In a blow to Google, a federal appellate court has revived a lawsuit accusing the company of violating Safari users' privacy by circumventing their no-tracking settings.
"A reasonable jury
could conclude that Google’s alleged practices constitute the serious invasion of privacy contemplated by California law," a panel of the 3rd Circuit Court of Appeals wrote in an opinion issued
last week.
The decision restores a complaint filed against Google in May of 2012, several months after Stanford researcher Jonathan Mayer published a report stating that Google -- along with
WPP's Media Innovation Group, PointRoll and Vibrant Media -- circumvented Safari's privacy settings and then set tracking cookies. After allegedly doing so, all the companies were able to serve ads to
Web users based on their Internet activity. None of the companies were accused of linking cookie-based data to users' names or other personally identifiable information.
Google, Vibrant Media
and PointRoll confirmed Mayer's report when it came out, and said they had stopped tracking Safari users or would soon do so. Google agreed to pay $22.5 million to settle Federal Trade Commission
charges stemming from the workaround.
PointRoll settled the allegations, but the other companies fought the case. U.S. District Court Judge Sue Robinson in Delaware dismissed the lawsuit in
2013 on the grounds that the consumers had not shown they suffered any tangible harm.
The 3rd Circuit only revived the lawsuit against Google, and not Vibrant Media or WPP's Media Innovation
Group.
"What is notable about this case is how Google accomplished its tracking," the appellate judges wrote. "Allegedly, this was by overriding the plaintiffs’ cookie blockers, while
concurrently announcing in its Privacy Policy that internet users could 'reset your browser to refuse all cookies."
The appellate panel said the consumers could only go forward on the theory
that Google violated general privacy principles set out in California's constitution, or that have been developed by judges in California. But the 3rd Circuit decided against reviving claims that
Google and the other companies ran afoul of specific federal and state laws, including the federal wiretap law and California's invasion of privacy statute.