A US law firm filed a class action in February 2026 accusing Lenovo of violating Justice Department rules by exposing the personal data of 100,000 or more US consumers to Chinese entities. Lenovo: “Any suggestion that Lenovo improperly shares customer data is false. We take data privacy and security seriously and comply with all applicable data protection laws and regulations globally, including stringent US requirements. Our data practices are transparent, lawful, and designed to protect our customers.”
KEY FACTS
- Incident class action alleges website trackers exposed US behavioral data to foreign adversaries
- Threshold DOJ rule defines covered personal identifiers as 100,000 US persons or more
- Plaintiff case filed on behalf of Spencer Christy by Almeida Law Group
A court filing filed by Almeida Law Group alleges that the Justice Department’s Data Security Program rules were implemented to stop adversarial countries from acquiring large quantities of behavioral data and that Lenovo’s homepage loads numerous first and third party tracking implementations including TikTok, Facebook, Microsoft and Google which measure and record user data and enable bulk collection.
The Justice Department rule sets a threshold of 100,000 US persons for covered personal identifiers and lists potential identifiers such as government and financial account numbers, IMEIs, MAC and SIM numbers, demographic data and advertising IDs.
The complaint says the named plaintiff visited the website multiple times in November and December 2025 and that his visits triggered trackers leading to what the filing describes as an unauthorized disclosure of personal information to a foreign entity. Relief requested includes class action status, restitution, disgorgement and statutory damages to be determined by the court or a jury.
WHY IT MATTERS
The case raises questions about the use of web trackers and the handling of large sets of US personal identifiers under the DOJ rule. A court decision could affect how vendors and sites manage cross border transfers and tracking technologies.