Avast Data Privacy FTC Settlement: $16.5M

Consumers who purchased any Avast antivirus software product during the eligible period.

N/A

Avast has agreed to pay $16.5 million to settle allegations from the Federal Trade Commission (FTC) that it collected and sold users’ web browsing data without obtaining proper consent. The agency accused Avast of misleading consumers by advertising its antivirus products as privacy-protective while secretly sharing sensitive browsing history with third-party advertising and analytics firms.

Between 2014 and 2020, Avast allegedly bundled web tracking data from users of both its free and paid antivirus software and sold it through a subsidiary. According to the FTC complaint, this occurred despite Avast's repeated claims that it would shield consumers from online tracking. The shared data reportedly included detailed information about consumers’ web activity, even when those users had adjusted privacy settings.

Avast provides cybersecurity products, including antivirus software and VPN services. The company did not admit wrongdoing but agreed to the terms of the FTC consent order finalized on June 26, 2024.

Under the Terms of the Settlement

Refunds will be available to eligible consumers who purchased Avast antivirus software between August 2014 and January 2020. The FTC estimates more than 3.6 million people may qualify. The exact amount each eligible consumer receives will depend on how many valid claims are submitted. Proof of purchase is not required.

This case is one of several recent enforcement actions by the FTC aimed at curbing deceptive data collection and sale practices by companies that claim to offer privacy-focused products.