Disclaimer: This article provides general information and does not constitute legal advice. The legal landscape regarding mass arbitration and privacy law is rapidly evolving. Please contact Nowland Law for counsel specific to your business situation.
Serving the Business Legal Needs of Orange County and Southern California
For the past five years, California businesses have been locked in a high-stakes arms race against the plaintiffs’ bar. As companies adopted mandatory arbitration clauses to block class actions, plaintiffs’ firms countered with “mass arbitration”—using technology to file thousands of individual claims simultaneously, triggering millions of dollars in arbitration fees that businesses are contractually obligated to pay.
To survive this onslaught, corporate legal departments began drafting “batching” or “bellwether” protocols into their Terms of Service (TOS). These provisions were designed to act as a dam, holding back the flood of claims and releasing them in small, manageable groups.
However, a landmark ruling issued on October 27, 2025, by the Northern District of California has effectively blown up this defensive strategy. In Rios v. HRB Digital LLC, Judge Edward M. Chen denied H&R Block’s motion to compel arbitration, finding that their specific bellwether protocol was unconscionable because it created a “systemic failure” of justice.
For business owners and General Counsel in Orange County, Rios is not just a headline; it is a warning shot. It signals that the era of using procedural friction to exhaust plaintiffs is over. If your current Terms of Service include a batching provision without a carefully drafted “safety valve,” your company may be inadvertently exposing itself to the very class action liability you sought to avoid.
The Strategy: The Rise of the “Bellwether” Defense
To understand why Rios matters, we must look at the mechanics of the dispute. H&R Block, like many digital platforms, included an arbitration agreement in its Online Services Agreement (OSA). Anticipating mass filings, they included a “Mass Arbitration” protocol.
The protocol stipulated that if 25 or more similar claims were filed, they would be adjudicated in batches. Crucially, the agreement mandated that “no other cases may be filed in arbitration” until the first batch was fully completed. This is known as a “sequential lock.” The goal was to force a global settlement after a few test cases, shielding the company from paying upfront filing fees for thousands of claims at once.
The Ruling: When Efficiency Becomes Unconscionability
In Rios, plaintiffs alleged that H&R Block used tracking pixels to share sensitive tax data—including Adjusted Gross Income and refund amounts—with Meta (Facebook) and Google. When H&R Block moved to compel arbitration, the court scrutinized the batching protocol and found it fatally flawed.
Judge Chen’s reasoning focused on three specific failures that rendered the contract unenforceable:
1. The “Infinite Loop” of Delay
The court calculated that under H&R Block’s protocol, resolving a hypothetical docket of 2,000 claims could take over 13 years. Because Batch 2 could not begin until Batch 1 was finished, a single complex case or a slow arbitrator in the first group would freeze the entire system for everyone else. The court ruled that this “sequential lock” deprived plaintiffs of their statutory right to seek redress within a reasonable time.
2. The Missing “Safety Valve”
Perhaps the most critical takeaway for drafters is the court’s focus on the lack of an opt-out mechanism. The H&R Block agreement forced claimants to wait in the queue indefinitely. There was no provision saying, “If your claim isn’t heard within 365 days, you can go to court.” The court noted that this lack of a “safety valve” transformed the arbitration clause from a dispute resolution tool into a liability shield.
3. The “Tolling” Trap
While the agreement theoretically tolled the statute of limitations, the court found the provision “asymmetrical.” H&R Block reserved the right to challenge whether a claimant’s notice was complete, potentially allowing them to run out the clock and then argue that the claim was time-barred. This created a forfeiture risk that the court found substantively unconscionable.
The Nuance: Batching is Not Dead, But It Must Be Fair
It is vital for businesses to understand that Rios does not ban mass arbitration protocols entirely. It only bans unfair ones.
Just a month after the Rios ruling, a different court in the Southern District of California upheld a batching provision in Kohler v. Whaleco, Inc. (involving the e-commerce platform Temu). The difference? Temu’s agreement allowed batches of 100 cases to proceed concurrently rather than sequentially, and it did not create the same indefinite backlog. Similarly, in Davis v. Experian Information Solutions, the Ninth Circuit upheld an arbitration agreement because the delegation clause was not infected by the same level of unconscionability found in Rios.[]
The lesson here is clear: Courts are performing a functional analysis. If your protocol is a genuine attempt to streamline wide-scale dispute resolution (like Kohler), it may survive. If it is a thinly veiled attempt to prevent claims from ever being heard (like Rios), it will be struck down.
The Underlying Threat: The “Pixel” Liability Explosion
The Rios case also highlights the substantive liability lurking beneath these procedural battles. The underlying lawsuit involves the California Invasion of Privacy Act (CIPA) and the Video Privacy Protection Act (VPPA).
Plaintiffs are aggressively using these statutes to target businesses that use standard marketing tools—like the Meta Pixel or Google Analytics—on secure customer portals. In Rios, the allegation is that H&R Block allowed Meta to “peek” at tax returns. In 2025, we are seeing a surge of similar “pen register” claims against businesses across Orange County, asserting that tracking software illegally records user IP addresses and browsing history.
If your arbitration clause fails (as it did in Rios), your company is thrown back into court to face a class action where statutory damages can reach $5,000 per violation. The arbitration clause is your primary shield; you cannot afford for it to be made of paper.
Strategic Recommendations for Orange County Businesses
In light of Rios, Nowland Law recommends that all businesses with consumer-facing digital platforms take the following immediate steps:
1. Audit Your “Batching” Provisions Review your Terms of Service. If you have a “bellwether” or “batching” clause, does it have a sequential lock? If it requires Batch B to wait for Batch A to finish, it is now high-risk. You must amend this to include a Safety Valve: a provision allowing claimants to opt out of the batching process and proceed to individual arbitration or small claims court if their case is delayed beyond a reasonable period (e.g., 12 months).
2. Adopt Neutral Rules Rather than writing a bespoke protocol that courts view with suspicion, consider adopting the AAA Mass Arbitration Supplementary Rules by reference. The AAA rules now provide for a “Process Arbitrator” who can manage the batching and fees neutrally. Courts are far more likely to enforce a protocol administered by a neutral third party than one designed by the defendant.
3. Explicitly Toll Statutes of Limitations Ensure your agreement contains an ironclad, unilateral tolling provision. It should state clearly that the statute of limitations is suspended for all claimants in the queue from the moment they file a notice of dispute. Removing the ambiguity cited in Rios is essential to saving the enforceability of the contract.
4. Perform a “Pixel Audit” Do not wait for a lawsuit to discover where your marketing pixels are firing. If you have a “logged-in” environment (customer portals, patient gateways, financial dashboards), ensure that third-party tracking scripts are disabled in those zones. Moving to Server-Side tracking (CAPI) can give you greater control over what data is shared with ad networks, mitigating the CIPA risks seen in Rios.
Conclusion
The Rios v. HRB Digital ruling is a corrective mechanism from the judiciary. It serves as a reminder that while businesses have the right to avoid class actions, they do not have the right to avoid liability altogether.
At Nowland Law, we help businesses navigate this complex intersection of privacy technology and contract law. By proactively updating your arbitration agreements to be “Rios-Compliant”—focusing on fairness, concurrent processing, and safety valves—you can maintain your liability shields while ensuring they stand up to judicial scrutiny in 2026 and beyond.