A California judge has denied Google's request for summary judgement in a class action lawsuit alleging that it secretly tracked the online activity of Chrome users even when they were using the browser in its privacy-oriented Incognito mode (via The Verge).
The lawsuit was filed in June 2020 by users alleging that Google hoovers up user data in Incognito mode through Google Analytics, Google Ad Manager and other applications and website plug-ins, including smartphone apps, whether or not users click on Google-supported ads.
The plaintiffs claim that Google is therefore deceiving customers into believing that they have control over the information they share with the company when they use Chrome's private browsing mode, and in doing so, violates federal wiretap laws.
In denying Google's request, Judge Yvonne Gonzalez-Rogers referred to statements in the Chrome privacy notice, Privacy Policy, Incognito Splash Screen, and Search & Browse Privately Help page suggesting that incognito mode limits the information stored or how people can control the information they share:
The Court is guided by the way that Google itself chose to represent its private browsing mode: Google told users that they could 'go Incognito' and 'browse privately.' By browsing privately, plaintiffs could be said to have asserted their expectation of privacy. Google is welcome to make the counterargument at trial.
Google has not shown, as a matter of law, that all parties consented to it recording the communications here and therefore summary judgment is not appropriate.
According to the plaintiffs, the lawsuit likely covers "millions" of Google users who since June 1, 2016 browsed the internet using Incognito mode. The proposed class action therefore seeks $5,000 in damages per user for violations of federal wiretapping and California privacy laws, amounting to at least $5 billion.
Google has said it will defend itself "vigorously' against the claims. The company has previously unsuccessfully attempted to have the case thrown out by arguing that the plaintiffs consented to its privacy policy, which the company said explicitly discloses its data protection practices. Google's denied request for summary judgement now moves the case closer toward settlement or a trial.
