---
title: "Data, Trust, and Accountability: Business Lessons from the Avast Settlement"
description: The FTC case against Avast highlights that companies should treat privacy concerns as operational obligations, not aspirational statements.
image: https://liprestilaw.com/hubfs/Broken%20Protection%20Promises.png
---

[Skip to content](https://liprestilaw.com/the-firm-connection/data-trust-and-accountability-business-lessons-from-the-avast-settlement#main-content)

[![Lipresti Law](https://liprestilaw.com/hs-fs/hubfs/logo-3.png?width=207&height=50&name=logo-3.png)](https://liprestilaw.com/)

- [Home](https://liprestilaw.com/)
- [Attorneys](https://liprestilaw.com/meet-our-team)
- [Careers](https://liprestilaw.com/employment)
- Practice Areas
  
  Show submenu for Practice Areas 
  
    - [Banking/Financing](https://liprestilaw.com/banking-financing)
    - [Bankruptcy](https://liprestilaw.com/bankruptcy)
    - [Capital Markets / Securities](https://liprestilaw.com/capital-markets-securities)
    - [Commercial Real Estate](https://liprestilaw.com/commercial-real-estate)
    - [Corporate/Outside General Counsel Services](https://liprestilaw.com/corporate-outside-general-counsel-services)
    - [Healthcare](https://liprestilaw.com/healthcare)
    - [Intellectual Property](https://liprestilaw.com/intellectual-property)
    - [Mergers & Acquisitions](https://liprestilaw.com/mergers-acquisitions)
    - [Nonprofits](https://liprestilaw.com/nonprofits)
    - [Technology Law](https://liprestilaw.com/technology-law)
- [Blog](https://liprestilaw.com/the-firm-connection)
- [Contact](https://liprestilaw.com/contact)
  
  Show submenu for Contact 
  
    - [Careers](https://liprestilaw.com/employment)

Open main navigation

Close main navigation

- [Home](https://liprestilaw.com/)
- [Attorneys](https://liprestilaw.com/meet-our-team)
- [Careers](https://liprestilaw.com/employment)
- Practice Areas
  
  Show submenu for Practice Areas 
  
    - [Banking/Financing](https://liprestilaw.com/banking-financing)
    - [Bankruptcy](https://liprestilaw.com/bankruptcy)
    - [Capital Markets / Securities](https://liprestilaw.com/capital-markets-securities)
    - [Commercial Real Estate](https://liprestilaw.com/commercial-real-estate)
    - [Corporate/Outside General Counsel Services](https://liprestilaw.com/corporate-outside-general-counsel-services)
    - [Healthcare](https://liprestilaw.com/healthcare)
    - [Intellectual Property](https://liprestilaw.com/intellectual-property)
    - [Mergers & Acquisitions](https://liprestilaw.com/mergers-acquisitions)
    - [Nonprofits](https://liprestilaw.com/nonprofits)
    - [Technology Law](https://liprestilaw.com/technology-law)
- [Blog](https://liprestilaw.com/the-firm-connection)
- [Contact](https://liprestilaw.com/contact)
  
  Show submenu for Contact 
  
    - [Careers](https://liprestilaw.com/employment)

 December 18, 2025

# Data, Trust, and Accountability: Business Lessons from the Avast Settlement

![Picture of Nicholas Lipresti, Esq.](https://liprestilaw.com/hs-fs/hubfs/nick-lipresti-02.jpg?width=50&name=nick-lipresti-02.jpg) [Nicholas Lipresti, Esq.](https://liprestilaw.com/the-firm-connection/author/nicholas-lipresti-esq)

Share: [facebook-f icon](http://www.facebook.com/share.php?u=https://liprestilaw.com/the-firm-connection/data-trust-and-accountability-business-lessons-from-the-avast-settlement) [linkedin-in icon](http://www.linkedin.com/shareArticle?mini=true&url=https://liprestilaw.com/the-firm-connection/data-trust-and-accountability-business-lessons-from-the-avast-settlement) [Twitter icon](https://twitter.com/intent/tweet?url=https://liprestilaw.com/the-firm-connection/data-trust-and-accountability-business-lessons-from-the-avast-settlement) [pinterest-p icon](http://pinterest.com/pin/create/link/?url=https://liprestilaw.com/the-firm-connection/data-trust-and-accountability-business-lessons-from-the-avast-settlement) [envelope icon](mailto:?body=https://liprestilaw.com/the-firm-connection/data-trust-and-accountability-business-lessons-from-the-avast-settlement)

Companies across industries increasingly gather customer data online for a wide range of operational and marketing needs. This often comes with strong assurances about privacy and security to make consumers feel more comfortable in revealing detailed info about themselves. However, those assurances carry real legal and reputational weight. The Federal Trade Commission’s (FTC) recent action against Avast, a widely used provider of consumer antivirus tools and browser-security extensions, illustrates how seriously regulators now treat gaps between what companies promise and what they actually do. Understanding how and why this case unfolded can help businesses and consumers better navigate evolving expectations around data handling and transparency.

Avast built its reputation on helping users protect their devices from malware and online threats. For many households and small businesses, Avast’s free and paid software has become synonymous with basic digital security. But Avast’s privacy practices did not match its public image.

The FTC has begun distributing approximately $15.3 million in refunds to consumers after concluding that Avast misled users about how their user browsing data was collected, stored, and monetized. The payments mark a significant chapter in a broader enforcement action aimed at ensuring greater transparency in the digital-security marketplace.

### **The FTC’s Allegations: Promises of Privacy, but Hidden Data Sales**

In a complaint filed in February 2024, the FTC alleged that Avast promoted its antivirus software and browser extensions as tools designed to block online tracking and safeguard user privacy. At the same time, the FTC claimed that Avast was quietly gathering extensive browsing information from millions of users and then selling or licensing that data to third parties—conduct that was not clearly disclosed and was done without the level of user consent required under federal law.

Further compounding the issues, the browsing data sold by Avast was sufficiently detailed to be re-identified, raising concerns about consumer anonymity and data security. These practices, the FTC concluded, were at odds with the privacy promises Avast made in its marketing materials.

Under a June 2024 settlement, Avast agreed to halt the sale or licensing of browsing data for advertising purposes and to provide financial redress to affected consumers.

### **How Refunds Are Being Distributed**

Refunds are being provided to 103,152 consumers who filed valid claims.

The FTC appointed Rust Consulting, Inc. to administer the refunds. Consumers with questions may contact Rust Consulting at 1-866-290-0165 or review the frequently asked questions on the FTC’s website.

### **Key Lessons for Businesses**

The Avast case serves as a notable warning for companies that handle consumer data—particularly those that brand themselves as privacy-protective. Several takeaways emerge:

- **Transparency must match marketing claims.**  
  Businesses should ensure that their privacy promises reflect actual data-handling practices and can be substantiated if questioned
- **Consent must be meaningful.**  
  Collecting or sharing browsing data without clear and informed user consent invites regulatory scrutiny and undermine customer trust.
- **Data monetization demands careful oversight.**  
  Companies should evaluate whether revenue models involving user data are compatible with their privacy commitments.

- **Technological creep requires a constant and realistic assessment of privacy practices.**  
  Even anonymized or de-identified data can be targeted and potentially re-identified, creating legal and reputational risk due to technology’s ability to correlate and associate seemingly innocuous user information and data.
- **Privacy compliance is becoming a competitive necessity.**  
  Regulators, consumers, and business clients increasingly expect companies to meet heightened privacy standards and demonstrate that compliance in their operations and documentation

As regulators continue to scrutinize data practices across industries, companies should treat privacy concerns as operational obligations, not aspirational statements. This includes regularly evaluating how data is collected, managed, and shared, along with ensuring that those practices match what is communicated externally. That will go a long way to avoid the kinds of legal exposure and reputational harm highlighted by this case.

[technology](https://liprestilaw.com/the-firm-connection/tag/technology), [Federal Trade Commission](https://liprestilaw.com/the-firm-connection/tag/federal-trade-commission), [Privacy](https://liprestilaw.com/the-firm-connection/tag/privacy)

## Related posts

[![corporate transparency act](https://liprestilaw.com/hs-fs/hubfs/CTA.png?height=200&name=CTA.png)](https://liprestilaw.com/the-firm-connection/coming-january-1-2024-the-corporate-transparency-act-goes-into-effect)

[corporate reporting](https://liprestilaw.com/the-firm-connection/tag/corporate-reporting), [Corporate Transparency Act](https://liprestilaw.com/the-firm-connection/tag/corporate-transparency-act)

## [Coming January 1, 2024: The Corporate Transparency Act Goes into Effect](https://liprestilaw.com/the-firm-connection/coming-january-1-2024-the-corporate-transparency-act-goes-into-effect)

![Picture of Michael Hackett, Esq.](https://liprestilaw.com/hs-fs/hubfs/Imported%20sitepage%20images/michael-hackett-02.jpg?width=50&name=michael-hackett-02.jpg) [Michael Hackett, Esq.](https://liprestilaw.com/the-firm-connection/author/michael-hackett-esq) 

 December 28, 2023

The new year brings a paradigm shift in corporate transparency with new regulations to curb illegal...

[Read more](https://liprestilaw.com/the-firm-connection/coming-january-1-2024-the-corporate-transparency-act-goes-into-effect)

[![data storage ](https://liprestilaw.com/hs-fs/hubfs/delete%20data.png?height=200&name=delete%20data.png)](https://liprestilaw.com/the-firm-connection/calling-on-fincen-to-delete-sensitive-cta-information-gathered-from-exempt-us-companies)

## [Calling on FinCEN to Delete Sensitive CTA Information Gathered from Exempt US Companies](https://liprestilaw.com/the-firm-connection/calling-on-fincen-to-delete-sensitive-cta-information-gathered-from-exempt-us-companies)

![Picture of Nicholas Lipresti, Esq.](https://liprestilaw.com/hs-fs/hubfs/nick-lipresti-02.jpg?width=50&name=nick-lipresti-02.jpg) [Nicholas Lipresti, Esq.](https://liprestilaw.com/the-firm-connection/author/nicholas-lipresti-esq) 

 June 12, 2025

The dust seems to be settling on the Corporate Transparency Act (CTA). But there’s still some...

[Read more](https://liprestilaw.com/the-firm-connection/calling-on-fincen-to-delete-sensitive-cta-information-gathered-from-exempt-us-companies)

[![Corporate Transparency Act Rules Suspended](https://liprestilaw.com/hs-fs/hubfs/corporate%20transparency.png?height=200&name=corporate%20transparency.png)](https://liprestilaw.com/the-firm-connection/nationwide-injunction-against-corporate-transparency-act-enforcement-halts-reporting-requirements)

[Corporate Transparency Act](https://liprestilaw.com/the-firm-connection/tag/corporate-transparency-act)

## [Nationwide Injunction Against Corporate Transparency Act Enforcement Halts Reporting Requirements](https://liprestilaw.com/the-firm-connection/nationwide-injunction-against-corporate-transparency-act-enforcement-halts-reporting-requirements)

![Picture of Nicholas Lipresti, Esq.](https://liprestilaw.com/hs-fs/hubfs/nick-lipresti-02.jpg?width=50&name=nick-lipresti-02.jpg) [Nicholas Lipresti, Esq.](https://liprestilaw.com/the-firm-connection/author/nicholas-lipresti-esq) 

 December 4, 2024

In Texas Top Cop Shop, Inc. v. Garland, the U.S. District Court for the Eastern District of Texas...

[Read more](https://liprestilaw.com/the-firm-connection/nationwide-injunction-against-corporate-transparency-act-enforcement-halts-reporting-requirements)

linkedin-in icon

---

[![Lipresti Law](https://liprestilaw.com/hs-fs/hubfs/logo-3.png?width=207&height=50&name=logo-3.png "Lipresti Law")](https://liprestilaw.com/)

Copyright © 2023

linkedin-in icon

```json
{
  "@context" : "https://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "Nicholas Lipresti, Esq.",
    "url" : "https://liprestilaw.com/the-firm-connection/author/nicholas-lipresti-esq"
  },
  "dateModified" : "2025-12-18T15:49:37.836Z",
  "datePublished" : "2025-12-18T15:49:37.000Z",
  "headline" : "Data, Trust, and Accountability: Business Lessons from the Avast Settlement",
  "image" : [ "https://liprestilaw.com/hubfs/Broken%20Protection%20Promises.png" ],
  "mainEntityOfPage" : {
    "@id" : "https://liprestilaw.com/the-firm-connection/data-trust-and-accountability-business-lessons-from-the-avast-settlement",
    "@type" : "WebPage"
  },
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject",
      "url" : "https://liprestilaw.com/hubfs/logo-3.png"
    }
  }
}
```