The Oracle Privacy Lawsuit Allegations
The class action complaint filed in August 2022 in the Northern District of California alleges that Oracle has built one of the largest unauthorized surveillance operations in history through its Oracle Advertising, Oracle Data Cloud, and related data broker businesses. The complaint alleges Oracle assembled detailed dossiers on approximately 5 billion people by aggregating data from hundreds of sources including loyalty programs, website tracking, purchase records, court records, and social media.
The profiles allegedly include: personal identifiers (names, addresses, demographics); financial data; political beliefs and party affiliation; purchase history; health interests inferred from browsing; location history; and sensitive personal data including religious beliefs and sexual orientation inferred from behavioral data. Plaintiffs allege Oracle compiled, shared, and monetized these profiles without the knowledge or consent of the individuals described.
Legal Claims Advanced
The lawsuit advances claims under the California Constitution (which protects a right to privacy), the California Customer Records Act, and federal wiretapping statutes. The claims focus on Oracle's alleged practice of collecting data from users who never directly interacted with Oracle and had no reason to know Oracle was compiling profiles about them.
The scale and comprehensiveness of Oracle's alleged profiling -- targeting both US and non-US individuals -- raises issues about the appropriate jurisdictional reach of privacy law and the legal standing of individuals who were profiled without knowledge. The case has the potential to generate significant precedent on whether and how US privacy law applies to data broker aggregation operations.
The Data Broker Industry and Legal Gap
Data brokers occupy a legal gray area: they collect, aggregate, and sell personal information about individuals who never consented to this collection and have no direct relationship with the broker. Unlike social media companies or retailers (from whom people at least knowingly receive services), data brokers are invisible to the individuals they profile. See also: LexisNexis Lawsuit.
Federal comprehensive privacy legislation has not been enacted in the US as of 2026, leaving a patchwork of state laws as the primary legal framework. California, Virginia, Colorado, and other states have enacted comprehensive data privacy laws that may constrain some data broker practices, but enforcement against the scale of Oracle's alleged operations is challenging. Related: Connected device data sharing claims.
Who Qualifies
The proposed class covers all US residents whose personal information was collected, compiled, or monetized by Oracle without authorization. Given the allegations of 5 billion profiles including extensive US representation, virtually any US resident could be a class member. California residents have the strongest claims under California's privacy framework.
Status 2026
The Oracle class action is in active proceedings. Oracle has contested the legal theories and the scope of the proposed class. Class certification has not yet been granted. The litigation is expected to take several years given its complexity and scale.
How to Get Legal Help
If you believe you qualify based on the eligibility criteria described above, the next step is a free consultation with an experienced attorney. Most plaintiff-side attorneys handling these cases work on contingency -- meaning you pay nothing unless your case results in a recovery. Bring any relevant documentation including receipts, correspondence, or evidence of the harm you experienced.
To stay current on case developments, claim deadlines, and settlement news, bookmark this page and subscribe to LawsuitWatch alerts. Coverage is updated as new court filings, settlement announcements, and eligibility changes are made public.
Free Legal Evaluation
Do You Qualify to File a Claim?
Our network of verified plaintiff attorneys offers free, no-obligation case evaluations. Contingency fee representation means you pay nothing unless you win.
Oracle Lawsuit: Privacy Violations & Data Broker Claims: Frequently Asked Questions
Answers to the most common questions about this case and your legal options.
What is Oracle being sued for?
Oracle is accused of building detailed unauthorized profiles on approximately 5 billion people through its data broker and advertising technology businesses without consent.
Did Oracle compile a dossier on me?
Oracle's alleged data collection is so broad that most US adults are likely represented in its databases. The lawsuit proceeds on behalf of all affected US individuals.
Is there an Oracle settlement?
No settlement has been announced as of June 2026. The lawsuit is in active early-stage proceedings.
What is a data broker?
A data broker is a company that collects personal information from multiple sources, aggregates it into detailed profiles, and sells access to those profiles -- typically for advertising targeting, risk assessment, or other commercial purposes.
How does Oracle use the data it collects?
Oracle's data operations support targeted advertising, credit risk assessment, identity verification, and other commercial services. The lawsuit challenges whether these uses of profiles built without consent are lawful.