FTC Takes Action Against Companies Selling Sensitive Location Data

The FTC is issuing orders limiting how companies can collect and sell consumers' location data. Two companies — Mobilewalla and Gravy Analytics Inc. (and its subsidiary Venntel) — have been found in violation of the law. Both companies gained access to consumers' location data via apps and/or ads on their mobile devices. They then correlated that data with sensitive locations such as churches, medical facilities, and even political protests. The companies also failed to obtain or verify that consumers had consented to this tracking. As part of its order, the FTC is requiring these companies to cease this practice and improve their privacy policies in a number of ways. Both companies will be required to a develop and operate a "sensitive location data program" with a comprehensive list of sensitive locations that are excluded from all products involving location data. These locations are to include: health/medical facilities, religious organizations, correctional facilities, labor union offices, military installations, and more. The companies will also be required to develop ways for consumers to opt out of these kinds of programs and request that historic data be deleted.