A company that specialized in offering antivirus software has agreed to pay $16.5 million to settle an enforcement action with the Federal Trade Commission after it was accused of selling consumers’ web browsing data for advertising purposes, after it had promised that its products would protect consumers from being tracked while browsing the Internet.
Avast Limited was accused of collecting consumers’ browsing information for the past nine years through browser extensions and antivirus software that was installed on consumers’ computers. The company captured web searches and the pages that consumers visited, which revealed information such as their religious beliefs, health concerns, political leanings, financial status, and more, according to the FTC. All the while the company was telling consumers its products would protect consumers. Avast’s browser extension, for example, told consumers that it would
Avast Limited was accused of collecting consumers’ browsing information for the past nine years through browser extensions and antivirus software that was installed on consumers’ computers. The company captured web searches and the pages that consumers visited, which revealed information such as their religious beliefs, health concerns, political leanings, financial status, and more, according to the FTC. All the while the company was telling consumers its products would protect consumers. Avast’s browser extension, for example, told consumers that it would “block annoying tracking cookies that collect data on your browsing activities” and promised that its desktop software would “shield your privacy. Stop anyone and everyone from getting to your computer.”
The company failed to anonymize the data it was selling to buyers, who could use the information to track specific users.
Along with paying the $16.5 million fine, the company has also agreed to the following requirements as part of the settlement with the FTC:
- Avast will be prohibited from selling or licensing any browsing data from Avast-branded products to third parties for advertising purposes;
- The company must obtain affirmative express consent from consumers before selling or licensing browsing data from non-Avast products to third parties for advertising purposes;
- Avast must delete the web browsing information transferred to Jumpshot and any products or algorithms Jumpshot derived from that data;
- Avast will be required to inform consumers whose browsing information was sold to third parties without their consent about the FTC’s actions against the company; and
- Avast will be required to implement a comprehensive privacy program that addresses the misconduct highlighted by the FTC.
A copy of the proposed settlement can be accessed by clicking here.