Coca-Cola Faces Privacy Lawsuit Over Meta and Google Tracking
The Coca-Cola Company is facing a proposed class-action lawsuit accusing it of misleading consumers about their online privacy and secretly sharing their browsing information with major technology and advertising companies. Two California residents, Barbara Miles and Jason Mandler, filed the lawsuit in federal court in the Northern District of California on November 6, 2026. They allege that Coca-Cola websites continued transmitting visitors’ personal browsing information to third parties even after users selected options to reject nonessential tracking cookies.
The complaint focuses on cookie-consent banners displayed across 12 Coca-Cola-related websites, including the company’s main website and sites associated with 11 beverage brands. These include Sprite, Fanta, Diet Coke, Powerade, Vitaminwater, Fairlife, Smartwater and BODYARMOR. According to the plaintiffs, the websites presented visitors with options to control advertising, analytics and personalization cookies, creating the impression that consumers could prevent unnecessary tracking by changing their preferences.
The plaintiffs allege that Coca-Cola did not consistently honor those choices. They claim that even after visitors rejected optional cookies, the websites continued transmitting information to outside companies through tracking technologies. The third parties identified in the complaint include Meta, Google, TikTok, Microsoft, Snapchat, Pinterest and X. The lawsuit argues that the continued transmission of data contradicted the privacy choices presented to consumers through the websites’ consent banners.
The complaint describes several types of information that allegedly continued flowing to third parties. These include browsing histories, interactions with website pages, shopping-related behavior, device information, location data and information entered into online forms. Such information can potentially help advertising companies build detailed profiles of consumers, identify their interests and deliver targeted advertisements. The plaintiffs argue that consumers who reject tracking should not have their information transmitted for these purposes without their permission.
Barbara Miles and Jason Mandler also describe their own experiences using Coca-Cola’s websites. Miles says she visited websites associated with Coca-Cola, Sprite and Vitaminwater to research beverages, compare ingredients and nutritional information, and look for coupons and promotions. Mandler says he visited websites for Coca-Cola, Diet Coke, Powerade and Topo Chico to research ingredients, sweeteners and nutritional details. Both plaintiffs say they changed their cookie settings to reject unnecessary tracking before continuing to browse.
The plaintiffs claim they would have used the websites differently, or avoided them altogether, had they known that their information could still be transmitted to outside companies after they rejected optional cookies. Their argument is that consumers should be able to make informed decisions about sharing personal information. If a website presents a clear option to reject advertising and analytics cookies, visitors may reasonably expect that the choice will be respected. The lawsuit contends that Coca-Cola’s alleged practices undermined that expectation.
An important part of the complaint involves technical testing conducted by the plaintiffs’ legal team. According to the filing, their attorney, Seth A. Safier of the law firm Gutride Safier, used specialized software to examine the network traffic generated while interacting with the websites. The plaintiffs say the testing revealed that tracking information continued to be transmitted to third-party companies even after the cookie settings had been adjusted to reject optional cookies. They also included screenshots and other technical material that they say support their allegations.
The lawsuit argues that the information allegedly collected could be used by technology and advertising companies to develop consumer profiles, group individuals according to shared interests and characteristics, and deliver personalized advertisements. This is particularly significant because the data may reveal more than a person’s interest in a particular beverage. Browsing patterns, searches, interactions and information entered into forms can potentially provide insight into shopping habits, personal preferences and other aspects of an individual’s online behavior. The plaintiffs argue that such information should not be shared in contradiction of the privacy choices presented to visitors.
Miles and Mandler have brought several legal claims against Coca-Cola, including invasion of privacy, intrusion upon seclusion, unlawful wiretapping, fraud and unjust enrichment. The wiretapping allegations raise questions about whether information transmitted through website interactions was improperly intercepted or disclosed under applicable privacy laws. The fraud claim focuses on the alleged discrepancy between the privacy choices presented to visitors and the data-sharing practices described in the complaint. These are legal allegations that Coca-Cola will have an opportunity to challenge.
The plaintiffs are seeking financial damages, restitution, attorneys’ fees and a court order requiring Coca-Cola to honor consumers’ cookie preferences. They are also pursuing the case on behalf of a proposed class of affected website visitors. However, the court has not certified a class, and the lawsuit does not establish that every visitor to the identified websites experienced the same alleged conduct. The plaintiffs will need to establish the legal and factual requirements for their claims and demonstrate that the proposed class meets the applicable certification standards.
The case adds to a growing number of privacy lawsuits targeting companies that use online tracking technologies while offering visitors cookie-consent controls. Businesses commonly rely on advertising and analytics services to understand website traffic, measure marketing performance and personalize online experiences. However, privacy disputes arise when consumers claim that the actual data collection does not match the choices presented to them. The Coca-Cola lawsuit could become another test of how companies must implement consent systems and whether they can be held responsible when third-party tracking tools allegedly continue operating after a visitor opts out.
Ultimately, the dispute is about transparency and consumer control over personal information. Coca-Cola has not been found liable, and the allegations remain unproven. The case will require the court to examine the websites’ technical behavior, the language used in their cookie banners, the information transmitted to third parties and the legal obligations that apply to the company. If the plaintiffs succeed, the case could lead to financial consequences and changes in how Coca-Cola manages tracking technologies across its websites. It could also provide a warning to other businesses that offering privacy controls is not enough if those controls do not actually work as consumers expect.
Key Legal Outcomes
- Proposed class-action lawsuit filed: Two California residents sued Coca-Cola in federal court on November 6, 2026, over alleged website tracking and data sharing.
- Multiple privacy claims raised: The complaint includes allegations of invasion of privacy, intrusion upon seclusion, unlawful wiretapping, fraud and unjust enrichment.
- Third-party technology companies identified: Meta, Google, TikTok, Microsoft, Snapchat, Pinterest and X are among the companies allegedly receiving tracking information.
- Financial and injunctive relief requested: The plaintiffs seek damages, restitution, attorneys’ fees and an order requiring Coca-Cola to respect cookie preferences.
- No liability finding yet: The allegations have not been proven, and the proposed class has not yet been certified by the court.
Why It Matters
- Consumer privacy: The lawsuit questions whether consumers can trust website cookie settings when they choose to reject optional tracking.
- Corporate responsibility: Companies may face legal scrutiny if their privacy promises do not match how their websites actually collect and transmit information.
- Third-party tracking: The case highlights how advertising and analytics technologies can share information across multiple companies.
- Online consent: A court decision could help clarify the legal consequences of failing to honor visitors’ stated privacy preferences.
- Industry-wide impact: The outcome could influence how other major brands design, test and manage their website privacy controls.
