FTC Bans Kochava from Selling Americans' Location Data Without Consent

Severity: Medium (Score: 54.6)

Sources: Therecord.Media, Bleepingcomputer

Summary

The Federal Trade Commission (FTC) has banned data broker Kochava and its subsidiary from selling location data without explicit consumer consent. This decision follows a lawsuit filed in August 2022, which accused Kochava of selling precise geolocation data from millions of mobile devices, allowing clients to track users' movements to sensitive locations. The FTC's complaint highlighted that consumers were unaware of this data sharing, exposing them to potential harms such as stalking and discrimination. Under the proposed order, Kochava must obtain affirmative consent from consumers before selling their location data and must implement a sensitive location data program. The company also faces requirements to disclose data recipients and allow consumers to withdraw consent. This order will take effect upon approval by a District Court judge. The FTC is also exploring new rules to combat mass commercial surveillance practices. Key Points: • FTC bans Kochava from selling location data without consumer consent. • Kochava's data included sensitive locations like health clinics and shelters. • The FTC's order requires Kochava to implement consumer consent protocols.

Key Entities

• Collective Data Solutions (company)
• Kochava (company)
• Amazon Web Services (company)
• CWE-200 - Exposure of Sensitive Information (cwe)