Spokeo, a popular people search website, has faced legal challenges over allegations that the company displayed personal profiles without users’ consent. The class action claims center on the idea that Spokeo compiled and made publicly searchable detailed personal information—including names, phone numbers, addresses, age, family members, and sometimes financial or health-related data—without proper authorization from the individuals whose profiles were created. These lawsuits raise questions about when a company can legally aggregate and sell access to personal data, and what obligations it has to notify or get permission from the people whose information appears on its platform.
The core allegation is straightforward: Spokeo pulled information from public records, data brokers, and other sources to build searchable profiles, then allowed anyone to access these profiles through its paid search service. People named in these profiles often had no idea the information was being compiled and sold this way, and many never granted Spokeo permission to include their personal details. The legal theories behind these claims typically invoke privacy laws, the Fair Credit Reporting Act, and state consumer protection statutes that may require data brokers to obtain consent before displaying sensitive personal information.
Table of Contents
- How Did Spokeo Obtain and Display Personal Information?
- What Are the Legal Grounds for the Privacy Claims?
- Who Could Be Affected by the Class Action?
- How Do Settlement Claims and Compensation Work?
- What Are the Limitations and Risks for Class Members?
- Spokeo’s Responses and Ongoing Privacy Practices
- Other Data Brokers and Similar Litigation
- Frequently Asked Questions
How Did Spokeo Obtain and Display Personal Information?
Spokeo operates by aggregating information from multiple sources and organizing it into searchable profiles. The company licenses data from public records, other data brokers, and online sources, then adds its own data collection to create comprehensive profiles. For someone searching on Spokeo, the process is simple: enter a name and city, and the platform returns profiles with addresses, phone numbers, age estimates, family connections, and sometimes employment or educational history.
The person whose information appears in these profiles typically never consented to Spokeo gathering or displaying that data. A key point of contention is that Spokeo does not ask individuals for permission before creating or displaying their profiles. While some of the underlying data comes from public records—which are legally available—the compilation and repackaging of that data into a searchable, commercial profile creates a new product that may not require consent depending on jurisdiction and applicable laws. However, many people argue that there is a meaningful difference between data being “publicly available” at a courthouse or in a property record database and that same data being collected, organized, and sold as a search product by a commercial company.
What Are the Legal Grounds for the Privacy Claims?
The class action lawsuits against Spokeo typically cite violations of the Fair Credit Reporting Act, state privacy laws, and potentially state-specific consumer protection statutes. Under the FCRA, companies that compile and disseminate consumer reports—which can include background information, credit history, and other personal data—are required to meet specific standards. One argument in the Spokeo cases is that the profiles the company creates function as consumer reports, meaning Spokeo should have had to follow FCRA requirements, including obtaining consumer consent before creating or displaying the reports. A significant limitation in these cases is the legal threshold for standing: to sue, a plaintiff must generally show that they suffered an actual injury. The Supreme Court has ruled that the mere violation of a law is not enough; a person suing must demonstrate concrete harm.
This makes privacy class actions challenging because harm from unauthorized data disclosure is not always easy to quantify. Did someone suffer financial loss because their profile was visible? Did their information lead to identity theft, harassment, or other tangible injury? Courts in different jurisdictions have taken varying approaches to whether privacy violations alone constitute sufficient harm. State privacy laws present another avenue for claims. Some states, such as California, have enacted laws that restrict how companies can use personal information and require transparency about data collection practices. The argument in some Spokeo cases is that by not obtaining clear, affirmative consent before displaying profiles, Spokeo violated these state consumer privacy laws. However, state laws differ significantly in their scope and enforcement mechanisms, which means the legal viability of claims can depend heavily on the plaintiff’s state of residence.
Who Could Be Affected by the Class Action?
The potential class in a Spokeo privacy case could be broad: any person whose profile appeared on Spokeo’s platform during a specified time period, regardless of whether they ever visited the site or knew their information was there. Some cases define the class more narrowly—for example, only those whose profiles included specific sensitive information, or only those in states with particular privacy protections. The scope of the class affects both how many people might be eligible and what compensation looks like when divided among all class members.
An example of how broad class definitions can create practical issues: imagine a class of 10 million people affected by a Spokeo case, with a settlement worth $10 million. Dividing that equally yields $1 per person. Many class members never file a claim and never receive even that minimal payout; the unclaimed settlement funds often go to charities or states. Conversely, class definitions that are too narrow may exclude people who were genuinely harmed but fall just outside the definition—for instance, if the class covers only profile views but not profile creation.
How Do Settlement Claims and Compensation Work?
In a settled Spokeo class action, class members typically have the option to submit a claim to receive compensation. The process usually involves visiting a settlement website, entering personal information to verify membership in the class (such as a name and address that appeared on Spokeo), and requesting a payment. Claims periods are finite—usually ranging from a few months to a year—and unclaimed funds do not go to class members; they revert to the defendant, the settlement fund, or a cy pres award. A key tradeoff in class action settlements is compensation amount versus claim requirements.
Settlements with strict verification requirements (such as requiring proof that you specifically searched for yourself on Spokeo or that you were harmed) result in fewer claims but potentially larger per-person payouts. Settlements with minimal requirements attract more claims, which dilutes the per-person payout. A $5 million settlement with a 10% claim rate yields higher individual payments than a 50% claim rate, but the company faces the cost and complexity of validating more claims. Most Spokeo-related settlements try to balance this by using name and address verification, which is relatively simple to confirm against Spokeo’s records.
What Are the Limitations and Risks for Class Members?
One significant limitation is that settlement claims are not automatic. If you believe your Spokeo profile violated your privacy, you must actively find and submit a claim during the claims window. Many class members never become aware of a settlement, miss the claims deadline, or decide the compensation is too small to justify the effort. Additionally, claiming benefits from a settlement may require you to provide the same personal information (name, address, possibly email or phone) that the class action alleged was misused—a irony not lost on privacy-conscious class members. Another limitation is confidentiality: by accepting settlement payment, you may agree to release Spokeo from future lawsuits related to the same conduct, and you may be bound by confidentiality provisions.
This means you generally cannot publicly disclose the amount you received or certain details about the settlement. Additionally, settlement funds are typically treated as taxable income; a $50 payment might result in tax liability, though the amount is often too small to trigger reporting requirements. A practical warning: fraudulent settlement notification scams exist. If you receive an unsolicited email or letter claiming you are eligible for a Spokeo settlement and asking you to verify personal information or pay a fee to claim it, exercise extreme caution. Legitimate class settlements are free to join, and the settlement administrator’s website can be verified by checking the official court docket or the defendant company’s website. Never pay to claim a class action benefit, and never provide personal information to an unverified source, even in the name of claiming a settlement.
Spokeo’s Responses and Ongoing Privacy Practices
Spokeo has contested many of the privacy allegations against it, arguing that the information in its profiles comes from public records and that users have several tools to manage their own profiles on the site. The company allows individuals to submit opt-out requests to remove or suppress their information from search results. However, critics note that opt-out systems shift the burden to individuals—each person must find out that their profile exists, navigate the opt-out process, and repeat the request if the information reappears.
An opt-in system, by contrast, would require Spokeo to obtain permission before displaying profiles in the first place. Spokeo’s opt-out process typically requires users to provide some personal information and may take several business days or weeks to complete. The company claims that re-listing of removed information is unintentional and occurs when new data is added to its database, but the frequency of relistings is not independently audited. This mismatch between Spokeo’s opt-out capabilities and class action allegations about non-consensual profile display is part of why the lawsuits have proceeded: opt-out tools do not necessarily constitute consent, and they do not remediate the underlying harm if the profile was already visible before removal.
Other Data Brokers and Similar Litigation
Spokeo is not alone in facing privacy lawsuits. Other people search sites and data brokers—including companies like BeenVerified, TruthFinder, and LexisNexis—have faced similar legal challenges. The broader context is that the data brokerage industry has long operated with minimal oversight or transparency regarding how and why profiles are created and shared.
Some states are beginning to regulate data brokers more strictly, requiring registration, licensing, and clearer disclosure of what information is collected and how it is used. The lessons from Spokeo cases may affect how other data brokers operate going forward. If courts continue to find that profile display without consent violates privacy or consumer protection laws, competitors may need to shift their business models—either by implementing stronger opt-in systems, obtaining explicit consent before publishing profiles, or limiting the types of personal information displayed without authorization. However, the data brokerage industry remains largely unregulated at the federal level, and enforcement varies by state, so compliance improvements are not guaranteed across the entire sector.
Frequently Asked Questions
How do I know if I was included in a Spokeo class action?
If you believe your personal information appeared on Spokeo during a specified period, you may be part of the class. Check the settlement administrator’s website using your name and address; the official settlement notification should explain eligibility criteria and provide instructions to verify your status.
Do I have to pay anything to file a claim?
No. Legitimate class action settlements are free to join. If someone asks you to pay a fee to claim your share or verify your eligibility, it is likely a scam. Always verify the settlement website’s legitimacy by checking the court case docket or the defendant’s official website.
If I settle, can I still sue Spokeo later?
Generally, no. By accepting a settlement payment, you agree to release the company from future lawsuits related to the conduct covered by the settlement. Read the settlement agreement’s release language carefully before claiming, as this is a meaningful tradeoff.
What if my information appears on Spokeo now?
You can submit an opt-out request directly to Spokeo through its website. However, opt-outs are not permanent; information may reappear if Spokeo updates its database. Alternatively, you may be able to request a statutory opt-out under state laws like California’s, which requires data brokers to honor consumer requests to delete or suppress personal information.
How much will I receive from the settlement?
The payout per class member depends on how many valid claims are submitted. If the settlement is $10 million and 100,000 people claim, the average is $100 before fees and taxes, though your actual amount may vary. Unclaimed funds do not go to class members who don’t claim on time.
Is my taxable settlement payment?
Yes, settlement payments are generally treated as taxable income. The amount is usually small enough that you won’t have a significant tax bill, but keep documentation of the payment in case you file taxes.