AT&T sued for selling its customers' location data

Back in May, we told you that all four major U.S. carriers were defendants in class action suits claiming that each of them sold their customers' location data. This followed a report in The New York Times the previous May that explained how carriers sell location data to third-party firms who then sell that information to advertisers, law enforcement agencies and others. Today, the Electronic Frontier Foundation (EFF) filed a suit against AT&T (via The Verge) that seeks class-action status on behalf of the carrier's California subscribers.

Besides AT&T, other defendants include LocationSmart and Zumigo. The pair are data aggregators that collect location data and sell it to third parties. The EFF and its co-plaintiff, law firm Pierce Bainbridge, say that AT&T's customers never gave the wireless provider the right to use its data for commercial use. The location data is meant to be used to track emergency calls only. The EFF is an international non-profit group that defends "digital privacy, free speech, and innovation."

The plaintiffs claim that AT&T violated the Federal Communications Act and also violated California's unfair competition law by deceiving customers into believing that their location data was protected. The suit also alleges that AT&T, LocationSmart, and Zumigo have violated state constitutional, statutory, and common law rights to privacy. The filing asks for an injunction preventing AT&T, LocationSmart, and Zumigo from continuing its practices of selling the location data of AT&T customers. It also asks for monetary damages, punitive damages, attorneys' fees, and other costs. The plaintiffs want any location data already sold to be returned to AT&T or destroyed.

The lawsuit, filed in U.S. District Court for the Northern District of California, can be found right here.

News about this lawsuit comes just right after the FTC and Facebook agreed that the latter would pay a $5 billion fine, the largest civil penalty ever collected by the regulatory agency. The social-media network had signed a consent decree with the FTC in 2011 that prevented it from using its member's profiles without their express consent. However, back in 2016, 87 million Facebook subscribers had their profile collected by a Russian-American professor who then sold them to political consultancy Cambridge Analytica. And both Google and Amazon have admitted that they have teams listening to users' conversations with digital helpers Google Assistant and Alexa. Both firms say that they do this in order to improve how well their respective systems understand customer inquiries.