Google to pay $135m to settle Android data lawsuit

Google will pay US$135 million to settle a class-action lawsuit over claims it collected cellular data from Android users without explicit consent.

The lawsuit alleges Google gathered data even when users disabled location sharing, closed apps, or locked their screens.

The settlement, which requires court approval, covers Android users since November 12, 2017.

Google denies wrongdoing but agreed to change its data transfer practices. This includes obtaining user consent during device setup, making data transfers easier to disable, and disclosing them in Google Play terms.

Individual payouts are capped at US$100, and the trial scheduled for August 5 will no longer proceed.

🔗 Source: Reuters

🧠 Food for thought

Implications, context, and why it matters.

Some settlement terms require additional review

The preliminary settlement filing should be reviewed to learn how the case and settlement define the “cellular data” that Android is accused of collecting.
The consent flow during Android phone setup should be clarified, since consent is required for data transfers.
The added wording for the Google Play terms of service should be examined to see what Android users will be told about the transfers and how it aligns with Google’s user data policies 1.
The per-person payout is not yet known, since it depends on how many eligible Android users submit valid claims against the $135 million fund. Payments are capped at $100 per class member.

Settlement underscores demand for Android consent and disclosure compliance tools

App operators, privacy teams, and investors can track demand for tools that manage user consent for data transfers plus related disclosures.
Software vendors can build products that audit an app’s network traffic (the data it sends and receives over the internet or cellular networks) to confirm data collection and sharing behavior.
Android app developers can use these tools to keep their Google Play Data safety section disclosures accurate. Open issues with the Data safety form can cause rejections for new submissions or updates 2.
Google’s policies already require developers to explain how user data is handled 1.