The Federal Trade Commission (FTC) has reached a settlement with software provider Avast, requiring the company to pay $16.5 million and prohibiting it from selling or licensing web browsing data for advertising purposes. This settlement addresses allegations that Avast and its subsidiaries sold such data to third parties despite promising consumers that their products would protect them from online tracking.

The FTC's complaint asserts that Avast Limited, based in the UK, through its Czech subsidiary, unfairly collected and sold consumers' browsing information without adequate notice or consent. Avast deceived users by claiming their software would protect privacy while failing to disclose the sale of detailed browsing data to over 100 third parties through its subsidiary, Jumpshot.

FTC Director Samuel Levine emphasized Avast's breach of consumer trust, stating that the company's actions compromised privacy and violated the law.

Since 2014, Avast has collected browsing data through browser extensions and antivirus software installed on consumers' devices. This data included sensitive information such as religious beliefs, health concerns, and political leanings.

The settlement includes provisions prohibiting Avast from selling browsing data for advertising, requiring affirmative consent from consumers before selling non-Avast product data, and mandating the deletion of data transferred to Jumpshot. Avast must also notify affected consumers and implement a comprehensive privacy program.

The FTC's proposed order, subject to public comment, aims to prevent future violations and ensure consumer protection. The FTC's administrative complaint alleges violations of consumer protection laws and underscores the agency's commitment to safeguarding consumer privacy.

The FTC's lead staff attorneys on this matter are Cathlin Tully and Andy Hasty from the Bureau of Consumer Protection.