Case Law
TikTok Gauth Class Action: Google Data Privacy Lawsuit Alleges Secret Data Transmission
Edward Lominchar filed a class action lawsuit in the Central District of California on Monday against TikTok USDS Joint Venture, LLC, alleging its AI homework helper Gauth transmits users' queries and personal data to Google for advertising purposes without consent. The lawsuit claims that Gauth, formerly known as Gauthmath, embeds Google Analytics code to send the full text of users' search questions to Google. This platform, accessible to students of all ages without payment or age verification, allows users to type or upload questions across various subjects, with Gauth's AI providing answers. Lominchar, a resident of Miami, Florida, stated he began using Gauth around December 2024, highlighting the platform's widespread accessibility and the potential scope of data collection.
This development carries significant legal implications for practitioners, particularly those advising technology companies, educational platforms, and businesses handling user data. The class action underscores the increasing scrutiny on data privacy practices, especially concerning AI-powered tools and the data of minors or students. It highlights the potential liabilities for companies that integrate third-party analytics or advertising tools without explicit and informed user consent, particularly when sensitive information like educational queries is involved. The scale of a class action suggests a broad impact and potential for substantial damages if the allegations are proven.
The legal context for this case likely involves a confluence of federal and state privacy statutes. Depending on the age of the users, the Children's Online Privacy Protection Act (COPPA) could be highly relevant, imposing strict requirements on the collection of personal information from children under 13. Additionally, state privacy laws such as the California Consumer Privacy Act (CCPA) or its successor, the California Privacy Rights Act (CPRA), may apply, given the filing in California and the potential for data of California residents to be involved. Common law claims related to privacy, breach of implied terms of service, or unfair business practices could also be asserted. The Central District of California is a federal court, indicating that the lawsuit likely invokes federal question jurisdiction or diversity jurisdiction.
The key parties involved are the plaintiff, Edward Lominchar, representing a class of users; the defendant, TikTok USDS Joint Venture, LLC, which operates TikTok in the US and owns the Gauth platform; and Google, identified as the alleged recipient of the transmitted data. The Central District of California is the judicial forum for this dispute. The outcome of this matter, including any rulings on class certification or the merits of the claims, is not yet reported.
Practitioners should advise clients operating AI-powered platforms, especially those accessible to or targeting students, to conduct thorough audits of their data collection, usage, and sharing practices. This includes a meticulous review of all third-party integrations, such as analytics or advertising tools, to ensure compliance with applicable privacy laws like COPPA, CCPA/CPRA, and the company's own terms of service and privacy policies. Robust and transparent consent mechanisms are crucial, particularly for sensitive data or data pertaining to minors. Companies should also consider implementing stringent age verification protocols where appropriate to mitigate risks associated with collecting data from children. Monitoring the progression of this case will provide valuable insights into judicial interpretations of data privacy obligations in the context of AI and educational technology.