Refunds For 300 Million Phone Users Sought In Lawsuits Over Location-Data Sales

An anonymous reader quotes a report from Ars Technica: The four major U.S. wireless carriers are facing proposed class-action lawsuits accusing them of violating federal law by selling their customers' real-time location data to third parties. The complaints seeking class action status and financial damages were filed last week against AT&T, Verizon, T-Mobile, and Sprint in U.S. District Court for the District of Maryland. The four suits, filed on behalf of customers by lawyers from the Z Law firm in Maryland, all begin with text nearly identical to this intro found in the suit against AT&T: 'This action arises out of Defendant's collection of geolocation data and the unauthorized dissemination to third-parties of the geolocation data collected from its users' cell phones. AT&T admittedly sells customer geolocation data to third-parties, including but not limited to data aggregators, who in turn, are able to use or resell the geolocation data with little or no oversight by AT&T. This is an action seeking damages for AT&T gross failure to safeguard highly personal and private consumer geolocation data in violation of federal law.'

The proposed classes would include all of the four carriers' customers in the U.S. between 2015 and 2019. In all, that would be 300 million or more customers, as the lawsuits say the proposed classes consist of at least 100 million customers each for AT&T and Verizon and at least 50 million each for Sprint and T-Mobile. Each lawsuit seeks damages for consumers 'in an amount to be proven at trial.' In June 2018, the four major U.S. carriers promised to stop selling their mobile customers' location info to third-party data brokers after a security problem leaked the real-time location of U.S. cellphone users. Despite the carriers' promises, a Motherboard investigation found in January 2019 that they were still selling access to their customers' location data. 'The lawsuits accuse the carriers of violating Section 222 of the U.S. Communications Act, which says that carriers may not use or disclose location information 'without the express prior authorization of the customer,'' reports Ars Technica. 'The lawsuits also say that each carrier failed to follow its own privacy policy and 'profited from the sale and unauthorized dissemination of Plaintiff and Class Members' [private data].''

Read more of this story at Slashdot.