An Idaho federal judge dismissed an FTC lawsuit against location data broker Kochava, saying the agency had not provided adequate evidence to show consumer harm
The ruling was a blow to the commission's intensifying efforts to crack down on the sale and use of sensitive personal information.
Context & Ripple Effects
This dismissal closes a round in a fight Kochava started: the Idaho broker pre-emptively sued the FTC in August 2022, arguing the agency was preparing to punish it for marketing geolocation data that could reveal abortion clinic visits. Weeks later the commission filed its own suit charging that Kochava sold data pinpointing visits to reproductive health clinics, places of worship, and homeless shelters — and the court has now ruled that case lacked adequate evidence of actual consumer harm.
The ruling matters because the FTC's broader push against sensitive-data brokers had made Kochava its marquee target, and because the same judge-demands-evidence pattern appeared when an early complaint against Meta was thrown out before an amended monopoly suit was allowed forward. The eventual arc here runs further: by 2026 the FTC extracted a settlement banning Kochava and subsidiary CDS from selling Americans' location data altogether.
First-order effects
- Kochava exits the lawsuit free to continue selling location-derived datasets under its existing contracts, with no federal injunction or consent decree attached to its business.
- The FTC's flagship sensitive-location-data enforcement action fails at its evidentiary foundation, forcing the agency to document concrete consumer harm before filing rather than relying on the sensitivity of the data categories themselves.
Second-order effects
- Other location-data brokers gain a legal template: courts are requiring demonstrated harm evidence, so rivals can resist FTC action until the agency produces specific injury cases rather than category-level claims.
- Expect the FTC to refile with strengthened evidence or shift tactics toward settlements and negotiated bans — the path that ultimately produced the agreement banning Kochava and CDS from selling Americans' location data.
Third-order effects
- If the pattern holds, US data-broker enforcement converges on settlement-driven prohibitions rather than litigated rulings, meaning regulators need leverage outside the courtroom — public pressure, state laws, or buyer-side commitments — where harm-evidence standards stall suits.
- The durable question the case crystallizes: whether 'sensitive' categories of purchased location data count as consumer harm absent documented injury, which will decide whether broker markets get regulated case-by-case or through structural rules.
The trend: US enforcement against the location-data brokerage market is shifting from courtroom harm-evidence battles toward negotiated bans, with judges acting as the gatekeepers who force regulators to prove injury first.