LinkedIn, owned by Microsoft, is facing multiple class action lawsuits over privacy violations related to how the platform collects and uses personal data for advertising purposes. The most recent and significant lawsuit was filed in April 2026 in U.S. District Court for the Northern District of California, alleging that LinkedIn installed hidden JavaScript code on its platform that scans users’ browsers for installed Chrome extensions without consent or authorization.
This browser scanning practice raises serious concerns because the extensions LinkedIn targets can reveal sensitive information about users’ political affiliations, religious beliefs, disabilities, and employment status—information that should never be collected without explicit permission. If you use LinkedIn or see LinkedIn ads, you should understand what data may have been collected about you and what legal options exist. Beyond the current browser scanning lawsuit, LinkedIn also settled a major advertising case for $6.625 million in 2024, and faces additional lawsuits involving unauthorized video tracking and collection of health data from visitors to health-related websites. These cases reveal a pattern of aggressive data collection practices that go beyond what most users realize when they log into the platform.
Table of Contents
- How Does LinkedIn’s Hidden Browser Scanning Work and Why Should You Care?
- What Was the Previous LinkedIn Advertising Settlement and Why Does It Matter?
- What Other Active Lawsuits Does LinkedIn Face Over Data Collection?
- What Can You Do to Protect Your Privacy on LinkedIn and Limit Data Collection?
- What Does LinkedIn’s Current Advertising Policy Say About Sensitive Topics?
- Who Is Eligible to Claim Compensation From These Lawsuits?
- What Does This Mean for the Future of LinkedIn’s Advertising Model?
How Does LinkedIn’s Hidden Browser Scanning Work and Why Should You Care?
LinkedIn’s alleged browser scanning mechanism operates through hidden code that executes on LinkedIn web pages without users’ knowledge. When you visit LinkedIn or any webpage with LinkedIn embed code or tracking pixels, this hidden JavaScript silently scans your installed browser extensions and transmits that data to third parties. The lawsuit claims LinkedIn scanned for over 6,000 Chrome extensions in total, a scope far larger than most users would expect from a social media platform. This data collection happens automatically whenever you interact with LinkedIn’s site or ads, regardless of whether you actively consented to such monitoring. The extensions LinkedIn targets can reveal deeply personal information about your life.
If you use an extension for managing health insurance claims, LinkedIn learns you’re dealing with health issues. If you use an extension for job searching on competing platforms, LinkedIn learns you’re looking to leave your current job. If you use an extension that blocks adult content, LinkedIn might infer your family status or concerns. Political affiliation tracking extensions, religious organization apps, and disability accommodation tools all become vectors for LinkedIn to build a shadow profile about you. This information can then be used to target you with ads, sold to data brokers, or shared with Microsoft and other partners without your explicit consent, violating the privacy expectations most users have when they created their LinkedIn accounts.
What Was the Previous LinkedIn Advertising Settlement and Why Does It Matter?
Before the browser scanning lawsuit, LinkedIn already had a history of settling privacy-related allegations. In 2024, LinkedIn agreed to pay $6.625 million to settle a class action lawsuit brought by U.S. advertisers who claimed the platform misrepresented how it calculated advertising fees and failed to properly review metrics for accuracy. This settlement covered claims spanning from January 1, 2015, through May 31, 2023—a period of over eight years during which advertisers alleged they were overcharged or provided false performance data.
The settlement amount, while substantial, was relatively modest compared to the scope of LinkedIn’s advertising business, suggesting that the actual harm to individual users and advertisers may have been significantly larger. The earlier settlement is important context because it demonstrates that LinkedIn has repeatedly faced accusations of misleading users and advertisers about data practices. Compensation from that case was distributed to affected advertisers, not individual users, which means if you ran ads on LinkedIn during that period, you may have been eligible for reimbursement—but most advertisers never filed claims. The limitations of that settlement highlight a critical weakness: even when companies are caught misusing data, individual users often never see compensation because they don’t know they’re eligible or because class action payouts are split among thousands of people. The browser scanning lawsuit follows the same pattern of alleged deception but on a much larger scale, potentially affecting millions of LinkedIn users rather than just advertisers.
What Other Active Lawsuits Does LinkedIn Face Over Data Collection?
Beyond the browser scanning case, LinkedIn faces at least two other active lawsuits alleging serious privacy violations. In October 2025, a judge refused to dismiss a lawsuit claiming LinkedIn used Facebook’s Tracking Pixel to transmit user information directly to Facebook and Adobe without authorization, violating the Video Privacy Protection Act. This lawsuit alleges that LinkedIn embedded tracking code that follows users across the web and shares their browsing behavior with Facebook’s ad network, essentially allowing Facebook to profile LinkedIn users even when they’re not on Facebook. The judge’s decision to allow the case to proceed suggests the claims have legal merit and that LinkedIn may have violated federal privacy laws designed to protect sensitive video-watching behavior.
A second lawsuit, also filed in October 2025, alleges that LinkedIn collected sensitive health information from visitors to health-related websites. According to reporting from CalMatters, LinkedIn and Google both used tracking pixels on health websites to collect information about visitors’ health concerns and conditions, then used that data to build advertising profiles. This practice is particularly troubling because health information is among the most sensitive personal data—people visiting websites about cancer, mental health, or reproductive issues expect privacy, not surveillance. LinkedIn’s terms of service do not clearly disclose that the platform collects health data from third-party websites in this manner, meaning users may not even realize their health information is being harvested and monetized.
What Can You Do to Protect Your Privacy on LinkedIn and Limit Data Collection?
LinkedIn’s official privacy policy does offer some controls, though they are limited and often not set to the strongest privacy default. You can access your ad settings and manage how LinkedIn personalizes advertisements based on your behavior, interests, and inferred demographics. LinkedIn allows you to opt out of personalized ads within the platform, though this opt-out does not prevent the platform from collecting data about you—it only prevents that data from being used to personalize ads shown to you on LinkedIn specifically. Additionally, if you have enabled Global Privacy Control (GPC) signals in your browser, LinkedIn is supposed to automatically honor opt-out requests, though enforcement of GPC compliance remains inconsistent across the industry.
The limitations of these privacy controls are significant. You cannot opt out of LinkedIn’s data collection entirely while maintaining an active account; you can only limit how that data is used for targeted advertising within LinkedIn. The browser extension scanning and third-party tracking that forms the basis of the lawsuits occur regardless of your privacy settings, since they happen at the code level before your preferences are even consulted. If you want stronger privacy protection, you can use browser privacy extensions that block tracking pixels and disable JavaScript on LinkedIn pages, though this will degrade your user experience on the platform. For maximum privacy, many privacy advocates recommend avoiding LinkedIn entirely or using it only with a dedicated privacy-focused browser profile separate from your regular browsing.
What Does LinkedIn’s Current Advertising Policy Say About Sensitive Topics?
LinkedIn’s advertising policies explicitly prohibit advertisers from targeting users based on sensitive personal characteristics, which reveals an important contradiction at the heart of these lawsuits. LinkedIn’s stated policy prohibits targeting ads based on political affiliation, racial or ethnic origin, religious affiliation, health conditions, criminal records, sexual orientation, or income level. The platform claims these restrictions protect users from discrimination and manipulation through advertising. However, if LinkedIn is scanning browser extensions to infer these same sensitive characteristics—as alleged in the browser scanning lawsuit—the company is collecting data about users that it simultaneously prohibits advertisers from using.
This contradiction suggests that LinkedIn collects sensitive data for its own purposes or to sell to other parties, not to enable advertiser targeting, but simply to build more complete user profiles. The gap between LinkedIn’s stated privacy commitments and its actual practices creates a trust problem that the lawsuits are designed to expose and remedy. Users believe they are protected from political and health-based targeting when they use LinkedIn, yet the platform may simultaneously be cataloging their political beliefs and health concerns through hidden scanning. The company’s data sharing with Microsoft, its parent company, adds another layer of complexity—LinkedIn’s privacy policy states it shares personal information with Microsoft to personalize ads and enable cross-context behavioral advertising, but users rarely understand the full scope of what “Microsoft” means or how their data might be used across the entire Microsoft ecosystem.
Who Is Eligible to Claim Compensation From These Lawsuits?
Eligibility for the browser scanning lawsuit and other active cases depends on several factors, including when you had a LinkedIn account, whether you were exposed to the alleged data collection practices, and whether the lawsuit you’re considering has been certified as a class action. Generally, if you had an active LinkedIn account at any point between the alleged start of the harmful practices and when the lawsuit was filed, you may be eligible to participate. For the April 2026 browser scanning lawsuit, any LinkedIn user who had an account while LinkedIn was allegedly running the extension scanning code could potentially be part of the class—which likely includes millions of people. The process for claiming compensation varies depending on whether the lawsuit settles or goes to trial.
If LinkedIn settles (as it has in previous cases), the settlement agreement will establish a claims process where affected users must submit proof of their LinkedIn account and provide banking information to receive compensation. Historical LinkedIn settlements have sometimes resulted in payments ranging from $15 to $150 per claimant, depending on the settlement amount and number of claims filed. However, if the case goes to trial and LinkedIn is found liable, damage awards could be significantly larger. You can check whether you are eligible for any pending LinkedIn settlements by searching the class action settlement website for “LinkedIn” or by visiting the official settlement site for the specific case (linkedinadvertisingclassaction.com for the advertising settlement).
What Does This Mean for the Future of LinkedIn’s Advertising Model?
The accumulation of lawsuits suggests that LinkedIn’s core advertising model—built on aggressive data collection and user profiling—may face significant legal and regulatory pressure in coming years. If these lawsuits succeed or result in major settlements, LinkedIn could be required to change how it collects data, shares user information with third parties, and discloses its practices to users. Several states and the federal government are increasingly focusing on privacy enforcement, with regulators questioning whether LinkedIn’s practices comply with state privacy laws like California’s CCPA and emerging federal privacy legislation. The company may be forced to implement stronger data minimization practices, more transparent user disclosures, or restrictions on third-party data sharing.
For users, these lawsuits represent an opportunity to hold LinkedIn accountable for undisclosed data collection, but they also highlight the reality that social media platforms often collect far more data than users realize or consent to. Even if you win a settlement, the compensation typically reflects only a small fraction of the value of your personal data and the harm caused by undisclosed collection. The more important outcome may be forcing LinkedIn to disclose exactly what data it collects, how it uses that data, and whether it sells data to third parties—information that is currently obscured in dense privacy policies and technical documentation. If you use LinkedIn for professional purposes, understanding these privacy risks and actively managing your privacy settings remains essential until regulatory action forces stronger changes.