FTC fines Avast $16.5M for selling user browsing data

Avast, a company that provides antivirus software, has been fined $16.5 million by the Federal Trade Commission (FTC). The FTC found that Avast, based in the United Kingdom, collected users’ browsing data through its antivirus software and browser extensions without proper notice or user consent. The company stored this data indefinitely and sold it to over 100 third parties through its subsidiary, Jumpshot, which deceived users by claiming that it would protect their privacy.

The browsing data that Avast collected included users’ web searches and the webpages they visited. This information could reveal sensitive data such as users’ health concerns, religious beliefs, political leanings, location, financial status, and visits to child-directed content. After acquiring Jumpshot, Avast rebranded it as an analytics company and sold the collected data to various clients including advertising, marketing, and data analytics companies, as well as data brokers.

The FTC has ordered Avast to pay the fine, which will be used to provide redress to consumers. The company and its subsidiaries are now prohibited from misrepresenting how they use the data they collect. Avast is also prohibited from selling or licensing browsing data from Avast-branded products to third parties for advertising purposes. They must obtain affirmative express consent from consumers before selling or licensing browsing data, delete the transferred web browsing information, inform affected consumers, and implement a comprehensive privacy program that addresses the misconduct.

Also read: Kenya is moving to regulate cryptocurrency trading due to grey list concerns