Coca-Cola faces a proposed class-action lawsuit in the United States, alleging that its websites continued sharing consumers' browsing information with technology companies, including Meta and Google, even after visitors rejected tracking cookies.
Filed on November 6 in California federal court, the complaint was brought by residents Barbara Miles and Jason Mandler, who accuse the beverage giant of misleading consumers about their privacy choices.
The lawsuit alleges that Coca-Cola deployed advertising, analytics, and personalization technologies across 12 brand websites, including Coca-Cola, Sprite, Fanta, Diet Coke, Powerade, and Vitaminwater.
Visitors were reportedly offered cookie consent banners allowing them to reject nonessential tracking. However, the plaintiffs claim these preferences failed to prevent information from reaching third-party platforms.
The complaint identifies Meta, Google, TikTok, Microsoft, Snapchat, Pinterest, and X among companies allegedly receiving tracking information despite users declining optional cookies.
According to the allegations, transmitted information included browsing histories, website interactions, shopping behavior, device identifiers, location information, and details entered into online forms.
The plaintiffs contend that such information could support consumer profiling and targeted advertising, potentially undermining users' expectations of privacy and control over personal information.
Their lawyers reportedly examined website network traffic and documented third-party tracking activity after optional cookies were disabled, forming part of the evidence supporting the complaint.
The lawsuit raises allegations involving privacy invasion, unlawful interception of communications, fraud, and unjust enrichment. Plaintiffs seek damages, restitution, legal expenses, and measures requiring compliance with consumer preferences.
Beyond Coca-Cola, the controversy highlights a broader corporate challenge: ensuring consent management platforms genuinely enforce privacy choices across advertising technologies, analytics systems, and third-party integrations.
The larger lesson is that privacy compliance requires more than displaying consent banners. For enterprises worldwide, including those preparing for India's DPDP requirements, transparent data practices, continuous monitoring, and technically enforceable consent are essential to maintaining digital trust.
