Android User Data Collection Lawsuit: Full 2026 Guide

Quick Answer Box
– What it is: A series of active federal class action lawsuits alleging Google and Android device makers collected personal data from users without adequate consent, violating state and federal privacy laws.
– Who qualifies: Android smartphone users in the United States, particularly those in California, Illinois, and other states with strong statutory privacy protections, who used an Android device during the covered periods.
– What it's worth: Individual payouts have ranged from small statutory amounts under state biometric laws to several hundred dollars per claimant in prior Google privacy settlements; the current litigation involves potential aggregate liability in the hundreds of millions of dollars.

Case Snapshot

Android users generate data at a scale that rivals small nations. The android user data collection lawsuit wave now moving through federal courts in 2026 reflects years of mounting evidence that Google harvested that data in ways its own terms of service did not clearly authorize.

These are not minor technical disputes. Plaintiffs allege Google collected real-time bidding data, location information, biometric identifiers, browsing history, and sensor data, often while users believed privacy settings had disabled that collection.

You might also find this useful: Venmo Class Action Lawsuit 2026: Claims & Payouts

The litigation spans multiple federal dockets, touches four distinct legal theories, and has already produced prior settlements that give courts a benchmark. Understanding where these cases stand in 2026 requires more than a general summary of allegations.

The sections below trace the legal architecture of these claims, the courts overseeing them, what individual claimants can realistically expect, and what kind of attorney is positioned to handle this work.

What Is the Android Data Collection Lawsuit

The android user data collection lawsuit is not a single case. It is a cluster of related class action proceedings alleging that Google LLC, acting through its Android operating system and related services, collected detailed personal and behavioral data from users without lawful consent.

The core allegation is that Android devices transmitted user data to Google servers even when users had opted out of personalization, disabled ad tracking, or operated in privacy modes that Google's own documentation described as protective.

Evidence produced in discovery in the Calhoun v. Google LLC proceeding revealed that Google's own engineers had internally flagged data flows that appeared to bypass user consent controls. Those internal communications became a central exhibit in plaintiffs' class certification arguments.

*Attorneys handling these claims point to the internal documentation as evidence that the alleged violations were not technical oversights but the result of deliberate architectural choices in Android's codebase.*

Key alleged data types collected without adequate consent:

• Real-time location coordinates
• Advertising ID linked to device identity
• App usage logs and in-app behavior
• Browsing history through Chrome and WebView
• Contact list metadata
• Sensor data including accelerometer and microphone access logs

Google Android Data Privacy Lawsuit 2026

By 2026, the Google android data privacy lawsuit landscape has evolved significantly from its origins in 2020 and 2021 filings.

The Calhoun v. Google LLC case, filed in August 2020 in the Northern District of California, challenged Google's collection of data through Chrome's sync feature on Android. The In re Google RTB Consumer Privacy Litigation, filed in 2021, focuses specifically on Google's real-time bidding advertising system, which plaintiffs argue broadcasts personal data to hundreds of ad buyers without users' knowledge.

Both cases remain before judges in the Northern District of California. The RTB case sits before Hon. Yvonne Gonzalez Rogers. Discovery in that proceeding has been intensely contested, with Google challenging the scope of document production requests on multiple occasions.

*Attorneys handling these claims note that the RTB case is particularly significant because it implicates not just Google but the entire programmatic advertising ecosystem that receives user data.*

Android Data Collection Legal Claims Explained

Four distinct legal theories are driving the android user data collection lawsuit proceedings in 2026.

Each theory produces a different damages calculation. Plaintiffs and their attorneys often plead multiple theories simultaneously to maximize recovery options if one theory fails class certification or summary judgment.

*Attorneys handling these claims emphasize that the choice of legal theory significantly affects both the strength of the case at the class certification stage and the per-person recovery amount.*

The four primary legal theories:

• Federal Wiretap Act (18 U.S.C. § 2511): Prohibits intentional interception of electronic communications. Damages: up to $10,000 per violation or actual damages, whichever is greater.
• Electronic Communications Privacy Act (ECPA): Covers stored communications and real-time interception by service providers. Courts are split on whether Android's data flows qualify.
• Illinois BIPA (740 ILCS 14): Governs collection of biometric identifiers. Statutory damages of $1,000 per negligent violation or $5,000 per intentional violation.
• California CCPA/CPRA (Cal. Civ. Code § 1798.100 et seq.): Requires disclosure, opt-out rights, and data minimization for California residents. Statutory damages of $100 to $750 per incident per consumer.

Litigation Watch: The intersection of federal Wiretap Act claims and state biometric laws gives plaintiffs overlapping damages theories that Google must defeat on multiple fronts simultaneously, making global settlement more costly for the defendant.

Who Qualifies for the Android Data Lawsuit

Eligibility for the android user data collection lawsuit depends on which specific case or settlement a claimant seeks to join.

In the broadest framing, any person who owned or used an Android smartphone in the United States during the relevant period may have a potential claim. However, the actual class definitions that courts certify are far more specific.

For the RTB case, the proposed class definition focuses on U.S. Android users whose personal data was transmitted through Google's real-time bidding system without consent. For BIPA-based claims, the class is limited to Illinois residents whose biometric data was collected.

*Attorneys handling these claims point out that class membership is often broader than consumers expect, because data transmission occurs in the background without any affirmative action by the user.*

Eligibility factors courts are examining:

• Whether the user's Android device ran Google Play Services during the covered period
• Whether the user had a Google account linked to the device
• Whether the user was a resident of a state with statutory privacy protections at the time of the alleged collection
• Whether the user had previously agreed to an arbitration clause in Google's Terms of Service (Google has sought to compel arbitration in some sub-cases)
• Whether the user opted out of ad personalization (plaintiffs argue opt-out had no effect on the actual data flows)

Android Data Lawsuit Eligibility Requirements

The specific eligibility requirements for the android user data collection lawsuit vary by case, by state, and by the legal theory being pursued.

Courts examining class certification in the RTB litigation have grappled with whether all Android users share a sufficiently common injury to proceed as a class, or whether individual differences in settings, devices, and usage patterns defeat commonality under Rule 23(a).

Google has argued that user experiences are too varied for a single class to proceed. Plaintiffs counter that the data transmission occurred at the operating system level, uniformly across devices, regardless of individual settings.

*Attorneys handling these claims note that the commonality dispute is the most critical pending issue in the RTB case, and its resolution will determine whether tens of millions of users can proceed collectively.*

General eligibility checklist:

Illinois BIPA and Android Data Collection

Illinois residents occupy a distinct and stronger legal position in the android user data collection lawsuit than users in most other states.

The Illinois Biometric Information Privacy Act, 740 ILCS 14, is the most powerful state biometric privacy statute in the country. It creates a private right of action, imposes statutory damages without requiring proof of actual harm, and has produced multi-billion-dollar verdicts in other contexts.

Plaintiffs in Illinois-based Android cases argue that Google's collection of facial geometry data through Google Photos and its collection of voice prints through Google Assistant on Android devices constitutes the collection of biometric identifiers under BIPA without proper written notice or consent.

*Attorneys handling these claims note that BIPA's five-year statute of limitations and per-violation damages structure make Illinois the highest-exposure jurisdiction for Google in the entire android user data collection lawsuit landscape.*

BIPA damages structure:

• Negligent violation: $1,000 per violation
• Intentional or reckless violation: $5,000 per violation
• Attorney's fees: recoverable by prevailing plaintiff
• Class action: permitted under BIPA's private right of action

The Illinois Supreme Court's 2023 ruling in Cothron v. White Castle Sys., Inc., which clarified that BIPA claims accrue per violation rather than on first exposure, significantly expands the theoretical damages pool in Android-related BIPA cases.

Litigation Watch: Illinois BIPA exposure alone could produce per-defendant liability in the billions of dollars if courts certify large classes and apply the Cothron per-violation accrual rule to Android data flows.

CCPA Android Data Privacy Claims

California residents have two overlapping statutory frameworks supporting android user data collection lawsuit claims: the California Consumer Privacy Act and its 2020 successor, the California Privacy Rights Act.

The CCPA, codified at Cal. Civ. Code § 1798.100, gave California consumers the right to know what data businesses collect, the right to delete that data, and the right to opt out of its sale. The CPRA strengthened those rights and created the California Privacy Protection Agency to enforce them.

Plaintiffs in the Northern District of California cases argue that Google's RTB system constitutes the "sale" of personal information under the CCPA, because it transmits user data to hundreds of third-party advertising buyers in exchange for advertising revenue. Google disputes that its RTB system constitutes a "sale" under the statutory definition.

*Attorneys handling these claims point to the CPRA's expanded definition of "sharing" for cross-contextual behavioral advertising, which plaintiffs argue captures RTB transmissions even if courts reject the "sale" characterization.*

Statutory damages under the CCPA for data breaches reach $750 per consumer per incident, with actual damages potentially higher if proven.

Federal Wiretap Act Android Lawsuit

The federal Wiretap Act claims in the android user data collection lawsuit present the highest per-violation damages potential of any theory in play.

18 U.S.C. § 2511 prohibits the intentional interception of any wire, oral, or electronic communication. Plaintiffs allege that Google's real-time interception of data transmitted between users and websites, facilitated through Android's WebView component and Chrome browser, constitutes unlawful interception under the statute.

Google's primary defense is the "ordinary course of business" exception and the party exception, arguing that as a party to the communications, it cannot intercept its own transmissions. Courts have split on whether this defense applies when the data recipient is an advertising intermediary rather than the intended recipient.

*Attorneys handling these claims note that the party exception defense, while viable, has failed in several analogous cases where courts found that routing data through a third-party ad server removed Google from the status of a lawful party to the communication.*

Federal Wiretap Act damages:

• $10,000 per day of violation, or $100 per day, whichever is greater
• Or actual damages, whichever is greater
• Plus punitive damages and attorney's fees
• Statute of limitations: 2 years from date of discovery

The potential for per-day damages makes Wiretap Act claims exponentially more valuable than per-incident state claims if plaintiffs can establish the duration of the alleged interception.

Android Data Lawsuit Settlement Amount 2026

No comprehensive global settlement of the android user data collection lawsuit has been confirmed as of early 2026.

However, Google's track record in privacy litigation provides a meaningful benchmark. In November 2022, Google agreed to a $391.5 million settlement with 40 state attorneys general over Android location tracking, the largest privacy settlement in U.S. history at that time. In 2024, Google agreed to a $5 billion settlement in the Chrome Incognito Mode class action, Brown v. Google LLC, No. 4:20-cv-03664 (N.D. Cal.).

Also worth exploring: Capital One Lawsuit Settlement: Full 2026 Case Guide

These settlements establish that Google has been willing to resolve broad consumer privacy claims at a significant scale when litigation risk becomes sufficiently concrete. The RTB and related Android data cases present comparable or greater exposure.

*Attorneys handling these claims point to the Incognito settlement as a direct precedent for the magnitude of recovery that is achievable in Android-based privacy litigation before a Northern California federal judge.*

Prior Google privacy settlements (benchmarks):

How Much Will the Android Data Lawsuit Pay Per Person

Individual payout amounts in the android user data collection lawsuit depend on the settlement structure, the number of valid claimants, and which legal theory governs the payment.

In the 2022 Google Illinois BIPA settlement, individual claimants received approximately $97 per person after the fund was divided among the class. In the $5 billion Incognito settlement, individual distributions have not yet been fully calculated, but the fund size suggests meaningful per-person recovery if participation rates remain manageable.

For pending cases with no settlement yet, statutory damages provide a theoretical ceiling. BIPA allows $1,000 to $5,000 per violation. The Wiretap Act allows $10,000 per day of violation. These statutory figures are the maximum courts can award, not guaranteed individual payouts.

*Attorneys handling these claims caution that actual distributions are always reduced by the number of participating class members, the percentage of the fund allocated to fees, and the administrative costs of the settlement process.*

Estimated payout range by legal theory:

Litigation Watch: The gap between statutory maximum damages and realistic per-person distributions is the most misunderstood element of android data lawsuit claims; claimants who expect four-figure checks without understanding class math will be disappointed regardless of how the litigation resolves.

Android Class Action Lawsuit Status 2026

As of 2026, the android user data collection lawsuit proceedings are in an active but pre-settlement phase.

The RTB case, In re Google RTB Consumer Privacy Litigation, No. 4:21-cv-02155-YGR, has completed substantial discovery. Class certification briefing has been contested, with Google arguing that variations in user settings and device configurations defeat the commonality and typicality requirements of Rule 23.

Judge Gonzalez Rogers has pushed back on both sides during oral argument, signaling that the court will not simply rubber-stamp either party's characterization of the data flows. A class certification ruling, if it goes in plaintiffs' favor, would substantially increase settlement pressure on Google.

*Attorneys handling these claims point to the court's active management style as a signal that the RTB case will proceed to a substantive ruling rather than a procedural dismissal.*

Current status indicators:

• Discovery: Substantially complete in RTB case
• Class cert: Briefing contested; ruling anticipated in 2026
• Related Illinois BIPA cases: Statute of limitations disputes ongoing
• California AG: Monitoring but not formally intervening as of early 2026
• FTC: Issued guidance on mobile data collection in 2024; not a formal party

Which Court Is Handling the Android Data Lawsuit

The primary android user data collection lawsuit proceedings are concentrated in the U.S. District Court for the Northern District of California, the court that handles most major tech company litigation given Silicon Valley's geographic presence.

The RTB case sits before Hon. Yvonne Gonzalez Rogers in Oakland. She is an experienced jurist with a long record in complex commercial and consumer class action cases. Her courtroom has handled significant tech-sector litigation before, and she is known for demanding precision in expert testimony and damages modeling.

Related Android privacy claims filed in Illinois are proceeding in the U.S. District Court for the Northern District of Illinois, which has developed substantial BIPA case law over the past five years.

*Attorneys handling these claims note that forum selection is not arbitrary in this litigation; the Northern District of California's familiarity with Google's technical architecture and its well-developed class action procedural rules give plaintiffs structural advantages they would not have in less experienced districts.*

Courts with active android data proceedings:

Android Data Lawsuit MDL and Docket Numbers

Attorneys and claimants tracking the android user data collection lawsuit need accurate docket references to monitor proceedings.

Unlike some mass tort litigation, the Android data cases have not been fully consolidated into a single MDL (Multi-District Litigation) proceeding. Instead, individual cases have been related and coordinated before specific judges without formal MDL designation. This is a procedural distinction that affects how cases are managed but does not diminish the cases' collective significance.

The two central dockets are No. 4:21-cv-02155-YGR (RTB case) and No. 5:20-cv-05146 (Calhoun). Both are publicly accessible through PACER, the federal court electronic records system.

*Attorneys handling these claims note that the absence of formal MDL status means there is no single plaintiff leadership committee governing all Android privacy claims, which creates both opportunities and risks for individual claimants seeking to join the litigation.*

Key docket references:

Litigation Watch: The lack of a formal MDL consolidation means claimants in different states may be pursuing overlapping or duplicative claims without coordination, which courts may eventually address through either consolidation or inconsistent rulings.

Android Lawsuit Filing Deadline 2026

No single universal filing deadline governs all android user data collection lawsuit claims in 2026.

Deadlines depend on which case a claimant seeks to join, which legal theory applies, and which state's law governs the claim. Statutes of limitations vary significantly by theory.

The federal Wiretap Act carries a 2-year statute of limitations from the date of discovery of the violation. Illinois BIPA has a 5-year statute of limitations from the date the violation accrued. The CCPA's private right of action for data breaches does not specify a statute of limitations, but courts have applied California's general 3-year statute for statutory violations.

*Attorneys handling these claims consistently emphasize that waiting for a settlement announcement before contacting an attorney is a strategic error; by the time a settlement is publicized, class membership may already be closed or opt-out windows may have passed.*

Statute of limitations by theory:

If a settlement is announced and a claims administration process opens, claim filing windows typically range from 60 to 120 days from the notice date. Claimants who miss that window generally forfeit their recovery from the class fund.

How to File a Claim in the Android Data Lawsuit

There is no open claims process for the android user data collection lawsuit as of early 2026, because no global settlement has been announced.

If and when a settlement is reached and court-approved, a claims administrator will be appointed and a settlement website will be established. Class members typically receive notice by email, by U.S. mail, or through digital advertising. The claims process for prior Google settlements required claimants to verify their Google account status and confirm their residency during the covered period.

For active litigation where no settlement has been reached, joining the case requires retaining an attorney who handles consumer privacy or class action litigation. Individual claimants do not appear pro se in active class action proceedings at the federal level.

This is also helpful: How to Sign Up for the Temu Class Action Lawsuit 2026

*Attorneys handling these claims note that for pending cases, the most valuable step a potential claimant can take right now is preserving records of their Android device ownership, their Google account creation date, and any communications from Google regarding privacy settings or data use.*

Documents to preserve now:

• Google account creation confirmation emails
• Android device purchase receipts or carrier account records
• Any Google privacy policy change notifications received via email
• Screenshots or records of privacy setting configurations
• Any communications from Google about data requests or opt-out confirmations

What Type of Lawyer Handles Android Data Lawsuits

The android user data collection lawsuit is handled by a specific and relatively narrow group of attorneys with overlapping expertise.

Class action and consumer protection attorneys with experience in privacy litigation are the primary handlers of these cases. Many of the leading firms in this space have dedicated privacy litigation departments that have spent years developing technical expertise in data architecture, ad tech systems, and the specific statutory frameworks that govern mobile data collection.

At the plaintiff firm level, notable firms that have appeared in Android and Google privacy proceedings include Boies Schiller Flexner, Bleichmar Fonti & Auld, DiCello Levitt, and Simmons Hanly Conroy, among others. Firm leadership positions in coordinated proceedings are formally appointed by courts through lead counsel orders.

*Attorneys handling these claims note that the technical complexity of proving what data was collected, when, and through what mechanism requires expert witnesses in computer science and advertising technology, meaning smaller general practice firms are at a structural disadvantage in this litigation.*

What to look for in an attorney for this type of case:

• Demonstrated experience in federal class action certification proceedings
• Prior involvement in mobile privacy or data broker litigation
• Ability to retain and fund technical expert witnesses
• A contingency fee structure (these cases are uniformly taken on contingency)
• Familiarity with both federal and relevant state privacy statutes

Most reputable plaintiff firms handling this litigation do not charge upfront fees. Attorney fees are paid from the settlement fund if the case resolves, or from a fee award if it goes to judgment.

Android Data Lawsuit State-by-State Breakdown

The strength of a claimant's android user data collection lawsuit position varies significantly by state of residence.

States with strong statutory privacy frameworks produce the most valuable individual claims. States that rely entirely on common law privacy torts produce the weakest individual claims, because actual damages are difficult to quantify and prove for data collection cases.

California and Illinois are, without question, the two states with the strongest legal positions for android data claimants in 2026. Virginia, Colorado, and Texas have enacted data privacy statutes since 2021, but those statutes generally lack private rights of action, limiting plaintiffs to regulatory enforcement rather than direct litigation.

*Attorneys handling these claims note that claimants in states without private rights of action under state privacy law are not without recourse, because federal Wiretap Act and ECPA claims are available to all U.S. residents regardless of state.*

State-by-state claim strength:

Claimants in California and Illinois should prioritize contacting a privacy class action attorney, because their statutory claims carry the strongest damages floor regardless of individual proof of harm.

Frequently Asked Questions

What exactly is the android user data collection lawsuit about?

The android user data collection lawsuit is a series of federal class action cases alleging that Google collected personal data from Android users without adequate consent.

Plaintiffs allege the data collection included location information, advertising identifiers, browsing history, and biometric data, often transmitted even when users believed tracking was disabled.

The primary cases are proceeding in the Northern District of California before Hon. Yvonne Gonzalez Rogers.

Do I need to have done anything wrong with my Android phone to qualify?

No affirmative wrongdoing is required to qualify as a potential class member.

The alleged violations occurred at the operating system and application level, without user action, and plaintiffs argue the data flows occurred regardless of privacy settings.

Simply owning and using an Android device with a linked Google account during the covered period may be sufficient to place you within a certified class definition.

How much money will I receive if there is a settlement?

Individual payout amounts cannot be determined until a settlement is reached, approved, and administered.

Prior Google privacy settlements have produced per-person distributions ranging from approximately $50 to $200, depending on the number of valid claims filed and the size of the settlement fund.

Statutory theories like BIPA allow up to $5,000 per violation as a ceiling, but class-wide distributions are always lower once the fund is divided among all claimants.

Is there a deadline to file a claim right now in 2026?

No universal open claims deadline exists in 2026, because no global settlement has been announced and approved.

Statutes of limitations still apply: the Federal Wiretap Act allows 2 years from discovery; Illinois BIPA allows 5 years; California claims generally allow 3 years.

Consulting an attorney now preserves your options and ensures you do not miss any claim window that opens when a settlement is announced.

Does it matter which state I live in for the android data lawsuit?

State of residence significantly affects the strength and value of a claim.

Illinois and California residents have the most powerful statutory claims, with private rights of action and statutory damages that do not require proof of actual harm.

Residents of states without privacy statutes that include private rights of action can still pursue claims under federal law, including the Wiretap Act and ECPA.

What type of attorney should I contact about the android data lawsuit?

A plaintiff-side class action attorney with demonstrated experience in consumer privacy or data litigation is the appropriate choice.

These attorneys work on contingency, meaning no upfront cost to the claimant, and are paid only if the case resolves favorably.

When evaluating an attorney or firm, confirm their prior involvement in federal privacy class actions, their experience with BIPA or CCPA claims specifically, and their capacity to fund expert witnesses in data architecture.

Closing

The android user data collection lawsuit proceedings in 2026 represent some of the most consequential consumer privacy litigation in federal court. The cases involve billions of dollars in potential exposure, multiple legal theories, and courts that are already familiar with Google's litigation posture from prior proceedings.

Android users who used a device during the relevant periods should not wait for a settlement announcement to understand their position. Consulting a class action privacy attorney now, while the cases are still in active litigation, preserves options and ensures that no claim window closes without notice.

Readers also liked: SHRM Lawsuit 2026: Claims, Payouts & Who Qualifies