Texas Sues Allstate Over Alleged Violation of Data Privacy Rights for 45 Million Americans

Texas Attorney General Ken Paxton has filed a groundbreaking lawsuit against insurance giant Allstate and its subsidiary, Arity, accusing them of unlawfully collecting, using, and selling sensitive data from more than 45 million Americans without their knowledge. This case represents the first enforcement of Texas’ new Data Privacy and Security Act, marking a significant step in state-level data privacy litigation.

Allegations Against Allstate and Arity

According to the lawsuit, Allstate used its subsidiary, Arity, to embed tracking software into mobile apps, enabling the collection of massive amounts of geolocation and driving behavior data without consumers’ consent. The software tracked various metrics, including:

• Geolocation data (altitude, longitude, and latitude).
• Accelerometer and gyroscopic data, which measure speed, distance, and trip duration.
• Driving behaviors such as hard braking, speeding, distracted driving, and crash detection.

The data was allegedly sold to insurers, including Allstate, which then used it to adjust individual insurance premiums and issue price quotes. In addition to violating the Data Privacy and Security Act, Paxton contends that Allstate and Arity breached the Texas Data Broker Law and the Texas Insurance Code, which prohibits unfair and deceptive practices.

The Methods: How the Data Was Collected

The complaint alleges that Arity embedded its tracking software into mobile apps such as GasBuddy, Life360, and MyRadar, paying app developers millions of dollars to expand their dataset. Once downloaded, the software monitored users’ movements in real-time, capturing detailed trip data such as start and end times, routes, and behaviors like phone usage while driving.

Arity also aggregated this data with personal identifiers, such as names and addresses, to build what it promotes as the “world’s largest driving behavior database.” This database has been marketed to insurers, including CSAA Insurance Group and Toyota’s Connected Analytic Services (CAS), for more precise pricing of individual drivers.

Consumer Risks and Privacy Violations

The lawsuit highlights how consumers were unknowingly subjected to invasive tracking, with no way to opt out or provide informed consent. Among the key concerns:

• Lack of Transparency: Privacy policies from apps like GasBuddy and Life360 omitted critical details about their partnership with Arity and the sale of sensitive data to insurers.
• Unintended Consequences: Consumers’ premiums could increase due to the driving behavior of others, such as a taxi driver or friend, because the software tracks phone movement rather than the vehicle itself.
• Monetization of Sensitive Data: Arity allegedly misrepresented its practices by claiming it does not sell personal information for monetary gain, despite clear evidence to the contrary.

Automakers and Data Brokers

The lawsuit also implicates major automakers, including Toyota, Lexus, Mazda, Chrysler, and Jeep, for selling connected car data to Arity. This data was used to enhance Arity’s driving behavior database and increase the value of its offerings to insurers. However, automakers are not named as defendants in the case.

A First in Data Privacy Enforcement

This case is the first of its kind under Texas’ comprehensive Data Privacy and Security Act, which took effect on July 1, 2024. While 12 states have enacted similar laws, Texas and California are currently leading enforcement efforts.

Attorney General Paxton emphasized the significance of the case:
“Millions of Americans were sold out to insurance companies without their knowledge or consent, in violation of the law. This lawsuit demonstrates Texas’ commitment to protecting consumers from deceptive data practices.”

Allstate’s Defense

In a statement, Allstate defended Arity’s practices, claiming the company operates transparently and obtains consumer consent. An Allstate spokesperson stated:
“Arity helps consumers get the most accurate auto insurance price after they consent in a simple and transparent way that fully complies with all laws and regulations.”

However, the lawsuit paints a different picture, alleging that the consent process was neither explicit nor comprehensive, leaving millions of Americans vulnerable to data misuse.

What Texas Seeks

The Texas Attorney General’s office is seeking several remedies, including:

• Monetary damages for affected consumers.
• An injunction requiring Arity to delete all improperly collected data.
• Prohibition of further data collection or sale without proper notice and consent.
• Restitution for individuals whose data was unlawfully used.

The Bigger Picture: A Growing Data Privacy Crisis

This case highlights a broader issue in the digital age: the pervasive and often opaque collection of consumer data. Mobile apps and connected vehicles are increasingly intertwined with data brokers, creating complex ecosystems that prioritize profit over privacy.

Disclosures about data sharing are often buried in dense privacy policies that few consumers read. Even when policies are reviewed, they rarely provide detailed information about how data is shared with third parties or how it could be used against consumers.

Implications for the Future

This lawsuit could set a precedent for how states enforce comprehensive data privacy laws. It also signals a warning to companies operating as data brokers or using embedded tracking technologies without clear consumer consent. As more states enact similar laws, companies will face heightened scrutiny over their data collection and sharing practices.

Protecting Your Data

In light of these allegations, consumers can take steps to safeguard their privacy:

Review App Permissions: Check what data apps on your phone have access to and revoke unnecessary permissions.

Use Privacy-Focused Apps: Choose apps with transparent privacy policies and opt-out options for data sharing.

Enable Device Security Features: Use features like app-specific location sharing and encrypted connections.

Monitor Privacy Policies: Regularly review privacy policies for changes, especially in apps frequently used.

Conclusion

The Texas lawsuit against Allstate and Arity underscores the urgent need for transparency and accountability in data collection practices. As digital technologies continue to evolve, consumers must remain vigilant to protect their privacy while lawmakers and regulators step up efforts to enforce protections.

This case could pave the way for broader reforms, ensuring that companies operate with greater responsibility and respect for the data rights of individuals. The outcome will undoubtedly shape the future of data privacy enforcement in the United States.

---

---

Support truth, health, and preparedness by shopping the Alex Jones Store through our link. Every purchase helps sustain independent voices and earns us a 10% share to fuel our mission. Shop now and make a difference!

https://thealexjonesstore.com?sca_ref=7730615.EU54Mw6oyLATer7a

---