Oracle reaches $115 million consumer privacy settlement

By Jonathan Stempel

(Reuters) – Oracle (NYSE:) agreed to pay $115 million to settle a lawsuit accusing the database software and cloud computing company of invading people’s privacy by collecting their personal information and selling it to third parties.

A preliminary settlement of the proposed class action was filed on Thursday night in San Francisco federal court, and requires a judge’s approval. Oracle denied wrongdoing.

The plaintiffs, who otherwise have no connection to Oracle, said the company violated federal and state privacy laws and California’s constitution by creating unauthorized “digital dossiers” for hundreds of millions of people.

They said the dossiers contained data including where people browsed online, and where they did their banking, bought gas, dined out, shopped and used their credit cards.

Oracle then allegedly sold the information directly to marketers or through products such as ID Graph, which according to the company helps marketers “orchestrate a relevant, personalized experience for each individual.”

The settlement covers people whose personal information Oracle collected or sold since Aug. 19, 2018.

As part of the settlement, the Austin, Texas-based company agreed to not to gather user-generated information from URLs of previously visited websites, or text that users enter in online forms other than on Oracle’s own websites.

Oracle did not immediately respond on Friday to requests for comment.

The named plaintiffs include privacy rights activist Michael Katz-Lacabe and Jennifer Golbeck, a University of Maryland professor specializing in social media and privacy.

Lieff Cabraser Heimann & Bernstein, which represents the plaintiffs, may seek up to $28.75 million from the settlement for legal fees.

The case is Katz-Lacabe et al v. Oracle America Inc, U.S. District Court, Northern District of California, No. 22-04792.