Lyft Settles California Privacy Lawsuit for $1.8 Million
Ride-hailing company Lyft has agreed to a $1.8 million settlement with the California Attorney General’s office to resolve allegations that it violated state privacy and unfair competition laws. Attorney General Rob Bonta announced the agreement, which addresses concerns that the company made it unnecessarily difficult for users to opt out of the sale or sharing of their personal information.
The investigation, which grew out of a March 2025 sweep examining geolocation data practices, found that Lyft began sharing or selling consumer data in 2023 for targeted advertising purposes. According to the Attorney General’s office, the company’s opt-out process was overly burdensome. Users were forced to navigate through multiple links within the privacy policy to reach a specific webpage, and were then required to re-authenticate their accounts and provide additional personal details to complete the request. Officials determined these obstacles violated the California Consumer Privacy Act (CCPA) and state unfair competition regulations.
As part of the settlement, Lyft must now implement a direct in-app opt-out mechanism. The company is also required to provide clear notifications to California users regarding their rights to prevent the sale or sharing of their personal data. Lyft collects a range of sensitive information from both riders and drivers, including names, contact details, IP addresses, and location data.
Context: This settlement highlights the increasing regulatory scrutiny on how tech platforms monetize user data. For consumers, this is a significant win for data transparency, as it forces companies to simplify privacy controls rather than burying them behind complex user interfaces. Industry observers should watch how other platforms with similar data-harvesting models adjust their compliance strategies to avoid similar legal challenges. Companies operating in California must recognize that 'dark patterns'—design choices that manipulate users into making certain decisions—are now a primary focus for state regulators enforcing the CCPA.
Why it matters
This settlement underscores that regulators are actively penalizing companies that use complex, multi-step digital processes to discourage users from exercising their data privacy rights.
FAQ
Why is Lyft paying $1.8 million?
Lyft is paying the penalty to resolve allegations that it violated California privacy and unfair competition laws by creating barriers for users trying to opt out of data sharing.
What specific data does Lyft collect?
Lyft collects names, email addresses, phone numbers, IP addresses, and location information from its riders and drivers.
What must Lyft do under the new settlement?
Lyft must provide an in-app opt-out option and notify California consumers of their right to prevent the sale of their personal information.
Source: Insurance Journal. See the original source for full details.
Scan with your phone
Scan with your phone