X, the social media platform formerly known as Twitter, collects and shares user data in ways that many account holders find surprising. The platform gathers information from your posts, browsing behavior, device identifiers, and location data, then shares or sells portions of this data to advertisers, researchers, and third-party services—often with minimal transparency about how your specific information is used. If you hold an X account, understanding what data the company collects, how it shares that data, and what rights you have under consumer protection laws can help you evaluate whether any pending or settled claims might apply to you.
Privacy advocates and consumer groups have raised concerns that X’s data practices may not adequately disclose to users how their personal information is monetized and shared with external parties. These concerns have prompted legal scrutiny, and account holders have reported feeling that their consent to data sharing was unclear or obtained under misleading terms. Consumer rights in this space rely on federal privacy laws, state regulations, and the terms you agreed to when you created your account—but those terms themselves are often where disputes begin.
Table of Contents
- How X Collects and Shares Your Data
- Privacy Rights and Legal Protections for Account Holders
- Class Action Claims and Settlement Processes
- Steps Account Holders Should Take to Protect Their Rights
- Challenges and Limitations in Data Privacy Claims
- The Role of Attorney’s Fees and Settlement Structure
- What To Do if You Receive Settlement Notice
- Frequently Asked Questions
How X Collects and Shares Your Data
X collects data through several channels: your tweets and public activity, your direct messages and private interactions, your device and IP address information, your browsing behavior across X and other websites (via pixels and tracking cookies), your location data, and inferred information about your interests and demographics. The platform then shares or licenses this data to advertisers for targeted marketing, to researchers who study platform trends and user behavior, and to third-party data brokers and analytics companies. A significant portion of X’s revenue comes from selling access to this user data, either directly or through its advertising network. One example of data sharing that has drawn scrutiny is X’s sale of historical tweet archives to AI training companies and data vendors. Academic researchers and machine learning firms can purchase bulk access to tweets to train language models and conduct studies.
While X frames this as serving research and innovation, account holders were often unaware that their tweets—including personal information shared years ago under different terms of service—could be licensed to external parties building commercial AI systems. The terms governing this type of data licensing were not prominent in X’s user-facing privacy policy, which many users reported never reading in full. Another data-sharing practice involves X’s partnerships with data aggregators and advertising networks. These companies combine X data with information from other sources to build detailed audience profiles for advertisers. This can mean that even if you keep your X profile private or post rarely, the platform still sells inferences about your interests, spending habits, and demographics to third parties. Users who believed their activity on X was limited have discovered through data deletion requests that their information was already licensed to dozens of external companies.
Privacy Rights and Legal Protections for Account Holders
Consumers have privacy rights under several federal and state laws, though these laws have gaps and vary by location. The Federal Trade Commission (FTC) has authority over deceptive or unfair data practices, and the agency has brought enforcement actions against social media and tech companies for making false privacy claims. Many states have passed consumer privacy laws—such as California’s Consumer Privacy Act (CCPA), which gives residents the right to access, delete, and opt out of the sale of their personal information. Some account holders have used these state privacy laws to request that X delete their data or disclose what information the company holds about them. However, social media platforms like X often argue that certain data practices fall outside the scope of these laws, or that users implicitly consented to data sharing by agreeing to the platform’s terms of service.
The fine print in those terms typically gives the company broad rights to collect, use, and share data, which courts have sometimes enforced. One limitation of existing privacy law is that it often requires consumers to take action—filing deletion requests, opting out, or pursuing litigation—rather than requiring platforms to obtain clear opt-in consent upfront. This asymmetry means that even if you have a legal right to control your data, exercising that right often requires time, persistence, and sometimes legal help. A significant risk when filing data requests or deletion demands is that your request may be delayed, partially fulfilled, or met with pushback. X, like other large platforms, can take weeks or months to respond to deletion requests, and the company may not delete all copies of your data held by third parties it has already shared data with. Some users who pursued formal data requests found that the company did not remove their information from archives or backups, or that the deletion was incomplete.
Class Action Claims and Settlement Processes
class action lawsuits related to data sharing typically allege one or more of the following: that the company failed to obtain informed consent before sharing data, that the company’s privacy disclosures were misleading or buried in fine print, that the company violated state privacy laws by selling or sharing data without allowing users to opt out, or that the company unlawfully profited from user data. When class action settlements are reached, they often result in monetary compensation to class members, changes to the company’s privacy practices going forward, or both. The amount individual users receive from data privacy settlements varies widely depending on the size of the class, the amount of money in the settlement fund, and how that fund is divided.
Some settlements have distributed payments of $25 to $100 per account holder, while others have awarded higher amounts to users who can prove greater harm or provide evidence of identity theft related to a data breach. Settlements sometimes also include credits toward paid services, extended privacy protections, or rights to audit the company’s data practices. However, you typically must file a claim to receive any payment—simply being part of the class does not automatically send money to your account.
Steps Account Holders Should Take to Protect Their Rights
If you are concerned about X’s data practices, several practical steps can help protect your interests. First, review what data X holds about you by submitting a data access request through the platform’s privacy settings or by requesting your data under state privacy laws. This can reveal what information the company has inferred about you, which third parties it has shared your data with, and how your data is being used for targeted ads. Second, adjust your X privacy settings to limit data collection where possible—disabling personalized ads, restricting data sharing, and making your account private if you prefer not to be tracked across the web.
Third, monitor settlement notifications and class action registries to stay informed about any claims or settlements that may apply to your account. Unlike product liability or employment cases, data privacy class actions typically do not require proof of injury—you may be eligible simply for being an X account holder during a certain time period. However, the process of actually receiving compensation requires you to file a claim during the settlement window, which is usually a matter of months. Missing the deadline means you forfeit any compensation, even if the settlement is ultimately approved. Comparison: other product liability settlements sometimes extend the claims period to two years or more, but data privacy settlements tend to have tighter windows, making early notification crucial.
Challenges and Limitations in Data Privacy Claims
One significant challenge in data privacy litigation is proving harm. Traditional privacy laws focus on breaches—the theft or loss of personal information—where financial harm is concrete (fraudsters use your credit card, you get identity theft). Data sharing claims, by contrast, allege that companies are using your information without proper consent or disclosure, but proving that this specific use caused you measurable damage is harder. As a result, many data privacy settlements are structured as “cy pres” awards—meaning that if most class members do not file claims, the unclaimed money goes to charities or causes rather than back to users.
This raises questions about whether settlements truly compensate the injured parties or primarily serve to settle the lawsuit. Another limitation is that settlements typically do not prevent the company from continuing similar practices in the future. A settlement might require X to improve its privacy disclosures or offer an opt-out mechanism, but it generally does not ban the company from collecting and sharing data altogether. Users who receive settlement payments are often still X users, and the company will continue to collect their data under the new, slightly more transparent terms. Some consumer advocates have criticized this outcome as insufficient, arguing that data is not like a defective product—it cannot be “repaired” by a settlement, only better managed going forward.
The Role of Attorney’s Fees and Settlement Structure
When a data privacy class action settles, the plaintiff’s lawyers typically seek attorney’s fees from the settlement fund—often 20% to 33% of the total award. This means that if a $50 million settlement is reached, $10 to $16 million goes to the lawyers, and the remainder is divided among class members, claims administration costs, and any cy pres awards. Some critics argue this creates a misalignment of incentives: lawyers are motivated to reach a quick settlement that justifies high fees, while class members might prefer to fight for stronger privacy protections even if individual payouts are smaller.
Settlement structures also vary in how they calculate individual awards. Some settlements divide the fund equally among all class members who file claims. Others give larger payouts to users who provided detailed claims or evidence of specific harm. A third approach uses a “claims-made” structure, where each filer receives a pro-rata share of whatever money remains after fees and administration, meaning payouts can fluctuate dramatically depending on how many people actually submit claims.
What To Do if You Receive Settlement Notice
If you receive a settlement notice or claim form related to X’s data practices, do not discard it immediately. Read the notice carefully to understand the settlement’s scope—which users are covered, what time period the claim covers, what compensation is available, and what the deadline is to file a claim. Class action notices are required to include contact information for the settlement administrator, where you can verify the claim’s legitimacy and check your eligibility. Scammers sometimes exploit class action settlements by impersonating settlement administrators, so verify any notice through official channels.
Filing a claim is usually free and requires only basic information: your X account details, the email associated with your account, and proof of your eligibility (such as account creation date or screenshots showing your account existed during the claim period). The settlement administrator will then verify your claim and process your payment, typically by check or direct deposit. If you believe you are eligible but did not receive notice, you can often file a late claim by contacting the settlement administrator directly and providing evidence that you owned an X account during the relevant period. However, do not rely on delays—most settlement deadlines are firm, and missing them means forfeiting your share entirely.
Frequently Asked Questions
Does X sell my tweets and posts to other companies?
X collects data from your account and shares it with advertisers, researchers, and data partners. Historical tweets can be licensed to AI training companies and data aggregators, often without prominent user notification.
What is my right to have X delete my data?
You can request data deletion through your privacy settings or under state privacy laws like the CCPA, but X may take weeks to process the request, and deletion may be incomplete across all systems and third parties.
How much money have class action settlements awarded to X users?
Settlement amounts vary by case and time period. Individual payouts typically range from $25 to $100 per account holder, though specific figures depend on the settlement size and number of claims filed.
What should I do if I receive a settlement claim notice?
Read the notice carefully, verify it through the settlement administrator’s official contact information, file your claim before the deadline, and provide proof of your eligible account status.
Can I opt out of X’s data sharing now?
X allows users to adjust privacy settings and disable personalized advertising, which can limit data collection, but the platform continues to collect and use data for its own purposes even with these restrictions enabled.
Is it too late to file a claim if I missed the deadline?
Claim deadlines are generally firm, but settlement administrators sometimes accept late claims if you provide evidence of eligible account status. Contact the administrator directly rather than assuming you are ineligible.
You Might Also Like
- Google Location Tracking Privacy and Consumer Rights Claims Explained for Google Account Holders
- TikTok Children Data Privacy and Consumer Rights Claims Explained for Parents and Young Users
- Snapchat Youth Data Privacy and Consumer Rights Claims Explained for Snapchat Users