A federal judge has dismissed two proposed class actions accusing LinkedIn of secretly scanning users’ browser extensions. The LinkedIn Browsergate lawsuit claimed the Microsoft-owned platform collected sensitive extension data without permission. However, the court found the plaintiffs couldn’t prove they were actually harmed.
Judge Vince Chhabria of the US District Court for the Northern District of California issued the ruling this week. His decision effectively shuts down, for now, one of the more unusual privacy disputes to hit a major tech platform this year.
What the LinkedIn Browsergate Lawsuit Claimed
California residents Nicholas Farrell and Jeff Ganan filed the original complaints. They alleged LinkedIn scanned visitors’ browsers for the presence of roughly 6,000 different extensions. According to the lawsuits, the company then paired this data with hardware and software details and transmitted it alongside every API request.
Neither LinkedIn’s privacy policy nor any user-facing disclosure mentioned this practice, the plaintiffs claimed. Independent outlets, including BleepingComputer, later confirmed that LinkedIn does perform this type of scanning. Still, confirming the behavior is different from proving it caused legal harm—and that distinction became the case’s downfall.
Why the Judge Dismissed the Case
Chhabria ruled that neither plaintiff demonstrated they had extensions installed that actually sent private information to LinkedIn. Without that evidence, the court found they lacked standing to sue in the first place.
The judge also raised doubts about whether the underlying privacy claims would hold up even if the case proceeded. Notably, he sided with LinkedIn’s argument that browser extensions are, by design, built to share data with the websites people visit. Users who install them, he suggested, are voluntarily accepting that exposure.
This reasoning proved central to the outcome. Meanwhile, much of the media coverage had framed the dispute around web scraping concerns, but the ruling ultimately turned on a narrower, more technical question of legal standing.
The Browsergate Report and Its Origins
The controversy traces back to a report published earlier this year by a German entity called Fairlinked, titled “Browsergate.” The report accused LinkedIn of violating European Union restrictions on collecting “special category data,” such as racial, ethnic, or political information that can sometimes be inferred from installed extensions.
Fairlinked additionally argued that LinkedIn’s practices ran afoul of California privacy law, a violation the report claimed could carry a $5,000 penalty per affected user in the state. Interestingly, reporting from PXLnv later linked Fairlinked to staff at Teamfluence, an Estonian firm—a connection that raised questions about the report’s independence.
LinkedIn’s Defense Against the Scanning Allegations
In its motion to dismiss, LinkedIn offered a different explanation for the scanning. The company claimed Teamfluence had been building its own browser extension designed to scrape LinkedIn data, which would violate platform policy. As a result, LinkedIn said it scans for known extensions partly to catch this kind of abuse.
Cybersecurity researcher Tyler Reguly, an associate director at Fortra, told SecurityWeek that LinkedIn’s scanning appeared limited to detecting whether certain extensions were installed. In other words, he found no evidence the company was extracting deeper data from those tools.
What Happens Next
Ganan’s attorney, J.R. Howell, told Ars Technica he’s weighing a federal appeal or refiling the case in California state court. Howell also disclosed that he previously worked with Fairlinked on unrelated matters, though he maintains that work concluded before he filed the Ganan complaint.
The EU angle remains unresolved. Fairlinked’s GDPR-based arguments haven’t been tested in a European court, so the international side of this dispute could still play out separately.
LinkedIn, for its part, continues to face other legal pressure. The company is currently defending a separate antitrust class action alleging it controls roughly 97% of the professional social networking market.
Frequently Asked Questions
What was the LinkedIn Browsergate lawsuit about?
It accused LinkedIn of scanning visitors’ browsers for thousands of extensions and sending that data back to the company without disclosing the practice in its privacy policy.
Why did the judge dismiss the case?
The plaintiffs couldn’t prove they had extensions installed that shared private data with LinkedIn, so the court ruled they lacked standing to sue.
Did LinkedIn actually scan for browser extensions?
Independent researchers confirmed the scanning occurred, though security experts say it appeared limited to detecting extension presence rather than extracting deeper data.
Could the case still move forward?
Possibly. The plaintiffs’ attorney is considering an appeal or refiling in California state court, and the EU-focused claims haven’t been addressed by a court yet.
Is LinkedIn facing other legal issues?
Yes. The company is separately defending an antitrust lawsuit claiming it holds about 97% of the professional networking market.
