For decades, personal data has been treated as a highly lucrative commodity. Our personal information is constantly being tracked, packaged, and monetized, often without our explicit consent. Holding data aggregators accountable, while a more recent phenomenon, has become a central focus for privacy advocates and consumers alike.

In July 2026, Spokeo, a prominent online people-search website, agreed to a $10 million preliminary settlement to resolve a massive, multi-state class action lawsuit. The settlement puts an end to over five years of complex litigation centered around the unauthorized commercial use of everyday people's personal information. For individuals who are increasingly concerned about how their names, addresses, and backgrounds are leveraged for corporate profit, this resolution marks a major legal victory and a step toward establishing stronger digital boundaries.

The Lawsuit: The Controversy Over "Teaser Profiles"

Unlike most cases involving individuals' personal data, the core of the dispute in this case did not involve a malicious cyberattack, a database leak, or a traditional data breach exposing sensitive financial records to hackers. Instead, the plaintiffs took direct aim at Spokeo’s aggressive marketing practices and business model. As a massive data aggregator, Spokeo collects, compiles, and cross-references vast amounts of publicly available information—including names, current and past addresses, phone numbers, and email addresses—into easily searchable public profiles.

The plaintiffs in the lawsuit alleged that Spokeo utilized their personal information to generate what they called "teaser profiles". According to court filings, Spokeo actively displayed these teaser profiles, which prominently featured real names and home addresses, to casual site visitors as a targeted marketing tactic. The ultimate goal was to entice these visitors into purchasing paid premium subscriptions to the Spokeo database. The plaintiffs fundamentally argued that by weaponizing their personal identities and data to promote a commercial service without their knowledge or consent, Spokeo had crossed a critical legal and ethical line, causing harm stemming from a distinct loss of control over their personal information.

Right of Publicity: A Unique Legal Approach

Rather than relying on standard consumer protection or data breach statutes, the plaintiffs leveraged a unique and highly effective legal framework: state right of publicity laws. These specific statutes generally prohibit corporations and individuals from utilizing an individual's name, likeness, or identity for advertising or commercial gain without obtaining prior authorization.

The original lawsuit was filed in November 2021 by three plaintiffs asserting claims under California, Ohio, and Indiana law. Spokeo aggressively fought the claims, initially moving to dismiss the case by arguing that the plaintiffs lacked legal standing. However, the court denied the motion to dismiss in April 2022, paving the way for extensive written discovery, document production, depositions, and expert analysis. In 2024, Judge William H. Orrick certified a class of Californians and a class of Ohioans—totaling roughly 275,000 individuals—allowing the case to move forward. Ultimately, the proposed settlement grew to encompass, and resolve right of publicity claims across, nine states: Alabama, California, Illinois, Indiana, Louisiana, Nevada, Ohio, South Dakota, and Washington.

Breaking Down the $10 Million Settlement

Under the terms of the proposed agreement, Spokeo will be required to establish nine state-specific settlement funds that cumulatively amount to $10 million. Crucially, the settlement designates these funds as entirely non-reversionary, which means that any unclaimed money left over after the initial claims period will not simply be returned to Spokeo's pockets. Instead, any remaining funds will be systematically redistributed to claiming class members where practicable, or otherwise handled according to the specific directives of the court.

How much will individual class members actually receive? The exact payouts will inherently depend on the total number of valid claims filed in each respective state, as well as necessary deductions for attorneys' fees, administrative costs, and court-approved incentive awards. However, assuming an estimated 10% claims rate, legal filings suggest that individual recoveries could range anywhere from tens of dollars to well over $1,000, depending heavily on the state jurisdiction.

Beyond the financial compensation, the settlement also demands meaningful injunctive relief designed to fundamentally alter Spokeo's business practices. Moving forward, Spokeo has formally agreed to modify its search algorithms and user interfaces. When a user conducts a name search, Spokeo must now alter its purchase and payment pages so that the full names and home addresses of individuals in the affected injunction classes will no longer be visible during that critical portion of the transaction.

The Broader Implications for the Information Economy

This landmark $10 million settlement sends a powerful, industry-wide message to data brokers, aggregators, and tech companies alike. The core takeaway is clear: simply aggregating publicly available data does not give a corporation carte blanche to use everyday people's identities as free advertising material. As noted by Morgan & Morgan attorneys representing the plaintiffs following the resolution, "Companies navigating today's information economy routinely put their profits ahead of individuals' rights, and this case is no different. We are pleased that this resolution holds Spokeo accountable for its alleged invasions of people's rights to their information".

For average consumers, this multi-million dollar settlement underscores the critical importance of staying informed and vigilant about thwir digital rights. As the complex legal landscape surrounding data privacy and the right of publicity continues to rapidly evolve, holding powerful data aggregators to strict legal standards will remain absolutely essential in preventing the unauthorized monetization of people's personal lives and identifying information.