Rotten Company

Avast Software s.r.o.

Approved Evidence

Added to Rotten Company: 8/24/2026
Conduct/Event period: 2019–2019
Ongoing: No
Resolution status: Resolved
Resolution date: April 15, 2024
misconduct

Avast Software fined CZK 351 million for unlawful transfer of roughly 100 million users data

Summary

The Czech Office for Personal Data Protection imposed a final and binding CZK 351 million GDPR fine on Avast Software for unlawful processing and transfer of personal data during part of 2019. Avast transferred browsing-history data linked to unique identifiers for roughly 100 million users to Jumpshot. The authority found that users were misleadingly told the transferred information was anonymised, while the data could allow re-identification of at least some users and was used for purposes extending beyond statistical analysis. The Czech DPA described the April 2024 decision as final and binding. Source: https://uoou.gov.cz/en/news/business-communication/czech-dpa-imposed-fine-of-351-million-czk-for-gdpr-infringement

Evidence Weight
99.71
Severity: high
Recency Weight: 99.70891683773465
File Weight: 1