July 19 (Reuters) - Oracle agreed to pay $115
million to settle a lawsuit accusing the database software and
cloud computing company of invading people's privacy by
collecting their personal information and selling it to third
parties.
A preliminary settlement of the proposed class action was
filed on Thursday night in San Francisco federal court, and
requires a judge's approval. Oracle denied wrongdoing.
The plaintiffs, who otherwise have no connection to Oracle,
said the company violated federal and state privacy laws and
California's constitution by creating unauthorized "digital
dossiers" for hundreds of millions of people.
They said the dossiers contained data including where people
browsed online, and where they did their banking, bought gas,
dined out, shopped and used their credit cards.
Oracle then allegedly sold the information directly to
marketers or through products such as ID Graph, which according
to the company helps marketers "orchestrate a relevant,
personalized experience for each individual."
The settlement covers people whose personal information
Oracle collected or sold since Aug. 19, 2018.
As part of the settlement, the Austin, Texas-based company
agreed to not to gather user-generated information from URLs of
previously visited websites, or text that users enter in online
forms other than on Oracle's own websites.
Oracle did not immediately respond on Friday to requests for
comment.
The named plaintiffs include privacy rights activist Michael
Katz-Lacabe and Jennifer Golbeck, a University of Maryland
professor specializing in social media and privacy.
Lieff Cabraser Heimann & Bernstein, which represents the
plaintiffs, may seek up to $28.75 million from the settlement
for legal fees.
The case is Katz-Lacabe et al v. Oracle America Inc, U.S.
District Court, Northern District of California, No. 22-04792.