
A new class action lawsuit filed in the U.S. District Court for the Northern District of California alleges that Amazon, through its advertising division, secretly collected and sold California residents’ precise location data without their consent. The lawsuit, brought by plaintiff Felix Kolotinsky, claims that Amazon embedded a software development kit (SDK) into mobile apps, allowing it to siphon timestamped geolocation data from users’ devices. The collected data allegedly enabled Amazon to build detailed consumer profiles, revealing sensitive personal details such as religious affiliations, medical conditions, and daily routines.
Kolotinsky argues that Amazon’s actions violate California laws, including Penal Code 638.51, which prohibits unauthorized data collection via "pen registers," and the California Comprehensive Computer Data Access and Fraud Act. The complaint states that users had no way to opt out of Amazon’s data collection practices and were never informed that their movements were being tracked. Apps including Speedtest by Ookla were identified as embedding Amazon’s SDK, allegedly enabling this unauthorized tracking.
The lawsuit seeks damages, injunctive relief, and a court order stopping Amazon from continuing these practices. Amazon has not yet publicly responded to the allegations. If the court certifies the class, the case could have significant implications for digital privacy and corporate data collection practices in California.