In a landmark decision for data privacy, the Avast FTC settlement was a whopping $16.5 million penalty for the cybersecurity giant. The settlement, finalized in June 2024, addresses allegations that Avast misled users about how their browsing data was shared and sold through its now-shuttered subsidiary, Jumpshot. These accusations stem from Avast’s improper handling of user data, which was allegedly sold without full anonymization to third-party companies.
FTC Allegations: Misleading Data Practices
The Avast FTC settlement follows a multi-year investigation into the company’s practices between August 2014 and January 2020. According to the Federal Trade Commission (FTC), Avast misrepresented its data collection practices to users, claiming that browsing data collected through its antivirus software would be deidentified before being shared. However, the FTC alleges that Avast’s subsidiary, Jumpshot, sold user data to more than 100 companies, and in some cases, the data was not fully anonymized.
The browsing data collected from Avast and AVG users was allegedly sold in a way that allowed third parties to potentially identify individuals or devices. This prompted privacy concerns, leading to the shutdown of Jumpshot in January 2020. The Avast FTC settlement highlights the importance of transparency in how companies handle sensitive user information.
The Settlement Agreement: What Avast Agreed To
As part of the Avast FTC settlement, the company has committed to several key measures designed to protect user privacy moving forward. These include the following.
- Data Deletion: Avast will delete all browsing data previously collected and shared through Jumpshot. Additionally, the company will contact third-party buyers to request that they also delete any data acquired from Jumpshot.
- Prohibition on Data Sharing for Advertising: Avast is now prohibited from selling or sharing any user browsing information for third-party advertising purposes, marking a significant shift in how it handles user data.
- Strengthened Privacy Practices: The settlement also requires Avast to implement stricter privacy policies and ensure that future data collection is transparent and compliant with privacy standards.
The $16.5 million fine is a key component of the Avast FTC settlement, but it also signifies a broader commitment by the company to rebuild trust with its user base and adhere to stricter privacy controls.
Impact on Avast and AVG Users
If you used Avast or AVG software between 2014 and 2020, the Avast FTC settlement directly impacts you. During that time, your browsing data may have been shared or sold without your knowledge, despite Avast’s claims of protecting user privacy. For users who relied on Avast’s antivirus products, this revelation is troubling, as it suggests that their trust may have been violated.
The settlement requires Avast to change its approach to data privacy, particularly regarding user browsing information. While the financial penalty is significant, the more critical aspect of the Avast FTC settlement is the obligation to delete user data and halt any further sharing of browsing information for advertising purposes.
Broader Implications for Data Privacy
The Avast FTC settlement is part of a broader trend in holding companies accountable for how they handle user data. As companies increasingly rely on consumer data for advertising and business insights, this case highlights the risks involved when data privacy is not taken seriously.
This settlement is not an isolated case. Other major tech companies, such as Facebook and Google, have also faced scrutiny and penalties for privacy violations. The Avast situation serves as a wake-up call for both businesses and consumers: transparency and user consent are not optional when it comes to handling sensitive information.
Moving forward, companies will need to prioritize data protection, not just to avoid fines but also to maintain the trust of their users. For consumers, the Avast FTC settlement serves as a reminder to be vigilant about the software they use and to regularly review privacy policies to understand how their data is being used.
What Users Can Do Next
If you used Avast or AVG during the 2014–2020 period, and you’re concerned about how your data was handled, you can reach out to Avast for more information. As part of the FTC settlement, the company has provided contact details for users with questions.
- Email: jsinfo@avast.com
- Phone: 1-866-588-5089
Avast has committed to responding to inquiries within three business days.
The Takeaway
While Avast’s antivirus products are designed to protect against digital threats, this case demonstrates that users also need protection from the companies they trust with their data.
The settlement and Avast’s commitment to deleting user data mark an important step toward restoring trust, but the larger lesson here is clear: in today’s digital landscape, privacy must be a priority for both companies and consumers.
We empower people to succeed through information and essential services. Do you need help with something? Contact Us.
Want a heads-up whenever a new article drops? Subscribe here
