Location data is not like other data. In Carpenter v. United States, the Supreme Court recognized that a detailed record of someone's movements reveals an all-encompassing picture of their life: the clinic, the protest, the place of worship. Oyez. When a data broker sells that history, the harm already happened; deleting it afterward is like returning a stolen diary after reading it aloud. Payment is the only remedy that acknowledges the violation was personal. The FTC's action against Outlogic, formerly X-Mode, showed brokers were selling raw location tied to ad IDs that could expose visits to sensitive places. FTC coverage. If companies must pay the people they tracked, the business model of bulk location sale collapses, which is precisely the point.
← Back to the debate
BusinessSep 23, 2026
Should companies be required to pay customers when they misuse location data?
One FOR case in this debate
4 comments
Discussion (4)
Payment without fixing consent is just a subscription fee for abuse. Outlogic-style bans and deletion orders do more. Make the payout part of a ban, not a substitute for one.
The stolen diary line nails it. Deletion after the sale is theater. The data was already copied, resold, and merged a dozen times. Only money makes the harm concrete.
I agree the harm is real, but how do you price it? Is my grocery store trip worth the same as someone's clinic visit? A flat payout feels arbitrary and a tiered one feels invasive to administer.
And Carpenter is the right anchor. The Court already said location history is special. The law treating it like a cookie banner violation is the mismatch.