This Week in Privacy: Oct 26 - Nov 1, 2026

This week brought resolution to several high-profile privacy cases, with tech giants Google and Meta finally cutting checks for past violations. The theme was accountability catching up with years-old scandals, as settlements from Cambridge Analytica and children's data collection reached affected users.

Top Stories

Meta Finally Pays Out Cambridge Analytica Settlement

Nearly seven years after the scandal broke, Meta began distributing payments in September 2024 to Facebook users affected by the Cambridge Analytica data misuse. The $725 million settlement compensates users whose personal information was improperly accessed by the political consulting firm in 2018. Anyone who filed a claim by the 2023 deadline is now receiving their share of the payout. The settlement closes one of the most significant privacy scandals in social media history, where the personal data of millions was harvested without consent and used for political profiling. While the per-user payout won't be substantial given the massive number of claimants, it represents a tangible consequence for Facebook's lax data-sharing practices during that era.

Google Settles Children's Privacy Lawsuit for $8.25 Million

A federal judge approved Google's $8.25 million settlement of a class-action lawsuit that accused its AdMob service of illegally collecting data from children under 13. The case alleged that Google violated the Children's Online Privacy Protection Act by gathering device identifiers and other information through Android apps in its "Designed for Families" program, including apps like Fun Kid Racing, without obtaining parental consent. Parents filed the lawsuit in June 2023 after discovering their children's smartphone data was being harvested. The settlement comes after a 2024 court decision rejected Google's attempt to dismiss the case on technical grounds, clearing the way for this resolution. The case highlights ongoing concerns about how apps marketed to children handle data collection, even when they're part of supposedly vetted family-friendly programs.

In Brief

• South Korea fined Google $32 million and Apple $15.6 million for forcing developers to use their in-app payment systems, charging excessive commissions, and blocking external payment options after investigations since 2022.

The Big Picture

This week's settlements illustrate how slowly privacy accountability moves. The Cambridge Analytica scandal happened in 2018, yet payments are only arriving now in 2024, six years later. The children's data collection case took over a year from filing to settlement. Meanwhile, South Korea's enforcement action resulted from investigations stretching back to 2022. These timelines show that while tech companies eventually face consequences for privacy violations, the wheels of justice turn at a glacial pace. For affected users, that means years of waiting for compensation, and for companies, it means the cost of violations remains distant enough that it may not adequately deter future misconduct. The message is clear: privacy enforcement exists, but don't expect swift justice.