Lenovo Transfers Website Users’ Sensitive Personal Data to Chinese Parent Company, Class Action Claims

New to ClassAction.org? Read our Newswire Disclaimer

A proposed class action lawsuit claims that Lenovo collects detailed personal information of consumers who visit its website via embedded tracking technologies and illegally shares the tracked data with its Chinese parent company.

Want to stay in the loop on class action lawsuits that matter to you? Sign up for ClassAction.org’s free weekly newsletter.

The 38-page lawsuit alleges that Lenovo—which has “long been recognized” as a national security threat due to its operation under Chinese jurisdiction—has intercepted and used the electronic communications of “potentially millions” of Americans in violation of the Electronic Communications Privacy Act and various other privacy laws.

When a user visits the Lenovo website, the complaint explains, a number of coded tracking technologies—like web beacons, pixels, real-time bidding scripts and cookies—are loaded and instantaneously begin to record user data. These trackers are made both in-house and by a number of third parties, such as Meta, TikTok and Google, contributing to an extensive advertising infrastructure controlled by Lenovo, the suit relays.

Per the complaint, the personal data collected by these tracking technologies and obtained by Lenovo includes IP addresses, device metadata, full URLs, referring pages, persistent identifiers (such as cookie, device and mobile advertising IDs full of advertising data) and other contextual information.

According to the lawsuit, Lenovo facilitates the interception and collection of site visitors’ private communications and device activities to build detailed user dossiers that can be circulated to its Chinese parent company. Lenovo Group Limited, headquartered in Beijing, is subject to Chinese law, which obliges entities to cooperate with government surveillance efforts and provide access to private user data, the case states.

Related Reading: Lorex Home Security Cameras Made With Tech From Banned Chinese Company, Class Action Lawsuit Alleges

Per the lawsuit, Lenovo’s data sharing practices violate a rule issued by the U.S. Department of Justice in April 2025 called Preventing Access to Americans’ Bulk Sensitive Personal Data and United States Government-Related Data by Countries of Concern, also referred to as the Bulk Data Transfer Rule. The rule intends to prevent large-scale transfers of sensitive information to “countries of concern,” including Cuba, Iran, North Korea, Russia, Venezuela and China, to ensure adversarial countries cannot “surveil, analyze, or exploit American citizens’ behavior,” the case says.

“In the hands of a foreign adversary, such data can be used to assemble detailed behavioral profiles, identify psychological or financial weaknesses, and monitor individuals in sensitive roles including, but not limited to, jurists, military personnel, journalists, politicians, or dissidents,” the complaint reports.

The case adds that Lenovo admits to this conduct in its website privacy policy, which affirms that the company transfers user data to the People’s Republic of China without the required safeguards and protections.

The Lenovo class action lawsuit looks to represent all individuals in the United States whose electronic communications with Lenovo’s website were intercepted and whose communications and personal data, including persistent identifiers and behavioral activity, was used on or after April 8, 2025.

Check out ClassAction.org’s lawsuit list for the latest open class actions.