Generally, you cannot sue a company just for selling your browsing data. You can sue only in narrow cases tied to your state, data type, specific law violated, and measurable harm, according to LegalClarity in its August 2026 analysis.
Browsing data means records of sites you visit, pages you view, and actions you take online. LegalClarity reports most comprehensive state privacy laws leave routine sale violations to attorney-general or agency enforcement. That structure shapes what you can file, complain about, or request.
Table of Contents
- Why a sale alone rarely supports a lawsuit
- When video viewing history allows a claim
- How pixels and cookies lead to wiretap suits
- What complaints and deletion requests can do
Why a sale alone rarely supports a lawsuit
California shows how narrow the private right is. The State of California Department of Justice says suits require a breach of nonencrypted, nonredacted personal information from weak security. The Department explains that test in California privacy guidance. That breach remedy is actual damages or $100 to $750 per consumer per incident.
The Department of Justice says it is not a general right to sue for collection, tracking, sharing, or denied requests. A routine sale without that kind of breach does not meet the test. Check your state law for who may enforce sale rules. In many states, only the attorney general or a privacy agency can bring that claim. Your private claim needs a different law or added facts like a breach or illegal interception.
When video viewing history allows a claim
Video viewing history has a stronger federal claim. Cornell Legal Information Institute publishes the federal Video Privacy Protection Act, 18 U.S.C. section 2710. It lets an aggrieved person sue a video provider for knowingly disclosing viewing information without consent. The minimum recovery is $2,500 plus fees, shown in the federal video-privacy law text. The scope of consumer remains contested.
Finnegan reports the Supreme Court will hear Salazar v. Paramount on Oct. 14, 2026. The question is whether a newsletter subscription makes someone a VPPA consumer when a pixel allegedly shared viewing history. This path fits streaming, video, and viewing-history disclosures. It does not cover ordinary browsing like shopping or search logs. Save evidence of the provider, the disclosure, and lack of consent.
How pixels and cookies lead to wiretap suits
Many recent cases focus on tracking tools rather than outright sales. Plaintiffs bring federal Wiretap Act and California privacy claims over pixels, cookies, and session replay. Usercentrics explains ECPA civil relief as the greater of $10,000 or $100 per violation day. The theory is that a tracker sent your site activity to another company without proper consent.
Success turns on interception, consent, and who counts as a party to the communication. Courts treat those facts differently, so outcomes vary by tool and setup. Pixels are common, but common does not mean automatically illegal. A cookie banner, privacy policy, or consent setting can affect the claim. Preserve the site address, dates, and any tracker notices you saw.
What complaints and deletion requests can do
Regulators often act where individuals cannot sue for a sale. The Hacker News reported Avast was fined $16.5 million for its browsing-data practices. The FTC had charged it sold data through Jumpshot despite promising its products would block tracking. Yale Journal on Regulation reports the FTC sued data broker Kochava in 2022 over selling location data from hundreds of millions of devices. It finalized a settlement in May 2026 restricting its data practices.
Agency cases can limit future sales without paying you directly. Deletion requests can stop future sales even without a lawsuit. The Office of Governor Gavin Newsom announced California's DROP platform for one request ordering registered brokers to delete data and stop selling it. Broker processing was required from August 2026. If you live in California, submit one DROP request to cover all registered brokers at once.
- Confirm whether the seller is covered by your state complaint process.
- Save proof of the account, dates, data type, and opt-out attempts.
- File an attorney-general or agency complaint for a routine sale.
- If you are Californian, use one DROP request for registered brokers.