Oracle agrees to pay $115M to settle a lawsuit accusing it of invading people's privacy by collecting their personal information and selling it to third parties

Oracle (ORCL.N) agreed to pay $115 million to settle a lawsuit accusing the database software and cloud computing company …

Reuters 2024-07-20 Jonathan Stempel

Context & Ripple Effects

This settlement adds a consumer-data privacy dispute to Oracle’s prior compliance history, including its earlier FTC settlement over insecure legacy Java installations. Related coverage also records a separate SEC anti-bribery fine, making the case relevant as another legal-cost and governance issue for the company.

The allegations center on the commercial use of personal information, not Oracle’s core database products alone. That distinction matters because data practices can create exposure across a technology company’s broader customer- and identity-data operations.

First-order effects

Oracle will pay $115 million to resolve the lawsuit, removing the immediate uncertainty and expense of continuing this particular privacy case.
People covered by the claims gain a settlement route, while Oracle’s handling of personal-information allegations receives renewed scrutiny.

Second-order effects

The payment creates a visible litigation-cost benchmark for companies whose businesses depend on collecting, combining, or commercializing consumer data.
Enterprise customers and data partners may place greater weight on contractual controls and accountability around downstream uses of personal information.

Third-order effects

If similar cases continue to produce sizable settlements, privacy risk could become a more material operating constraint on identity-data and audience-data businesses, rather than a peripheral legal issue.
The broader pressure is likely to favor data practices that make collection, sharing, and permitted use easier to document; the extent of that shift depends on future enforcement and litigation outcomes.

The trend: This is one data point in the tightening legal and commercial accountability around monetizing consumer identity data.

Discussion

@martyswant Marty Swant on x
Reviewing the court docs, it's also interesting Oracle announced its plans to exit the ad-tech biz just weeks *after* agreeing to modify its business practices as part of the settlement. [image]
@johnnyryan Johnny Ryan on x
Settlement news today: Oracle to stop data harvesting and pay $115 million. Congratulations to @mlacabe @jengolbeck and @LieffCabraser. [image]
@montezumachavez Luis Montezuma on x
Oracle will certify that it will: (i) not capture user-generated information within referrer URLs associated with a website user, and (ii) implement an audit program to reasonably review customer compliance with contractual consumer privacy obligations. [image]
@robertfreundlaw Rob Freund on x
Oracle has agreed to pay $115M to settle a class action brought under CA's wiretapping law. Plaintiffs say Oracle “tracks and records personal information,” then sells that info to 3rd parties via its ID Graph service, which “helps marketers connect identities across channels.” […
@wendyndavis Wendy Davis on x
.@Oracle agrees to pay $115 million to settle privacy class action, and agrees it won't collect certain info (user-generated info in referrer headers & ) text entered by a user in third-party sites. prior: https://www.mediapost.com/... [image]

Chronicles