FTC to Ban Data Broker Kochava From Selling Americans’ Location Data

Why It Matters

The ruling curtails a major source of commercial surveillance, reinforcing consumer privacy rights and setting a precedent for stricter oversight of data‑broker practices across the tech ecosystem.

Key Takeaways

• FTC orders Kochava to stop selling location data without consent.
• Violation involved billions of geo‑transactions from 125 M monthly users.
• Companies must implement consent verification and data‑retention programs.
• Prior FTC bans include InMarket Media, Outlogic, Gravy Analytics, Mobilewalla.
• Kochava announced “Privacy Block” to shield health‑service locations.

Pulse Analysis

The FTC’s crackdown on Kochava reflects a broader shift toward policing mass commercial surveillance. Over the past four years, the agency has targeted data brokers that monetize granular location signals, arguing that such practices erode privacy and can enable stalking or discrimination. By leveraging the agency’s authority under Section 5 of the FTC Act, regulators are moving beyond voluntary compliance, demanding concrete safeguards and transparent consent mechanisms.

Kochava’s case is notable for its scale: the firm claimed access to more than 94 billion geo‑transactions each month, covering roughly 125 million monthly active users and 35 million daily users. The $25,000 subscription model gave clients a near‑real‑time view of device movements, including visits to mental‑health facilities, reproductive clinics, and shelters. The proposed order not only bans sales without affirmative consent but also obliges the company to launch a sensitive‑location data program, verify supplier consent, and allow consumers to see and withdraw data sharing. Failure to comply could trigger substantial penalties and further legal challenges.

For businesses that rely on location intelligence, the decision signals a need to reassess data‑acquisition strategies. Companies must prioritize privacy‑by‑design, obtain clear opt‑ins, and maintain auditable consent records. As the FTC continues to explore rulemaking on mass surveillance, firms that proactively adopt robust privacy frameworks will mitigate regulatory risk and preserve consumer trust in an increasingly data‑sensitive market.