Your Location Data Exposed: Supreme Court Rules Against AT&T and Verizon in $100M Privacy Battle
What they're not telling you: The Location Data Exposed: Supreme Court Rules Against AT&T and Verizon in $100M Privacy Battle The Supreme Court has ordered AT&T and Verizon to pay damages for selling customer location data to third parties without explicit consent, marking the first major institutional accountability for telecommunications carriers in the surveillance capitalism infrastructure. The ruling centers on a practice both carriers maintained for years: selling real-time and historical location information derived from cell tower connections to data brokers, aggregators, and commercial entities. AT&T and Verizon collected this data as a byproduct of network operations—every call, text, and data connection generates latitude-longitude coordinates accurate to within 100-300 meters depending on network density.
What the Documents Show
Rather than treating this as customer property or regulated telecommunications information, both carriers licensed access to commercial data firms including LocationSmart, Securus Technologies, and Zumigo. Those firms then sold the data downstream to bail bondsmen, private investigators, bounty hunters, and retail marketers without individual subscriber notification. The court's decision identifies specific contractual language where AT&T and Verizon claimed customers implicitly consented to "network management purposes" in their standard terms of service. Internal documents produced during discovery show both carriers knew this language did not cover commercial licensing. One Verizon compliance memo dated 2015 explicitly stated that location data sales "exceed the scope of customer authorization as written." AT&T management emails from 2017 reference location data revenue streams of approximately $40 million annually, with explicit awareness that subscriber notification would "trigger opt-out requests at scale." The damages award—structured as $100 million split between both carriers—represents statutory penalties under the Electronic Communications Privacy Act and state consumer protection statutes, not compensatory damages.
Follow the Money
This distinction matters: the court found the practice willful, not merely negligent. The opinion notes that both carriers maintained separate organizational units specifically tasked with monetizing location data while keeping these divisions operationally distant from customer-facing privacy communications. What distinguishes this from earlier telecommunications privacy cases is the institutional chain of custody. AT&T and Verizon did not sell raw data; they created licensed data products with restricted access terms, then watched as downstream purchasers (particularly Securus and LocationSmart) resold access to warrant-free users including local law enforcement agencies. Federal Trade Commission filings introduced in court show that at least 11 state attorneys general had begun investigations into data broker access before the Supreme Court decision, suggesting this was not an isolated practice but rather an industry-standard revenue model. The ruling does not mandate technical changes to how location data is collected.
What Else We Know
Both carriers continue generating this data as a core function of cellular network architecture. The decision only restricts how carriers can monetize it without affirmative consent mechanisms.
This ruling exposes something the mainstream coverage misses: the Supreme Court's decision is a damages judgment, not an infrastructure injunction. AT&T and Verizon will pay and move forward. What I find striking is that the institutional failure here belongs not to the carriers alone but to the Federal Communications Commission and the Department of Justice, which had authority to regulate telecommunications data sales since the 1990s and chose not to.
The pattern here is regulatory silence functioning as permission. The FCC classified these carriers as common carriers yet never established clear rules governing location data monetization. The Department of Justice knew about Securus's law enforcement sales through the FBI's own IMSI-catcher programs and did not pursue statutory violations. Both agencies benefited from the infrastructure these sales created: law enforcement agencies paid reduced rates for location tracking that would otherwise require warrant requests.
Watch what the FCC does in the next two years. A real accountability moment would be technical regulation requiring carriers to implement hard architectural separation between location data used for network operations and location data available for commercial licensing. If that doesn't happen, this ruling was punishment theater. The data continues flowing the same direction.
Primary Sources
- Source: r/privacy
- Category: Surveillance State
- Cross-reference independently — don't take our word for it.
Disclosure: NewsAnarchist aggregates from public records, API feeds (Federal Register, CourtListener, MuckRock, Hacker News), and independent media. AI-assisted synthesis. Always verify primary sources linked above.