Google to pay $17M to states in Apple cookies case
State attorneys general accused the company of circumventing cookie-blocking defaults in the Safari browser — Google has reached a $17 million settlement with 37 U.S. states and the District of Columbia over its unauthorized placement …
Context & Ripple Effects
This settlement closes the state-level chapter of a case Google has been paying down since mid-2012, when the FTC voted to penalize the company $22.5 million over the same conduct — placing advertising cookies on Safari users' machines despite the browser's default block on third-party cookies. That federal deal followed weeks of negotiation reported in July 2012 (Google, FTC near settlement on privacy), so today's $17 million agreement with 37 states and the District of Columbia is a second, parallel bill for a single practice rather than a new accusation.
The breadth of pickup — Reuters, the Wall Street Journal, TechCrunch, AdExchanger and five other outlets running the story the same day — reflects how the case has become the reference point for state attorneys general asserting privacy jurisdiction over national ad-tracking practices. For Apple, the episode is a reputational footnote about its browser's defenses; for Google, it stacks on top of the FTC penalty and keeps the Safari workaround alive as the emblematic example of tracking that outran user settings.
First-order effects
- Google pays $17 million to 37 state attorneys general plus D.C. over unauthorized cookie placement in Safari, resolving the state-side exposure left open by its 2012 federal settlement.
- State AGs convert the FTC's earlier action into their own enforceable template, establishing that a federal privacy penalty does not preclude a second, coordinated state payout for the same behavior.
Second-order effects
- Ad-dependent platforms and ad-tech firms now have to price in multi-jurisdiction enforcement: the same tracking practice can trigger separate FTC and 50-state negotiations, raising the effective cost of aggressive default-bypass techniques.
- Apple gains a marketing contrast it did not have to litigate for — Safari's cookie-blocking defaults were strong enough that circumventing them became the legal test case, sharpening the privacy positioning of its browser against rivals.
Third-order effects
- If the pattern holds, privacy enforcement consolidates around stacked settlements — federal agencies setting the precedent, state AGs following with their own checks — making cumulative regulatory cost, not any single fine, the real deterrent for large-scale data collection.
- Browser defaults harden from user preference into quasi-regulatory boundary: conduct defined by defeating a browser's privacy setting becomes a recognized basis for attorney-general action, pushing trackers toward consent-based models.
The trend: Privacy enforcement is settling into a two-tier structure in which state attorneys general systematically follow federal agencies against the same conduct, multiplying the price of data-collection violations for major platforms.