Judge approves Google RTB settlement forcing new user privacy control

A federal decide this week granted remaining approval to a class-action settlement requiring Google to introduce a brand new person management that limits the private information the corporate shares throughoutreal-time bidding (RTB) auctions – a case that has wound by the courts for almost 5 years and that carries direct penalties for a way programmatic promoting features at scale.

United States District Courtroom Decide Yvonne Gonzalez Rogers, sitting within the Northern District of California, signed the order right this moment, March 26, 2026, within the case styled In re Google RTB Shopper Privateness Litigation, Case No. 4:21-cv-02155-YGR. The settlement is for injunctive reduction solely: no class member aside from the named plaintiffs receives financial compensation. What they do obtain is a mechanism, described in courtroom paperwork because the “RTB Management,” that provides them the flexibility to restrict what Google broadcasts about them to the tons of of firms collaborating in its promoting auctions.

The ruling closes a lawsuit that started on March 26, 2021, when a grievance was first filed in Hewitt v. Google LLC. Instances have been consolidated into the current litigation in June 2021. Google’s movement to dismiss was largely denied in June 2022. Plaintiffs sought class certification in July 2023, a movement the courtroom denied with out prejudice. The events then reached a settlement forward of the renewed certification deadline of September 2, 2025.

What the RTB Management really does

Based on the Settlement Settlement filed with the courtroom, Google will present all Settlement Class Members with the flexibility to restrict the data it gives to 3rd events about them within the Google RTB system. The management shall be obtainable at each the account stage and the browser stage.

When activated, the RTB Management strips RTB bid requests of figuring out information. Coverage from September 2025 detailed the technical implications: the management removes encrypted Google Consumer IDs, gadget promoting IDs, IP addresses, and cookie-matching information from bid requests, and generalizes user-agent strings to the main model stage. In impact, it converts a focused impression into one thing a lot nearer to contextual stock – details about the web page, however not in regards to the particular person viewing it.

Google’s RTB system, in accordance with knowledgeable testimony cited within the litigation, reaches roughly 1.3 million publishers and processes billions of auctions each day. The scope of data shared in each bid request has been documented extensively: Google Consumer IDs, IP addresses, cookie-matching providers, user-agent info, writer IDs, web page URLs, distinctive gadget identifiers, and “vertical” curiosity segments protecting well being situations, faith, ethnicity, and sexual orientation. Based on courtroom paperwork, Google categorizes customers into greater than 5,000 shopper segments and subcategories.

Alongside the RTB Management itself, the settlement requires Google to create a devoted webpage describing the management, with applicable hyperlinks to different related Google pages, and to ship an e-mail to all at the moment lively particular person Google U.S. account holders advising them of the brand new choices. Based on the courtroom order, all three components – the RTB Management, the devoted webpage, and the e-mail – should be reside inside 30 days of right this moment’s remaining approval.

Who’s within the class

The Settlement Settlement defines the category as all particular person Google account holders topic to U.S. Phrases of Service who’ve an lively Google account on the efficient date, the place “lively” means the account has been used throughout the two years previous that date. Based on the order, though Google was unable to substantiate the precise dimension of the category as a result of it can not decide which accounts correspond to distinctive people, plaintiffs’ knowledgeable estimates the category at a minimal of 169 million folks and doubtlessly greater than 200 million distinctive people.

The courtroom discovered the settlement class satisfies the necessities of Rule 23, particularly Rule 23(b)(2), which governs injunctive reduction lessons. Numerosity, commonality, typicality, and adequacy of illustration have been every addressed. On typicality, the courtroom famous that class representatives are, like all putative class members, topic to Google’s Phrases of Service, Privateness Coverage, and standardized disclosures. On commonality, the courtroom discovered that “Google’s RTB is common.”

As a result of this can be a Rule 23(b)(2) class looking for solely injunctive reduction, class members had no proper to choose out and formal class discover was not required.

The discharge: what class members surrender

One element that issues significantly for anybody contemplating future litigation: the settlement’s launch is slender by design. Based on the Settlement Settlement, class members launch solely claims for injunctive, declaratory, or different equitable non-monetary reduction. Claims for financial damages – together with statutory penalties, unjust enrichment, disgorgement, punitive damages, and restitution – are explicitly preserved for all class members besides the seven named class representatives.

The named plaintiffs are Christopher Valencia, John Kevranian, Terry Diggs, Kimberley Woodruff, Rethena Inexperienced, Salvatore Toronto, and Tara Williams. Every receives a $15,000 incentive award, accepted by the courtroom. The courtroom famous they got here ahead to characterize the pursuits of tens of millions of others with little or no personally to realize, and risked a judgment for attorneys’ charges and prices.

Attorneys’ charges: a major discount

The price dispute is the place the courtroom’s skepticism turns into most obvious. Class counsel sought $128,358,352 in attorneys’ charges – roughly 3.5 instances the proposed lodestar of $36,673,815 – plus $3,488,792.96 in prices. Plaintiffs justified the price request utilizing the percentage-of-fund technique, counting on their knowledgeable Professor Robert Zeithammer’s valuation of the settlement at a minimal of $1.4 billion, derived by multiplying a calculated $36 annual profit per account holder by the variety of account holders anticipated to activate the RTB Management, assuming an opt-in charge of 8.8%.

The courtroom rejected this method as too speculative. On the February 17, 2026 settlement listening to, Decide Gonzalez Rogers proposed as a substitute that class counsel be paid based mostly on the precise variety of customers who make use of the RTB Management. Counsel declined, preferring rapid fee. The courtroom then utilized the lodestar technique.

After reviewing billing data, the courtroom recognized a sequence of errors and inefficiencies. Appeals prices of $163,300 associated to a misplaced interlocutory attraction have been excluded solely. Discovery movement hours have been trimmed sharply – plaintiffs introduced and misplaced seven appeals of the Justice of the Peace Decide’s discovery rulings, producing charges the courtroom characterised as pointless. Doc evaluate hours have been diminished to mirror normal evaluate speeds of fifty 10-page paperwork per hour, in opposition to the 8.7 paperwork per hour billed at a full affiliate charge of $325. Billing associated to Lead Counsel conferences was minimize by half as a result of violations of a courtroom order prohibiting block billing and time spent on price preparation.

These changes produced a revised lodestar of 36,242.15 hours, or $28,570,247.34. The courtroom then utilized a discretionary discount of roughly 10%, bringing the determine to $25,713,222.61. Given what it described as solely restricted or partial success – plaintiffs initially sought classwide damages exceeding $1 billion and have been denied certification for a damages class – the courtroom utilized a 0.85 multiplier. Based on the order, “the Courtroom finds that the settlement is sufficient, however certainly not glorious.” The ultimate attorneys’ price award is $21,856,239.22. Litigation prices of $3,488,792.96 have been accepted in full.

Plaintiffs had described the settlement as “an historic victory for tons of of tens of millions of People” that may “basically alter Google’s enterprise practices.” The courtroom, reviewing press protection, discovered the characterization considerably overheated. The order particularly notes that a lot of the impartial protection “questions the diploma to which this injunctive reduction will influence Google, on condition that the RTB management is an opt-in.”

That remark echoes evaluation revealed by AdExchanger in November 2025, which famous that opt-out controls – that means controls that customers should actively select to allow – hardly ever drive widespread adoption. Historical past has persistently proven that default settings dominate person conduct, and the RTB Management is not any exception: customers should affirmatively flip it on. Because of this, many business observers anticipate the sensible impact on Google’s public sale quantity to be restricted, a minimum of initially.

The courtroom additionally famous that the disclosures Google will publish characterize what plaintiffs themselves described as “the primary consumer-facing disclosures that Google has ever made about its advert public sale practices.” That framing suggests the informational part of the settlement could show as vital in the long term because the management itself.

Context: a dense panorama of RTB litigation

This settlement doesn’t exist in isolation. In January 2025, the Digital Privateness Info Heart and the Irish Council for Civil Liberties filed the first-ever grievance beneath the Defending People’ Knowledge from Overseas Adversaries Act with the Federal Commerce Fee, alleging that Google’s RTB system – which broadcasts information roughly 31 billion instances per day – shares People’ delicate behavioral info with entities topic to Chinese language authorities jurisdiction.

That concern intensified additional. In February 2026, a separate class motion – McGrath v. Google LLC, Case No. 3:26-cv-01446 – was filed in the identical Northern District of California, alleging that Google’s RTB infrastructure transmitted People’ shopping information to Pangle (ByteDance), MediaGo (Baidu USA), and Temu (Whaleco Companies), in violation of the Bulk Delicate Knowledge Rule, the Digital Communications Privateness Act, and California wiretapping statutes.

In the meantime, Texas finalized a $1.375 billion settlement with Google on October 31, 2025, protecting location monitoring, incognito monitoring, and biometric information assortment. And a federal jury in San Francisco delivered a $425.7 million verdict against Google on September 3, 2025, for persevering with to gather information by Firebase SDK even after customers disabled monitoring.

Every of those circumstances addresses distinct authorized theories and distinct datasets. However collectively they sketch a coherent image: Google’s promoting infrastructure is going through sustained authorized stress throughout a number of jurisdictions, on a number of grounds, concurrently.

What it means for programmatic promoting

For advertising professionals, essentially the most rapid operational query is what occurs to viewers concentrating on when a significant variety of customers activate the RTB Management. The info stripped from bid requests – Google Consumer IDs, IP addresses, gadget IDs, cookie-matching information – are exactly the indicators that allow behavioral concentrating on, frequency capping, attribution, and viewers segmentation in open-web programmatic campaigns.

Publishers, notably impartial ones working show promoting by Google’s ecosystem, face a associated however distinct concern. When customers activate the RTB Management, the data that makes their stock precious to efficiency advertisers disappears from the bid stream. Diminished concentrating on constancy sometimes means diminished clearing costs. Google’s RTB system processes auctions throughout roughly 1.3 million publishers; the distributional results of even modest adoption charges wouldn’t be uniform.

The settlement’s injunctive reduction additionally compels transparency that has not existed earlier than. For the primary time, Google will publish devoted disclosures explaining how RTB auctions work, what information is shared, and with whom. That transparency could itself generate additional regulatory scrutiny – from European information safety authorities, from the UK’s Info Commissioner’s Workplace (which first investigated RTB back in 2019), and from state attorneys common who’ve demonstrated each the urge for food and the capability to pursue privateness enforcement actions in opposition to main platforms.

The courtroom retains jurisdiction for one yr over all issues referring to the interpretation, administration, implementation, and enforcement of the settlement.

Timeline

• March 26, 2021 – Authentic grievance filed in Hewitt v. Google LLC alleging RTB privateness violations
• June 2021 – Instances consolidated beneath In re Google RTB Shopper Privateness Litigation; interim class counsel appointed
• June 2022 – Courtroom largely denies Google’s movement to dismiss, upholding statutory, privateness, and contract claims
• July 14, 2023 – Plaintiffs file movement for sophistication certification for each damages and injunctive reduction lessons
• April 4, 2024 – Courtroom denies class certification with out prejudice; finds injunctive reduction class doubtlessly viable beneath Rule 23(b)(2)
• January 16, 2025 – EPIC and ICCL file first-ever PADFAA complaint with the FTC over Google’s RTB information sharing with international adversaries
• September 2, 2025 – Events attain settlement; class counsel recordsdata movement for remaining approval forward of renewed certification deadline
• September 3, 2025 – Federal jury delivers $425.7 million verdict against Google in separate Firebase SDK privateness case
• September 7, 2025 – PPC Land publishes analysis of the settlement’s implications for publishers and programmatic promoting
• October 31, 2025 – Texas finalizes $1.375 billion settlement with Google for separate privateness violations
• February 17, 2026 – Courtroom holds settlement listening to; price dispute over lodestar and multiplier technique argued
• February 19, 2026 – McGrath v. Google LLC filed alleging RTB information transfers to Chinese language-affiliated advert companions
• March 26, 2026 – Decide Yvonne Gonzalez Rogers grants remaining approval of settlement; awards $21,856,239.22 in attorneys’ charges and $3,488,792.96 in prices; Google should launch RTB Management inside 30 days

Abstract

Who: Google LLC, as defendant, and a category of at minimal 169 million – and doubtlessly greater than 200 million – lively U.S. Google account holders as plaintiffs, with Decide Yvonne Gonzalez Rogers of america District Courtroom for the Northern District of California presiding.

What: Ultimate approval of a class-action settlement in In re Google RTB Shopper Privateness Litigation (Case No. 4:21-cv-02155-YGR), requiring Google to create a brand new “RTB Management” permitting customers to restrict information shared about them in real-time bidding auctions, to publish devoted disclosures about its RTB practices, and to e-mail all lively U.S. Google account holders in regards to the new management. No financial damages are awarded to class members. Attorneys’ charges have been set at $21,856,239.22 and litigation prices at $3,488,792.96. Every of the seven named class representatives receives $15,000.

When: The unique grievance was filed on March 26, 2021. The settlement was reached on September 2, 2025. The settlement listening to happened on February 17, 2026. Ultimate approval was granted right this moment, March 26, 2026. Google should implement the RTB Management, publish the devoted webpage, and ship the category notification e-mail inside 30 days.

The place: United States District Courtroom, Northern District of California.

Why: The case was introduced over allegations that Google’s RTB system systematically shared detailed private details about tens of tens of millions of customers – together with delicate well being, faith, and id information – with tons of of third-party firms collaborating in its promoting auctions, with out sufficient disclosure or person management. The settlement addresses the disclosure and management deficit with out resolving class members’ potential financial claims, preserving the fitting to hunt damages in future litigation.