US jury orders Google to pay $425 million in privacy lawsuit over data collection
Jury finds Google liable on two privacy claims after collecting user data despite Web & App Activity setting being turned off; company says it will appeal
A U.S. federal jury has ordered Google to pay $425 million after finding the company violated users' privacy by collecting data from millions of users even after they had turned off a tracking feature in their accounts.
The verdict stems from a class-action lawsuit in which plaintiffs alleged that Google continued to access mobile devices to collect, save and use data in violation of assurances given in the Web & App Activity setting. The class covers roughly 98 million Google users and 174 million devices. The plaintiffs had sought more than $31 billion in damages.
The jury found Google liable on two of three claims of privacy violations but concluded the company had not acted with malice. A Google spokesperson said the company disagrees with the decision and will appeal. "This decision misunderstands how our products work, and we will appeal it. Our privacy tools give people control over their data, and when they turn off personalisation, we honour that choice," the spokesperson said.
David Boies, an attorney representing the users who sued, said the plaintiffs were pleased with the jury's verdict. "We are, obviously, very pleased with the verdict the jury returned," he said.
The core dispute focused on the Web & App Activity setting, a feature Google presents as allowing users to limit data collection and personalization tied to their Google accounts. Plaintiffs argued that, despite such settings being turned off, Google continued to collect information from mobile devices and used that data for its services. The jury verdict holds the company liable for two privacy claims but did not find the conduct met the higher threshold of malice required for certain forms of punitive relief.
Legal experts noted the ruling could prompt scrutiny of how technology companies describe and implement privacy controls, and it may influence how courts evaluate similar consumer-protection claims against large technology platforms. Google has previously faced a number of regulatory and private legal challenges related to data collection and transparency about privacy settings.
Google said the company would pursue an appeal, signaling further litigation likely. Appeals can address both factual findings and legal interpretations made by the trial jury and judge. The plaintiffs' lawyers will be able to seek distribution of the awarded damages to class members, subject to court approval and any changes resulting from appellate review.
The decision comes amid continuing public and regulatory interest in how major technology firms collect and use personal data. Lawmakers and regulators in multiple jurisdictions have increased attention on privacy practices, while consumers have sought clearer controls and greater transparency about how their information is handled. The case adds to a series of high-profile legal challenges that test the balance between digital services' business models and user privacy protections.