FTC Proposes Settlement Restricting Kochava’s Sale of Sensitive Location Data
Summary
A proposed FTC settlement would bar Kochava and its subsidiary from selling or sharing sensitive location data without explicit consent. It also requires consent and supplier programs, retention limits, and consumer access and withdrawal options; court approval is still
Key points
- The proposed settlement would bar Kochava and Collective Data Solutions from selling, sharing, or disclosing sensitive location data without consumers’ explicit consent.
- The FTC complaint alleged Kochava sold precise geolocation data, device IDs, income information, and app-usage data, including records of visits to sensitive locations.
- Kochava would have to establish programs for sensitive-location data and supplier assessments, plus a schedule for deleting retained data.
- Consumers would be able to withdraw consent and learn which businesses or individuals received their precise location data.
- Kochava would have to notify the FTC of certain improper third-party disclosures.
- The proposed order carries no fine and remains subject to court review and approval.
Article Details
- Event Type
- Proposed regulatory settlement
- Impact
- The proposed settlement would bar Kochava and its subsidiary Collective Data Solutions from selling, sharing, or disclosing sensitive location data without explicit consumer consent. The FTC had alleged Kochava sold precise geolocation data, device IDs, income, and app-usage data, including information revealing visits to sensitive locations. Requirements include programs to protect sensitive locations and assess suppliers, consumer access to recipients of their location data and the ability to withdraw consent, reporting certain improper disclosures to the FTC, and a data-retention schedule. The proposed order imposes no fine and remains subject to court review and approval.