly to” household purchasers. That classification removed the entire transaction from CFDBPA coverage, making dismissal appropriate without needing to address other statutory defenses (including the Authorized-Action Exemption in 12A V.I.C. § 333).

2. Standing: vulnerability plus fear is not “imminent” harm

The tort failure-to-warn theory depended on alleged cybersecurity vulnerability and potential power loss if attackers exploited it. The panel treated this as a paradigmatic “speculative string of events” problem: plaintiffs did not allege an actual attack, nor facts showing imminence. The asserted injury was fear/anxiety of what might happen.

Under Food & Drug Admin. v. All. for Hippocratic Med. and Reilly v. Ceridian Corp., that is not an injury-in-fact because it is neither “actual” nor “imminent.” Consequently, the federal court lacked jurisdiction to adjudicate the tort claim, and dismissal was required regardless of the merits.

3. Discovery stay: Rule 72(a) forfeiture as a strict gatekeeping rule

The opinion underscores a procedural discipline point: a party must timely seek district-judge review of a magistrate judge’s non-dispositive order under Fed. R. Civ. P. 72(a). Appellants did not, so under Simko v. U.S. Steel Corp. they forfeited appellate review absent exceptional circumstances (not shown). The panel also noted that dismissal of the complaint further undercut any practical remedy (Chafin v. Chafin).

4. Excluding late/undisclosed witnesses at summary judgment

The court affirmed exclusion under Fed. R. Civ. P. 37(c)(1), applying Nicholas v. Pa. State Univ.’s factors. The key logic:

• Prejudice/surprise: late, vague, or absent disclosures deprived VIWAPA of targeted discovery and depositions.
• Inability to cure without disruption: declarations surfaced in the summary-judgment opposition, when curing would require reopening discovery and altering schedules.
• Rebuttal/impeachment “carve-out” rejected: plaintiffs invoked Fed. R. Civ. P. 26(a)(1)(A)(i)’s impeachment exception, but the panel agreed the statements were substantive evidence to create fact disputes, not impeachment of defense witnesses’ credibility.

This portion of the opinion reinforces that “trial by ambush” concerns apply with full force at summary judgment, where declarations can function as dispositive evidence.

5. Procedural due process: Memphis Light satisfied by notice plus accessible dispute review

On the merits of the due process claim against VIWAPA, the panel used Memphis Light, Gas, and Water Div. v. Craft as the governing framework: prior to termination, customers must receive notice and an opportunity to present a billing dispute to an empowered employee who can correct errors.

The record showed VIWAPA:

• issued a Disconnection Notice with contact instructions (phone, in-person, website) and an invitation to work with customer service representatives;
• provided billing dispute forms online and at customer service offices; and
• allowed escalation to the PSC, which has statutory authority and detailed complaint procedures.

Collectively, those procedures met Memphis Light’s due process minimum. Plaintiffs’ assertion of futility failed under Alvin v. Suzuki because they offered no evidence that the procedures were “unavailable,” “patently inadequate,” or a “sham,” and some plaintiffs did not use the processes at all.

C. Impact

Although nonprecedential, the decision is likely to be cited persuasively in the Virgin Islands and within the Third Circuit for four practical propositions:

• Narrowing CFDBPA exposure for upstream vendors: Vendors selling infrastructure to utilities (or other non-household entities) gain a strong scope argument that CFDBPA does not apply to business-to-government/business-to-utility procurement transactions.
• Standing barrier for “cyber-risk only” theories: Plaintiffs alleging cybersecurity “vulnerability” without actual misuse or concrete imminent harm face dismissal for lack of injury-in-fact, especially where the alleged injury is emotional distress or fear of future outage.
• Strict preservation of magistrate-order issues: Litigants must use Rule 72(a) to preserve appellate review; failure to do so will generally end the issue.
• Disclosure compliance at summary judgment: Late/undisclosed witnesses risk exclusion under Rule 37(c)(1), and the “impeachment” exception will not rescue testimony offered substantively to create a genuine dispute of material fact.

On utility due process, the opinion also signals that layered processes—internal dispute review plus an administrative regulator appeal—will usually satisfy Memphis Light, absent proof those procedures are illusory in operation.

IV. Complex Concepts Simplified

• “Article III standing”: A constitutional requirement that a plaintiff show a real, personal harm (or one that is about to happen), that the defendant likely caused it, and that a court can likely fix it. Fear of a hypothetical cyberattack generally is not enough.
• “Injury-in-fact” and “imminence”: The harm must be concrete and not speculative. If the harm depends on multiple uncertain future steps (e.g., an attacker choosing to attack, succeeding, and causing an outage), courts often find no imminence.
• “CFDBPA scope”: The statute targets deception in consumer transactions—goods/services usually sold directly to household consumers. A utility’s purchase of equipment for the grid is a commercial transaction, not a consumer purchase.
• Rule 72(a) forfeiture: If a magistrate judge issues a non-dispositive order (like a discovery stay), you must promptly object to the district judge. If you do not, you usually cannot complain on appeal.
• Rule 26 disclosures and Rule 37(c)(1) sanctions: Parties must identify witnesses and provide required information during discovery. If they do not, the default consequence is exclusion of that witness/evidence—often fatal at summary judgment.
• Procedural due process in utility shutoffs (Memphis Light): Before turning off service, the utility must give notice and a fair chance to contest a bill with someone who can fix errors; it does not require a full trial-like hearing.

V. Conclusion

The Third Circuit’s decision affirms a set of limiting principles: (1) the CFDBPA is confined to consumer-facing transactions and does not extend to a public utility’s procurement of metering infrastructure; (2) speculative cybersecurity vulnerability and attendant fear do not establish Article III injury-in-fact; (3) failure to seek Rule 72(a) review forfeits appellate challenges to magistrate discovery orders; (4) undisclosed or late-disclosed witnesses may be excluded at summary judgment under Rule 37(c)(1); and (5) for utility shutoffs, notice plus meaningful bill-dispute procedures—supplemented by regulator review—satisfy procedural due process under Memphis Light, absent evidence the procedures are a sham.