Google Must Add New Privacy Setting After Real-Time Bidding Settlement — 200 Million Users Affected (2026)

Google Must Add New Privacy Setting After Real-Time Bidding Settlement — 200 Million Users Affected

By Steve Levine

Google Real-Time Bidding RTB Privacy Class Action Settlement 2026 New User Control 200 Million Users Ad Auction Data

Published: March 29, 2026


On March 26, 2026, a federal judge in California granted final approval to a class action settlement that requires Google to give users a new way to limit the personal data the company shares about them during online ad auctions. The case, In re Google RTB Consumer Privacy Litigation, was filed nearly five years ago and covers more than 200 million active U.S. Google account holders.

There is no cash payout for class members. The settlement is for injunctive relief only — meaning the benefit is the new privacy control itself, not money. Google must launch the new setting within 30 days and notify all eligible users by email.

What Is Real-Time Bidding and Why Does It Matter?

Every time you visit a website or open an app that displays ads, an auction happens in milliseconds. Your location, device details, browsing history, and inferred interests are packaged into what is called a "bid request" and broadcast to thousands of advertising companies. They compete for the chance to show you an ad, and the highest bidder wins.

This system is called real-time bidding, or RTB. Google operates one of the largest RTB platforms in the world, processing billions of these auctions every day across approximately 1.3 million publisher websites and apps.

The lawsuit alleged that every company participating in these auctions — not just the winner — receives the personal data contained in the bid request. That means thousands of advertisers and data brokers can collect your information whether or not they actually show you an ad.

What Personal Data Does Google Share in Ad Auctions?

According to court filings, each bid request can include your Google User ID, IP address, device advertising ID, browser information, the URL of the page you are visiting, publisher IDs, and interest-based audience segments. Google categorizes users into more than 5,000 consumer segments and subcategories, including sensitive categories like health conditions, religion, ethnicity, and sexual orientation.

The plaintiffs argued that Google promised users it does not sell their personal information, while the RTB system effectively does exactly that — broadcasting detailed personal profiles to thousands of third parties hundreds of times per day.

What Is the New Privacy Control?

Under the settlement, Google must create a new setting called the "RTB Control" and integrate it into Google Account privacy settings. When a user enables it, the following changes take effect:

• Bid requests will no longer include identifying information such as Google User IDs, device advertising IDs, or IP addresses
• Cookie matching — a method companies use to link their own data profiles to a specific bid request — will be blocked
• Browser user-agent data will be generalized to the major version level, making it harder to fingerprint individual users

In practical terms, enabling the RTB Control makes it significantly harder for advertisers to identify and target you personally during ad auctions. Your data still flows through the system, but it is stripped of the identifiers that connect it to you.

How to Turn It On

The RTB Control is not available yet. Google has 30 days from the March 26, 2026 final approval order to launch it. Once it goes live, Google is required to email all active U.S. Google account holders to inform them about the new option. The control will appear in your Google Account privacy settings.

This is an opt-in control. It will not be turned on by default. You will need to find it in your settings and manually enable it. Google must keep the RTB Control available for at least three years.

There Is No Cash Payout

This settlement does not include a monetary payment to class members. No claim form exists. No check or direct deposit will be sent to you. The seven named class representatives each receive $15,000 for their role in the litigation, but no other class member receives money.

The judge awarded class counsel $21,856,239 in attorneys' fees and $3,488,793 in costs — significantly less than the $128 million originally requested. Judge Yvonne Gonzalez Rogers wrote that the settlement is "adequate, but by no means excellent," and questioned how much real-world impact the control will have given that users must affirmatively enable it.

Plaintiffs' experts estimated the value of the RTB Control to users could be between $1.4 billion and $21.6 billion over three years, depending on adoption rates. Even at a conservative 8.8% adoption rate, the estimated value was $1.4 billion.

Limitations You Should Know About

The Electronic Frontier Foundation noted several limitations of the RTB Control:

• It only works on devices and browsers where Google can verify you are signed in to your Google account
• Users who are signed out or who do not have a Google account cannot use the control
• Users who have disabled third-party cookies for privacy reasons may not be able to access this protection
• After three years, Google can decide whether to continue offering the control or discontinue it

The opt-in requirement is significant. Privacy settings that require users to take action typically see low adoption rates. Most of the 200 million affected users will likely never enable the control unless Google makes it prominent in its notification emails.

Why This Case Took Five Years

The litigation began on March 26, 2021, when the first complaint was filed as Hewitt v. Google LLC. Multiple cases were consolidated in June 2021 under the current case name. In June 2022, Judge Gonzalez Rogers denied most of Google's motion to dismiss, allowing the statutory privacy and contract claims to proceed.

Plaintiffs sought class certification in July 2023, but the court denied it without prejudice. The parties reached a settlement on September 2, 2025. A fairness hearing was held on February 17, 2026, and final approval was granted on March 26, 2026.

Broader Privacy Implications

This settlement arrives at a time of increasing scrutiny over the RTB system. In January 2025, the Electronic Privacy Information Center and the Irish Council for Civil Liberties filed the first-ever complaint under the Protecting Americans' Data from Foreign Adversaries Act with the Federal Trade Commission. The complaint alleged that Google's RTB system — which broadcasts user data approximately 31 billion times per day — shares Americans' sensitive behavioral information with entities subject to Chinese government jurisdiction.

While this settlement only requires an opt-in control, it establishes a legal precedent that RTB data sharing can be challenged in court and that companies may be required to provide users with mechanisms to limit it.

Key Facts at a Glance


Case: In re Google RTB Consumer Privacy Litigation, Case No. 4:21-cv-02155-YGR
Court: U.S. District Court, Northern District of California
Judge: Hon. Yvonne Gonzalez Rogers
Filed: March 26, 2021
Final Approval: March 26, 2026
Class Size: Over 200 million active U.S. Google account holders
Cash Payout: None for class members (injunctive relief only)
Named Plaintiff Awards: $15,000 each (7 plaintiffs)
Attorney Fees Awarded: $21,856,239
New Privacy Control: RTB Control — limits data shared in ad auctions
Launch Deadline: Within 30 days of final approval (approximately late April 2026)
Duration: Google must maintain the RTB Control for at least 3 years
Type: Opt-in (not on by default)
Class Counsel: Bleichmar Fonti & Auld LLP, DiCello Levitt LLP, Pritzker Levine LLP

How Do I Find Class Action Settlements?

Find all the latest class actions you can qualify for by getting notified of new lawsuits as soon as they are open to claims:


Sources

Bloomberg Law — Google's Real Time Ad Bidding Settlement Gets Final Court Nod (March 2026)
Courthouse News Service — Google Agrees to New Privacy Features in Class Action Settlement
Electronic Frontier Foundation — Google Settlement May Bring New Privacy Controls for Real-Time Bidding (January 2026)
GovInfo — In re Google RTB Consumer Privacy Litigation, 4:21-cv-02155
DiCello Levitt LLP — Landmark Settlement in Google Real-Time Bidding Privacy Suit

About This Article

This article is based on court filings and reporting from Bloomberg Law, Courthouse News Service, the Electronic Frontier Foundation, and other published sources. OpenClassActions.com is a consumer advocacy and class action news site, and is not a class action administrator or a law firm.
For more class actions keep scrolling below.