FTC Settlement Would Bar Kochava From Selling Location Data Without Consent

· Original article ↗

Summary

A proposed FTC order would bar Kochava and subsidiary Collective Data Solutions from selling precise location data without affirmative consent. It also requires consent checks, sensitive-location safeguards, consumer controls, incident reporting, and data-deletion rules

Key points

  • The FTC sued Kochava in 2022, alleging it collected and sold precise location data from hundreds of millions of mobile devices.
  • The FTC said the data could reveal movements to sensitive locations, including clinics, shelters, places of worship, and mental health facilities.
  • The proposed order would bar Kochava and Collective Data Solutions from selling or disclosing precise location data without affirmative consent and a consumer-requested service.
  • Required measures would include consent verification, supplier assessments, a sensitive-location data program, and processes for consumers to access their data-recipient information and withdraw consent.
  • The companies would also have to report third-party misuse to the FTC and establish data retention and deletion schedules.
  • The proposed order would take effect upon approval by a federal district court judge.

Article Details

Event Type
Proposed regulatory settlement and court-enforceable order concerning the sale of precise location data.
Impact
The proposed order would prohibit Kochava and Collective Data Solutions from selling, licensing, transferring, or disclosing precise location data without affirmative express consumer consent and use for a service consumers requested. It would also require consent verification, a sensitive location data program, consumer disclosure and withdrawal mechanisms, supplier assessments, incident reporting, and data retention and deletion schedules. The article says the order will carry the force of law upon approval by a District Court judge.

Vendors

Countries