CASTELLANO COSMETIC SURGERY CENTER, P.A.

v.

DOYLE

a Florida corporation,

Plaintiff,

v. Case No. 8:21-cv-1088-KKM-CPT

RASHAE DOYLE, P.A., a Florida corporation, and GRACE RASHAE DOYLE an individual,

Defendants. ____________________________________/

ORDER ON MOTION FOR PRELIMINARY INJUNCTION

This action arose following the end of a business relationship between Castellano Cosmetic Surgery Center (Castellano), a plastic surgery center, and Rashae Doyle, P.A., a corporation founded by Grace Rashae Doyle, which contracted to perform cosmetic procedures for Castellano. Based on allegations that Ms. Doyle stole client information and sent an email to Castellano clients announcing the her new business, BevelUp, Castellano brings claims of misappropriation of trade secrets under the Defend Trade Secrets Act (DTSA); misappropriation of trade secrets under the Florida Uniform Trade Secrets Act (FUTSA); breach of contract; common law unfair competition; violation of the Computer Fraud and Abuse Act (CFAA); violation of the Florida Computer Abuse and Data Recovery Act (CADRA); and tortious interference with existing and prospective business relationships. Ms. Doyle contends that Castellano consented to the creation of the client list she used for marketing purposes, and any inclusion of Castellano clients (as opposed to her own) was not intentional misappropriation. Castellano seeks a preliminary injunction to prevent further misappropriation of its alleged trade secrets. But because it has not shown a substantial likelihood of success on the merits and has not articulated irreparable harm, the motion is denied.

I. FACTS

In May 2016, the parties entered a contract (the 2016 Agreement) which required Ms. Doyle to provide cosmetic procedures for Castellano and allowed her to treat clients at Castellano’s facility as an independent contractor. (Doc. 38-1). The 2016 Agreement included a confidentiality provision and a non-solicitation provision. Castellano also agreed that Ms. Doyle’s clients did not become Castellano clients simply because she treated them at Castellano’s facility.

Castellano has been cultivating elite clients since 2011 and stores client information in an electronic medical record (EMR) system. PatientNow, a third party, hosts Castellano’s EMR system, initially using a server-hosted database until converting to a cloud-hosted database in 2020. The EMR database contained names, addresses, email addresses, demographic information, and medical information. Castellano made concerted efforts to keep this information secret, including: (1) restricting access by login and password, (2) monitoring front desk computers, and (3) requiring confidentiality, non-disclosure, and non-solicitation agreements from independent contractors who had access to the EMR. When clients who had seen Ms. Doyle prior to 2016 were treated at Castellano, their information was added to Castellano’s EMR system. In May 2018, Ms. Doyle downloaded a list of clients from Castellano’s EMR system. Ms. Doyle claims that Pamela Horton, Castellano’s office manager, authorized her to do so and provided her instructions on how to download a list of clients that she had seen. Ms. Doyle maintains she needed the access after her personal computer, which housed her independent list, crashed and proved unrecoverable. Castellano contends that no one gave Ms. Doyle access or authorization to download such a list, and the only way Ms. Doyle could have obtained such a list was through calling

PatientNow. Whether with or without authorization, it is undisputed that Ms. Doyle downloaded a list of clients in May 2018. See (Doc. 38-5). Ms. Doyle then forwarded the list to both her own and her husband’s personal email addresses, converted it to an Excel spreadsheet, and, on a separate sheet within the spreadsheet, continued to add new clients she saw over the course of the next few years. Eventually, the relationship between Ms. Doyle and Castellano soured, and they executed a separation agreement (the 2020 Agreement) to resolve a dispute over client records, among other things. Castellano agreed to provide Ms. Doyle with treatment notes, plans of care, and documents related to 279 clients. These clients represented those in the Castellano EMR system that indicated they were referred by Ms. Doyle. The 2020 Agreement also contained the following merger clause that rendered the 2016 Agreement “null and void”: Any and all prior understandings and agreements between RDPA and CCSC, including but not limited to the agreement entered into between the Parties in 2016 (the “2016 Agreement”), with respect to the subject matter of this Agreement are merged into this Agreement, which fully and completely expresses the entire Agreement and understanding of RDPA and CCSC with respect to the subject matter hereof. The 2016 Agreement, which contains a non-solicitation provision, is null and void, and there are no other agreements between the Parties other than the 2016 Agreement. (Doc. 38-2 at 4). In 2021, Ms. Doyle started a new business called BevelUp. On April 10, 2021, BevelUp sent an email blast to announce its grand opening. The announcement was sent to the email addresses on the list Ms. Doyle downloaded in 2018 along with other email addresses she had added to her Excel spreadsheet since that time. This announcement led to the instant lawsuit and motion for preliminary injunction, as it was sent to Castellano’s general information email address. Four witnesses testified at the evidentiary hearing on the motion for a preliminary injunction. First, Castellano called Pamela Horton, Castellano’s office manager. Ms. Horton testified that Ms. Doyle was granted permission only to download commission reports, which displayed a list of patients seen by Ms. Doyle and her anticipated commissions from those visits. Ms. Horton also testified that Ms. Doyle never asked her for instructions on how to download a list of her clients from the EMR system in May 2018 and that she never gave any such instructions. On cross-examination, Ms.

Horton testified that the EMR system did not have tiered access, i.e., different levels that would have prevented Ms. Doyle from downloading client information on her own. Per Ms. Horton, by virtue of access to the commission reports, Ms. Doyle also had access to all client data, even though she did not have permission to download it. Castellano then called Jane Gustin, its marketing director. Ms. Gustin testified that email marketing was the primary way Castellano communicated with its clients and that Castellano cultivated its email list at a high cost. According to Ms. Gustin, the email addresses included on the list represented an immense value to Castellano. She also denied providing instructions on how to download a client list to Ms. Doyle. Next, Castellano called Dr. Joseph Castellano, the owner of the center. He testified that the he discovered Ms. Doyle’s email announcement by checking the [email protected] email address, which had received the announcement. Castellano uses this email address as a catch-all for general inquiries and as a placeholder within the EMR system. Regarding the particulars of Ms. Doyle’s access, Dr. Castellano testified that she was given access and authorization to download commission reports from the EMR, but that she did not have access to all the reports on the system (unlike Ms. Horton’s testimony, which was that Ms. Doyle had access but not authorization to all reports). He testified that he also never provided Ms. Doyle permission to generate the 2018 list. He speculated that the only way she could have downloaded the client list in 2018 was by calling PatientNow, the third party that hosted the EMR system, and requesting access. By Dr. Castellano’s account, a simple log in to the system would not grant access to a full client report because he placed limitations in the EMR system to prevent Ms. Doyle’s unencumbered access. Finally, Castellano called Ms. Doyle. She testified that she maintained an independent list of the clients she saw on her personal computer. This list included the patients she saw prior to her time with Castellano and those she had acquired while performing services at Castellano. In May 2018, her personal computer crashed, and she was unable to recover this list. She testified that Ms. Horton provided instructions on how to download a list of clients that she had seen while at Castellano from the EMR system and that she did so with Ms. Horton’s consent. After she left Castellano in 2020, Ms. Doyle started her own business called BevelUp. She consolidated a list of email addresses for marketing purposes, including the 2018 download, a list of patients she received from the cosmetic surgery center she worked at prior to starting BevelUp, and other email addresses of people she knew who might be interested in her business. Ms. Doyle insisted that she did not know that the 2018 downloaded list included clients who were not her own until she was served with the Complaint. Since then, she testified that she has not used the 2018 list and is slowly segregating clients she never saw while at Castellano from the email list. As for her access to the Castellano EMR system while working there, Ms. Doyle testified that she enjoyed full access to information on the system, but was limited by her lack of knowledge of how to generate reports. Specifically, she did not need any special password or log-in credentials to run the client report, and she requested instructions only because Ms. Horton was the point person for administrative issues. Ms. Doyle denied calling PatientNow to obtain access to the list.

II. PROCEDURAL BACKGROUND

Castellano filed this action on May⁵, 2021, and filed its Motion for Preliminary Injunction (Doc. 4) on May⁷, 2021. The Court set a hearing on the motion for May 25, 2021. (Doc. 6). The parties filed a joint motion to postpone the hearing, so the Court rescheduled the hearing for June¹, 2021. (Docs. 9 & 10). Once again, the parties jointly moved to continue the hearing. (Doc. 12). The Court granted the motion and instructed the parties to file a request for hearing on the motion. (Doc. 13). The parties filed a joint motion requesting a hearing date of July 9, 2021. (Doc. 15). The Court granted the motion in part and set an evidentiary hearing for July 14, 2021. (Doc. 16).

At the start of the hearing, the Court informed the parties that, based on its review of the papers, Castellano would likely be unable to demonstrate success on the merits and irreparable harm for its claims of breach of contract,¹ unfair competition,

III. LEGAL STANDARD

“A preliminary injunction is an extraordinary and drastic remedy not to be granted unless the movant clearly establishes the burden of persuasion as to the four requisites.” Am. Civ. Liberties Union of Fla., Inc. v. Miami–Dade Cnty. Sch. Bd., 557 F. 3d 1177, 1198 (11th Cir. 2009) (quoting All Care Nursing Servs., Inc. v. Bethesda Mem’l Hosp., Inc., 887 F. 2d 1535, 1537 (11th Cir. 1989)). To obtain an injunction, a movant must show: (1) it has a substantial likelihood of success on the merits; (2) it will suffer irreparable injury absent an injunction; (3) the threatened injury to the movant outweighs the harm an injunction may cause the party opposing the injunction; and (4) an injunction would not disserve the public interest. Id. “Failure to show any of the four factors is fatal” to a motion for preliminary injunction. Id.

“A showing of irreparable injury is the sine qua non of injunctive relief.” Siegel v. 2 As to the unfair competition and tortious interference claims, the Court concluded that because it found Castellano was likely to prove that the client list was a trade secret, see infra, these tort claims were likely displaced by Florida statute. See § 688.008, Fla. Stat. (“[FUTSA] displace[s] conflicting tort, restitutory, and other law of this state providing civil remedies for misappropriation of a trade secret.”); Sentry Data Sys., Inc. v. CVS Health, 361 F. Supp. 3d 1279, 1294–95 (S.D. Fla. 2018) (Bloom, J.) (finding claim for unfair competition displaced where misappropriation of a trade secret comprised the underlying wrong); Am. Registry, LLC v. Hanaw, No: 2:13–cv–352–FtM–29CM, 2014 WL 12606501, at *6–7 (M.D. Fla. July 16, 2014) (Steele, J.) (concluding tortious interference claim was displaced by section 688.008, Florida Statutes, where plaintiff alleged the defendants interfered with customer relationships by converting proprietary information and soliciting customers). Neither party offered any argument as to why FUTSA does not displace these torts here. LePore, 234 F. 3d 1163, 1176 (11th Cir. 2000) (quotations omitted). A showing of irreparable injury must be “neither remote nor speculative, but actual and imminent.”

Ne. Fla. Chapter of the Ass’n of Gen. Contractors v. City of Jacksonville, 896 F. 2d 1283, 1285 (11th Cir. 1990) (quotation omitted). “An injury is ‘irreparable’ only if it cannot be undone through monetary remedies.” Id. “[W]here facts are bitterly contested and credibility determinations must be made to decide whether injunctive relief should issue, an evidentiary hearing must be held.” McDonald’s Corp. v. Robertson, 147 F. 3d 1301, 1312 (11th Cir. 1998). At an evidentiary hearing, the Court sits as both factfinder and assessor of credibility. See Four Seasons Hotels & Resorts, B.V. v. Consorcio Barr, S.A., 320 F. 3d 1205, 1211 (11th Cir. 2003). Highly disputed factual issues may cast doubt on the plaintiff’s substantial likelihood of success.

IV. ANALYSIS

Castellano argues that Ms. Doyle violated the Defend Trade Secrets Act (DTSA), the Florida Uniform Trade Secrets Act (FUTSA), the Computer Fraud and Abuse Act (CFAA), and the Florida Computer Abuse and Data Recovery Act (CADRA). As prejudgment relief, it asks this Court to enjoin Ms. Doyle from soliciting or initiating contact or communication with any client of Castellano except those 279 clients identified in the 2020 Agreement and from continuing to use the allegedly misappropriated client list. (Doc. 4). Because Castellano has demonstrated neither a substantial likelihood of success on the merits of its claims nor irreparable harm resulting from Ms. Doyle’s behavior, it has not met its burden to obtain the extraordinary remedy of a preliminary injunction.

A. Misappropriation of Trade Secrets

i. Substantial Likelihood of Success on the Merits Castellano claims Ms. Doyle misappropriated its trade secrets in violation of the DTSA, 18 U.S.C. § 1836(b), and the FUTSA, § 668.001–.009, Fla. Stat. To succeed on its DTSA and FUTSA claims, Castellano must prove that Ms. Doyle disclosed or used a trade secret without the express or implied consent of Castellano and “at the time of disclosure or use, [Ms. Doyle] knew or had reason to know that the knowledge of the trade secret was . . . acquired under circumstances giving rise to a duty to maintain the secrecy of the trade secret or limit the use of the trade secret.” 18 U.S.C. § 1839(5)(B)(ii)(II); see also § 688.002(2) (providing a nearly identical definition of misappropriation); Freedom Med., Inc. v. Sewpersaud, 469 F. Supp. 3d 1269, 1275 n.6 (M.D. Fla. 2020) (Dalton, J.) (“DTSA and FUTSA can be analyzed together.”). Castellano has sufficiently shown for purposes of the preliminary injunction motion that the client list is likely a trade secret and that Ms. Doyle used it in announcing her business, BevelUp. But it has not shown a substantial likelihood of success in proving that Ms. Doyle used the client list with knowledge that the list was acquired under circumstances giving rise to a duty to maintain the secrecy of these trade secrets. DTSA defines misappropriation in the following alternative ways: (A) acquisition of a trade secret of another by a person who knows or has reason to know that the trade secret was acquired by improper means; or (B) disclosure or use of a trade secret of another without express or implied consent by a person who-- (i) used improper means to acquire knowledge of the trade secret; (ii) at the time of disclosure or use, knew or had reason to know that the knowledge of the trade secret was-- (I) derived from or through a person who had used improper means to acquire the trade secret; (II) acquired under circumstances giving rise to a duty to maintain the secrecy of the trade secret or limit the use of the trade secret; or (III) derived from or through a person who owed a duty to the person seeking relief to maintain the secrecy of the trade secret or limit the use of the trade secret; or (iii) before a material change of the position of the person, knew or had reason to know that-- (I) the trade secret was a trade secret; and (II) knowledge of the trade secret had been acquired by accident or mistake;

18 U.S.C. § 1839(5). Castellano’s motion alleges misappropriation under only the definition in § 1839(5)(B)(ii)(II)—misappropriation by use of a trade secret when “at the time of disclosure or use,” the person “knew or had reason to know” that the trade secret was “acquired under circumstances giving rise to a duty to maintain the secrecy of the trade secret.” (Doc. 4 at 9). The motion does not specify a particular definition under FUTSA but relies on the proposition that the definitions are identical. At the hearing, counsel for Castellano attempted to add an argument regarding improper acquisition (as opposed to use) by Ms. Doyle, but the Court limits its decision to arguments raised in the motion for preliminary injunction. See Fed. R. Civ. P. 7(b)(1)(B) (requiring a motion to “state with particularity the grounds for seeking the order”); Local Rule 3.01(a) (requiring that a motion include “a statement of the basis for the request”); see also Advantus, Corp. v. T2 Int'l, LLC, No. 313CV240J99MMHTEM, 2013 WL 12122313, at *9, n.12 (M.D. Fla. May 30, 2013) (Howard, J.) (declining to consider arguments raised

“for first time during oral argument” at a preliminary injunction hearing). Both the DTSA and the FUTSA define a trade secret as information that derives economic value from not being generally known to others, the owner of which has taken reasonable measures to keep secret. 18 U.S.C. § 1839(3); § 688.002(4), Fla. Stat. Florida courts have routinely found customer lists to be trade secrets under both statutes when their compilation required “great time and expense.” See, e.g., Aquent LLC v. Stapleton, No. 6:13–cv–1889–Orl–28DAB, 2014 WL 117095, at *2 n.3 (M.D. Fla. Jan. 13, 2014) (Antoon, J.); Freedom Med., 469 F. Supp. 3d at 1275; Regions Bank v. Raymond

James & Assocs., Inc., No. 6:20-cv-658-Orl-40EJK, 2020 WL 7419650, at *4 (M.D. Fla. Apr. 20, 2020) (Byron, J.). Here, Ms. Gustin testified that return customers comprised a substantial source of revenue and that Castellano marketed to these customers through email. Dr. Castellano testified that the practice cultivated the email list over many years and that it had expended many resources to create the list. The Court credits this testimony and finds that there is a substantial likelihood Castellano can prove that the client email list has independent economic value. Not only is this list carefully curated, it is a marketing tool that has independent economic value because it is exclusive to Castellano and not available to the public. Castellano further presented evidence that it took reasonable measures to keep the client email list secret. Both Ms. Horton and Dr. Castellano testified that the list is maintained on a computer database that is password protected and that not all employees and contractors had access to the EMR system. Further, Dr. Castellano testified that the practice required employees and contractors to sign confidentiality agreements, and in fact, presented evidence of a confidentiality agreement in the form of the 2016 Agreement with Ms. Doyle.³ See Se. Mech. Servs., Inc. v. Brody, No. 8:08–CV– 1151–T–30EAJ, 2008 WL 4613046, at *12 (M.D. Fla. Oct. 15, 2008) (Moody, J.) (finding plaintiff employed “reasonable efforts” where plaintiff used a restricted computer system which required passwords, limited access to employees, and mandated confidentiality agreements). Ms. Doyle countered this evidence by arguing that some customer information was publicly available through online reviews, such as clients’ names. But Ms. Doyle did not present evidence that most client email addresses were publicly available. At best, Ms. Doyle elicited testimony that an Instagram user might provide his or her email address on his or her Instagram page or through a personal message. Further, the fact that some of the information contained within the client email list may be available through other means does not discount that the compilation of that data was reasonably kept secret. See Sexual MD Sols., LLC v. Wolff¸ No. 20-20824-CIV-O’SULLIVAN, 2020 WL

“knowingly” or “should have known” element of misappropriation. A reasonable jury could credit either version of events, which makes it equally likely that Ms. Doyle will prevail. Thus, Castellano has not shown that it is substantially likely to succeed. See Ritchie

Bros. Auctioneers (Am.), Inc. v. Best Rental Corp. SE, No. 3:14CV36-MHT, 2014 WL 896992, at *2 (M.D. Ala. Mar.⁶, 2014) (Thompson, J.); 11A Charles Alan Wright & Arthur R. Miller, Federal Practice and Procedure § 2948.3 (3d ed. 2021) (“In many cases the existence of a factual conflict, or of difficult questions of law, may create sufficient doubt about the probability of plaintiff’s success to justify denying a preliminary injunction.”).

Further, the legal issues as to the duty to maintain secrecy by Ms. Doyle weigh against finding a substantial likelihood of success on the merits. It is undisputed that Ms. Doyle acquired the client email list in 2018 when she was bound by the confidentiality clause in the 2016 Agreement (although a factual dispute remains whether she knew or had reason to know she obtained trade secrets through the download). But Ms. Doyle used the client list in 2020, after the execution of the 2020 Agreement, which declared the confidentiality provision in the 2016 Agreement “null and void.” (Doc. 38-1 at 4). This provision of the 2020 Agreement renders the confidentiality clause in the 2016 Agreement “of no legal effect” and “without binding force.” See supra note 1. This legal wrinkle due to the merger provision poses a problem for Castellano’s ability to prove that Ms. Doyle acquired the client list “under circumstances giving rise to a duty” to keep the list confidential, or at least raises the specter of doubt about whether the duty governed at the time of use in 2021. The misappropriation subsection under which Castellano presses its argument defines misappropriation as the use of a trade secret by someone who knew at the time of use that the trade secret was “acquired under circumstances giving rise to a duty to maintain the secrecy of the trade secret or limit the use of the trade secret.” 18 U.S.C. § 1839(5)(B)(ii)(II). Neither the text of the statute nor the caselaw interpreting it clearly delineate whether the duty to maintain secrecy must exist at the time of use of the trade secret or whether the duty needs to exist only when the trade secret was acquired. The text provides two temporal considerations: first “at the time of disclosure or use” and later when the trade secret was “acquired.” Id. Indeed, most claims under this subsection of the statute seek to enforce confidentiality clauses that extend beyond the termination of employment and are thus still operative, not one that was operative when the trade secret was acquired but have since become “null and void” when the use occurred. See, e.g., Am. Mariculture, Inc. v. Syaqua Ams., Inc., No. 2:20-cv-711-JES-MRM, 2021 WL 2315003, at *6 (M.D. Fla. June⁷, 2021) (Steele, J.); Protegrity Corp. v. Elavon Inc., No. 1:18-CV-00140-ELR, 2018 WL 8949789, at *4 (N.D. Ga. Aug. 22, 2018) (Ross, J.). Here, because the 2016 Agreement was no longer of legal effect when Ms. Doyle used the client email list in 2020, Ms. Doyle might not have been under an obligation to maintain their secrecy. See EMC Outdoor, LLC v. Stuart, No. 17-5172, 2021 WL 1224064, at *9 (E.D. Pa. Mar. 31, 2021) (Quiñones, J.) (concluding that the plaintiff did not misappropriate trade secrets where plaintiff acquired the trade secrets during her employment but the alleged duty of confidentiality arose under an employment agreement and that duty extended after her employment only if she resigned and the plaintiff was fired).

Of course, the parties never addressed—in their briefing or at the hearing—any of the above discussion. As a result, they did not make coherent arguments as to what duties existed when and which ones might be the basis of Ms. Doyle’s alleged misappropriation. In the light of these unbriefed legal issues and that certain factual disputes remain a pure question of credibility, Castellano, who bears the burden of persuasion, simply has not met the high threshold necessary for a preliminary injunction. ii. Irreparable Harm Even if Castellano has shown a substantial likelihood of success on the merits of its misappropriation claims, it has not shown that it will suffer irreparable harm in the absence of a preliminary injunction. Castellano claims there is a presumption of irreparable harm for misappropriation of trade secrets under Florida law and relies almost exclusively on that presumption to justify its request for a preliminary injunction. But this reliance is misplaced and, apart from a presumption of harm, Castellano has not articulated an actual and imminent harm it will suffer without this injunction. Under Florida law, there is a statutory presumption of irreparable injury stemming from the violation of a valid restrictive covenant. See § 542.335(1)(j), Fla. Stat.; N. Am. Prods. Corp. v. Moore, 196 F. Supp. 2d 1217, 1230 (M.D. Fla. 2002) (Hodges, J.) (“Thus, once the party requesting enforcement of the restrictive covenant establishes one or more ‘legitimate business interests’ justifying the restriction, irreparable injury must be presumed by the Court and the burden shifts to the defendant to establish the absence of such injury.”). To be sure, this presumption is often applied in cases involving misappropriation of trade secrets because misappropriation claims are frequently brought with claims of breach of restrictive covenants. See, e.g., Freedom Med., 469 F. Supp. 3d at 1278; Regions Bank, 2020 WL 7419650, at *5. But neither FUTSA nor DTSA contains the same statutory presumption that the restrictive covenant statute does, and the Court may not read one into the statute where the text does not provide one. Thus, any presumption must be a judicially created one. But Castellano has not cited a single binding case—either from the Eleventh Circuit or a Florida court—that holds that there is a presumption of irreparable injury for misappropriation of trade secrets. In its supplemental briefing, Castellano cites

Southeastern Mechanical for the proposition that “irreparable harm is presumed when a party appropriates or intends to appropriate trade secrets for its own use or the use of another unauthorized party.” 2008 WL 4613046, at *15. But Southeastern Mechanical cites PSC, S.A. v. PriceSmart, Inc., No. 07–21383–CIV, 2007 WL 2781021, at *5 (S.D. Fla. Sept. 19, 2007) (Brown, J.), for that proposition, and PSC in turn cites section 812.035, Florida Statutes, which provides for injunctive relief for civil theft of trade secrets, which is a distinct cause of action under Florida law. See § 812.081(2), Fla. Stat. Castellano also relies on Aquent, another case apparently standing for the proposition that irreparable injury is presumed in an action for injunctive relief with respect to misappropriation of trade secrets. 2014 WL 117095, at *3. Aquent relies upon Dotolo v. Schouten, 426 So. 2d 1013, 1015 (Fla. 2d DCA 1983), which is a pre-FUTSA case applying a Florida common law cause of action that was expressly displaced by FUTSA. See § 688.008, Fla. Stat. (“[FUTSA] displace[s] conflicting tort, restitutory, and other law of this state providing civil remedies for misappropriation of a trade secret.”). Because there is no express presumption of irreparable harm in FUTSA and no binding caselaw to suggest that the presumption applies regardless of the statutory text, the Court will not create a presumption of irreparable harm.⁴ See Everest Nat’l Ins. Co. v. Rockhill Ins. Co., No. 8:16-cv-2803-T-35JSS, 2016 WL 8914546, at *5–6 (M.D. Fla. Nov. 10, 2016) (Scriven, J.) (questioning whether a presumption of irreparable harm is available for FUTSA claims); Liberty Am. Ins. Grp., Inc. v. WestPoint Underwriters, L.L.C., 199 F. Supp. 2d 1271, 1304 (M.D. Fla. 2001) (Kovachevich, C.J.) (recognizing a presumption of irreparable injury in copyright infringement cases and in cases seeking enforcement of non-compete agreements under Florida law but noting “that proposition is not clear cut as to trade secret misappropriation”). Without a presumption, Castellano is left with speculation of an impending loss of goodwill. But Castellano has not provided evidence of a single client who has left its practice for Ms. Doyle nor any direct testimony from any client about his or her worsened impression of Castellano’s practice due to the announcement of BevelUp. Castellano offers only secondhand testimony (hearsay) of one phone call inquiring

Inc., 923 F. 2d 1441, 1449 (11th Cir. 1991), the Eleventh Circuit concluded that a loss of goodwill may be irreparable harm. But importantly, the Eleventh Circuit held that “the loss of customers and goodwill is an ‘irreparable’ injury” and affirmed a district court’s grant of a preliminary injunction where the district court determined that the plaintiff would lose goodwill and customers. Id. (emphasis added). Here, there is no such certainty. Ms. Doyle testified that she has not used the list since the announcement via email and the inception of the lawsuit and is attempting to segregate the information that was allegedly misappropriated. The Court finds this testimony credible, particularly in the absence of any testimony by a client of Castellano. Further, the delayed pursuit of the preliminary injunction discounts any alleged irreparable injury. Castellano received the email announcement from Ms. Doyle on April 10, 2021, and moved for a preliminary injunction on May⁷, 2021. (Docs. 1 &⁴).

The Court set a hearing on the matter for May 25, 2021. (Doc. 6). At the request of the parties, the Court continued the hearing to June¹, 2021. (Doc. 10). The parties requested a second continuance, and the Court granted the motion and instructed the parties to file a request for a hearing with a specified date. (Doc. 13). On June⁷, 2021, the parties requested a hearing date of July 9—two months after the filing of the motion and almost three months after Castellano learned of the use of the email addresses. (Doc. 15). The Court set the hearing for July 14, 2021. (Doc. 16). In the intervening time, Ms. Doyle filed a motion to dismiss; Castellano filed an amended complaint; both parties have engaged in discovery and even scheduled mediation. (Docs. 21, 24, & 43).

By the time the Court held the hearing on the motion for preliminary injunction, the motion had been pending for 68 days, with most of the time due to the joint request of Castellano. “A delay in seeking a preliminary injunction of even only a few months— though not necessarily fatal—militates against a finding of irreparable harm.” Wreal,

LLC v. Amazon.com, Inc., 840 F. 3d 1244, 1248 (11th Cir. 2016). Here, Castellano’s consent to the delay weighs against a finding of irreparable injury. See Marketran, LLC v. Brooklyn Water Enters., No. 9:16-cv-81019-WPD, 2016 WL 8679294, at *1 (S.D. Fla. Aug. 8, 2016) (Dimitrouleas, J.) (“Given the fact that Plaintiff seeks a three month extension of time for the Court to rule on the Motion for Preliminary Injunction, which cuts against the factor of irreparable harm, it would appear that the ‘extraordinary and drastic remedy’ of preliminary injunctive relief is not appropriate at this time.”). Because Castellano has not shown a substantial likelihood of success on the misappropriation claims and has not shown that irreparable harm would result in the absence of equitable relief, it cannot obtain a preliminary injunction based on its misappropriation claims.

B. Computer Fraud

Castellano also alleges that Ms. Doyle violated both the Computer Fraud and Abuse Act (CFAA) and the Florida Computer Abuse and Data Recovery Act (CADRA) by downloading the client list from the Castellano EMR system. Because Castellano has not presented evidence to support its theory that Ms. Doyle exceeded her authorized access or evidence of a loss sufficient to satisfy the CFAA and because Castellano has not shown irreparable injury, it cannot obtain a preliminary injunction based on these claims. i. Substantial Likelihood of Success on the Merits To succeed on a claim under the CFAA, Castellano must prove that Ms. Doyle

“(1) intentionally ‘accessed’ a computer, (2) lacked authorization or exceeded [her] authorized access to the computer, (3) obtained information from the computer, and (4) caused a loss of at least $5,000.00.” Clarity Servs., Inc. v. Barney, 698 F. Supp. 2d 1309, 1313 (M.D. Fla. 2010) (Merryday, J.); see also 18 U.S.C. § 1030(a)(2)(C) (proscribing

“intentionally access[ing] a computer without authorization or exceed[ing] authorized access, and thereby obtain[ing] . . . information from any protected computer”). The CFAA defines “exceeds authorized access” as “to access a computer with authorization and to use such access to obtain or alter information in the computer that the accesser is not entitled so to obtain or alter.”⁵ 18 U.S.C. § 1030(e)(6). Similarly, under CADRA, Castellano must prove that Ms. Doyle “knowingly and with intent to cause harm or loss . . . [o]btain[ed] information from a protected computer without authorization and,

ii. Irreparable Harm Even if Castellano had proven a substantial likelihood of success on the

Importantly for these claims, Castellano does not allege or prove that Ms. Doyle could cause future irreparable harm of the kind addressed by CFAA and CADRA. Injunctive relief is prospective relief, intended to protect against injury that might occur if the conduct is not stopped. Alabama v. U.S. Army Corps of Eng’rs, 424 F. 3d 1117, 1133 (11th Cir. 2005). Here, there is no threat of harm stemming from inappropriate access of Castellano’s computer system, which if it occurred, happened over three years ago, and Castellano has presented no evidence of further inappropriate access. See Allied Portables, LLC v. Youmans, No. 2:15-cv-294-FtM-38CM, 2015 WL 6813669, at *4 (M.D.

Fla. Nov.⁶, 2015) (Chappell, J.) (finding no irreparable injury where alleged CFAA violation occurred more than a year prior and plaintiff presented no other evidence of future harm). But see Fla. Atl. Univ. Bd. of Trs. v. Parsont, 465 F. Supp. 3d. 1279, 1296–97 (S.D. Fla. 2020) (Altman, J.) (finding irreparable harm where defendant was still able to access plaintiff’s servers and to obtain proprietary information). Accordingly, Castellano has not demonstrated irreparable future harm will result in the absence of an injunction. Because Castellano has not presented evidence sufficient to show that it is substantially likely to succeed on either the CFAA or CADRA claim and has not articulated irreparable harm that will result in the absence of injunction, it is not entitled to a preliminary injunction on these claims.

V. CONCLUSION

Castellano has shown neither a substantial likelihood of success on the merits of its misappropriation and computer fraud claims, nor any irreparable harm resulting from the alleged violations. Accordingly, the Motion for Preliminary Injunction is DENIED. Ms. Doyle may renew her request for attorneys’ fees by motion no later than August 11, 2021. ORDERED in Tampa, Florida, on July 28, 2021.

yiY Kimball Mizelle United States District Judge