Last updated 2026-07-09
TL;DR
Gen Digital (formerly NortonLifeLock) reached a $2.75 million TCPA class action settlement resolving claims that it made autodialed or prerecorded calls without proper consent. Class members who received covered calls may submit claims for a cash payment. The settlement admits no wrongdoing. Businesses should read it as a warning: consent records and calling list hygiene are not optional.
What is the Gen Digital TCPA settlement?
Gen Digital Inc., the cybersecurity company that owns Norton, LifeLock, and related brands (previously NortonLifeLock Inc.), was named in a federal class action alleging it placed autodialed and prerecorded phone calls to consumers without the prior express written consent required by the Telephone Consumer Protection Act, 47 U.S.C. § 227 [1]. The lawsuit claimed those calls broke the TCPA's rules on using an automatic telephone dialing system (ATDS) or an artificial or prerecorded voice to reach cell phones.
Gen Digital agreed to settle for $2.75 million without admitting liability [2]. That number matters for a case of this kind. It sits in the mid-tier of TCPA class settlements, well below the nine-figure headline deals but high enough that defense counsel would not have let it settle cheaply.
The settlement class covers people in the United States who got one or more calls from Gen Digital (or on its behalf) on a cell phone using an ATDS or prerecorded voice during the defined class period, where the person either had not consented or had revoked consent. The exact class period and eligibility rules live in the settlement agreement on file with the court.
This is not legal advice. If you think you may be a class member, read the official settlement notice and talk to a qualified attorney.
Why did Gen Digital get sued under the TCPA?
The TCPA, passed in 1991 and codified at 47 U.S.C. § 227, bars any person from making a call using an ATDS or an artificial or prerecorded voice to a cell phone "without the prior express consent of the called party" [1]. The statute lets private plaintiffs sue for $500 per violation, or up to $1,500 per willful violation, with no cap per plaintiff and class actions allowed [1].
The plaintiffs alleged that Gen Digital's outbound calling program, likely used for marketing or account notifications, reached cell phones in a way that triggered liability. The core fight in most TCPA cases is the same one. Did the defendant have valid, documented consent from each person called, and did it stop calling when asked?
Consent here is a formal thing, not a handshake. FCC rules require "prior express written consent" for marketing calls made with an ATDS or prerecorded voice, meaning a signed agreement (wet or electronic) that clearly authorizes calls and includes the phone number to be called [3]. A checkbox buried in terms of service, or a number collected for some other reason, generally fails that test.
Gen Digital is far from alone. UnitedHealthcare paid $2.5 million for alleged TCPA violations, Credit One Bank faced its own TCPA settlement, and Truist Bank resolved a class action under the same law. The pattern holds: big organizations with heavy call volume and shaky consent records make easy targets.
How much will class members receive from the Gen Digital settlement?
Individual payments from a $2.75 million gross fund depend on a handful of variables: attorneys' fees and costs (usually 25-33% in TCPA class actions), the named plaintiff's service award (often $2,500-$10,000), administration costs, and the number of valid claims filed [2].
Here is the math. Assume 33% in fees ($907,500), a $5,000 service award, and $150,000 in admin costs. That leaves roughly $1.69 million for claimants. If 50,000 people file valid claims, each gets about $34. If only 10,000 file, each gets about $169. TCPA settlements tend to see low claim rates, often 1-5% of the class, which is why per-claimant checks can end up higher than people expect.
The official settlement notice or website will publish the actual net fund and the estimated per-claimant range once those figures get calculated. Do not rely on any third-party guess, this article included, for the exact number.
| Settlement component | Typical range in TCPA class actions |
|---|---|
| Gross fund | $2.75 million (Gen Digital) |
| Attorneys' fees | 25-33% of gross fund |
| Named plaintiff service award | $2,500-$10,000 |
| Admin costs | $50,000-$250,000 |
| Estimated per-claim payment | Varies; often $30-$200 depending on claim rate |
Who qualifies to file a claim in the Gen Digital TCPA settlement?
You are likely a class member if you got a call on your cell phone from Gen Digital or a vendor acting for it during the class period, the call used an ATDS or prerecorded voice, and you either never gave consent or revoked it before the call came in.
You probably do not qualify if you are a current Gen Digital employee, a judge assigned to the case, or someone who previously opted out of a prior settlement covering the same claims.
The class notice mailed or emailed to potential members is the document that controls eligibility. If you did not get a notice but think you qualify, you may still file by visiting the official settlement administrator's website before the claim deadline.
One practical note. Callers often reached people who signed up for a free trial or bought a subscription, then got renewal-reminder or upsell calls. If you were a Norton or LifeLock customer who got calls you did not expect on a cell number, that scenario is worth checking against the class definition.
What is the claim deadline and how do you file?
Claim deadlines in TCPA settlements are set by the court and they are firm. Miss the deadline and you forfeit your payment, even if you are clearly a class member [2].
The official claim deadline, opt-out deadline, and objection deadline all appear in the court-approved settlement notice. Those dates can move with court scheduling, so the safe move is to check the settlement administrator's website directly instead of trusting a secondary source.
Filing is almost always simple. You submit your name, mailing address, email, the phone number that got the calls, and a declaration under penalty of perjury that you are a class member. Most TCPA settlements allow online filing. Some make you enter a claim ID from your notice.
You do not need an attorney to file. If you want to object to the terms or opt out entirely (which keeps your right to sue on your own), those processes have their own deadlines and steps laid out in the notice.
For a sense of how other cases handle timing, the Kaiser TCPA settlement claim deadline process followed a similar structure.
Does the Gen Digital settlement set any legal precedent?
No. Class settlements that never reach trial do not create binding precedent. The Gen Digital deal resolves the specific claims of the named plaintiffs and the class without any court ruling on the merits [2]. Gen Digital admitted no wrongdoing.
Settlements still carry signal value, though. When a company the size of Gen Digital writes a $2.75 million check to end a TCPA case, it tells every other outbound sales and marketing team that the risk is real and the cost of defending (let alone losing) a class action is brutal even when you think your consent process is airtight.
The developments that actually move the law come from the courts and the FCC. The Supreme Court's 2021 decision in Facebook, Inc. v. Duguid narrowed what counts as an ATDS, requiring that a system randomly or sequentially generate the numbers it dials rather than just pull from a stored list [4]. That ruling cut, but did not kill, TCPA exposure for predictive dialers and similar tech. The FCC has also been busy on consent rules; its 2023 rulemaking on one-to-one consent aimed straight at lead generator practices [5].
So this settlement changes nothing in the law itself. The broader TCPA environment around it stays very active. The TCPA news picture across 2024 and 2025 has been anything but quiet.
What can outbound sales and marketing teams learn from this case?
The Gen Digital case is a clean study in what breaks when a high-volume calling program outruns its consent records. Here is what every outbound team should audit.
Start with consent at the point of collection. Every cell number your team calls needs a paper trail showing when the person agreed to be called, exactly what they agreed to, and on what number. A generic terms-of-service click is not enough for marketing calls. You need express written consent that specifically authorizes autodialed or prerecorded calls [3].
Next, revocation. The FCC requires companies to honor opt-out requests promptly, and courts have treated continued calling after a revocation as a willful violation worth up to $1,500 per call [1]. Your CRM has to flag and honor "do not call" requests right away, not at the next batch update.
Third, vendor oversight. If a third-party call center or lead gen vendor dials on your behalf, you are still on the hook. FCC rules treat the company that benefits from the call as the caller for liability [3]. Sign contracts that require vendors to follow the TCPA, then audit them.
Fourth, list hygiene. Scrubbing against the National Do Not Call Registry is the baseline [6]. Past that, scrub against your internal DNC list, check for ported numbers (a cell your records label a landline may have been ported), and pull anyone who revoked consent.
Want a starting point? LeadCompliant's free compliance checklist walks through the consent documentation, DNC scrubbing, and revocation steps most small teams skip. It is not a substitute for a lawyer's review. It gives you something concrete to work from.
For teams that text as well as call, the same consent standards apply. The text message marketing and text messaging marketing rules under the TCPA track the voice rules almost exactly.
How does the Gen Digital settlement compare to other major TCPA settlements?
TCPA settlements run from a few hundred thousand dollars for small cases to over $75 million for the largest. Gen Digital's $2.75 million lands in the middle, in line with cases involving a clearly defined but not enormous class.
Here are several notable TCPA and telemarketing settlements for comparison [7][8]:
| Company | Settlement amount | Approximate year |
|---|---|---|
| Capital One | $75.5 million | 2014 |
| Dish Network (FTC/DOJ) | $280 million | 2017 |
| DIRECTV | $61 million | 2015 |
| Credit One Bank | ~$8 million | 2022 |
| UnitedHealthcare | $2.5 million | 2023 |
| Albertsons/Safeway | Undisclosed (class settlement) | 2023 |
| Gen Digital | $2.75 million | 2024 |
The Albertsons Safeway TCPA settlement and the Cash App TCPA class action settlement are two more recent cases in this same tier.
Settlement size does not track the severity of the alleged violations. It tracks class size, the strength of the plaintiff's evidence, the defendant's resources, and the cost and risk of fighting on. A $2.75 million settlement for a company like Gen Digital most likely reflects a sober litigation risk calculation, not an admission that millions of illegal calls happened.
What are the opt-out and objection options if you do not want to participate?
Class members get three choices when a settlement is proposed: file a claim and take the payment, opt out of the class, or object to the terms.
Opting out excludes you from the settlement. You give up your payment but keep your right to sue Gen Digital on your own for the same TCPA claims. For most people, the individual value of a claim ($500-$1,500 per call) may or may not beat the expected class payment, depending on how many calls you got. If you received a lot of calls or have strong evidence, a solo suit or a conversation with a TCPA attorney could make sense.
Objecting means you stay in the class but tell the court, formally, that you think the settlement is unfair or inadequate. The judge weighs objections before final approval. Objecting does not automatically get you more money, but it can delay the settlement or, in rare cases, push toward better terms.
Both opt-out and objection have court-set deadlines stated in the notice. Miss either one and you are usually locked into the settlement as a class member.
What should consumers do if they keep receiving unwanted robocalls?
Settling a class action does nothing to stop future calls. If unwanted calls keep coming, a few steps help.
Register your number on the National Do Not Call Registry at donotcall.gov [6]. Telemarketers have to scrub against the registry every 31 days; calls to registered numbers after that window are a separate DNC violation. Registration is free and permanent.
File a complaint with the FCC through its consumer complaint center at consumercomplaints.fcc.gov [9]. The FCC tracks complaint patterns and has brought enforcement actions based on complaint volume. One complaint rarely triggers anything, but complaints build the record.
File a complaint with the FTC at reportfraud.ftc.gov [10]. The FTC shares data with state attorneys general and law enforcement.
Document every call: date, time, calling number, any message left. If a prerecorded message got recorded, keep it. That evidence matters if you talk to a TCPA attorney about an individual claim.
For more depth, how to stop robocalls covers carrier-level blocking, third-party apps, and the complaint process in detail.
Are there state law claims layered on top of the TCPA in cases like this?
Yes, and businesses underestimate this constantly. The TCPA is a federal floor, not a ceiling. States can and do write stricter rules, and plaintiffs often stack state claims onto the same complaint [11].
California's Invasion of Privacy Act (CIPA) has been used to build TCPA-adjacent liability for call recording without consent, with a $5,000 per violation statutory penalty. Florida's Mini-TCPA (SB 1120) added restrictions on calls and texts that go past the federal statute. Washington, Oklahoma, and several other states run their own robocall or telemarketing laws.
Gen Digital, with customers across the country, would have faced potential state claims from California, Florida, and other active states alongside the federal TCPA claims. Settlement agreements in multi-state class actions often release both federal and state claims, which is worth reading closely if you are deciding whether to opt out.
If you operate in multiple states, the state law question is not hypothetical. A TCPA lawyer in Kentucky, for example, can advise on both federal exposure and the state-specific rules that touch your calling program.
What does the FCC's one-to-one consent rule mean for future cases like this?
The FCC's December 2023 order on one-to-one consent, which took effect in January 2025, is one of the biggest changes to TCPA consent rules in years [5]. It requires that prior express written consent for marketing calls come from and go to a single seller at a time. A consent form on a lead gen website that bundles consent to "marketing partners" or a list of companies no longer clears the bar.
The FCC's order states that consent must be "logically and topically associated to the interaction that prompted the consent," and that a consumer must clearly agree to receive calls from one named company at a time [5].
For companies like Gen Digital, which may have pulled consumer data through affiliate or lead gen channels, this rule directly tightens what counts as valid consent going forward. Cases filed after January 2025 get measured against the new standard, not the old bundled-consent framework.
The practical takeaway: if your current consent language reads something like "I agree to be contacted by Gen Digital and its partners," that phrasing is now legally suspect. It needs to name your company specifically and get collected in a context tied to your product.
The statute itself, 47 U.S.C. § 227(b)(1)(A), bars autodialed calls to cell phones "without the prior express consent of the called party" [1]. The FCC's regulations define what "prior express consent" means in practice, and those regulations just got noticeably stricter.
Frequently asked questions
What was the Gen Digital TCPA settlement amount?
Gen Digital agreed to a $2.75 million gross settlement fund to resolve TCPA class action claims that it made autodialed or prerecorded calls without required consent. Individual payment amounts depend on attorneys' fees, administration costs, and the number of valid claims filed. The company admitted no wrongdoing as part of the settlement.
Who is Gen Digital and what brands does it own?
Gen Digital Inc. is the cybersecurity company formerly known as NortonLifeLock. It owns Norton antivirus, LifeLock identity theft protection, Avast, AVG, and several other consumer security brands. The company rebranded to Gen Digital in 2022 after NortonLifeLock acquired Avast. The TCPA settlement involves calls tied to its marketing and customer outreach programs.
How do I file a claim in the Gen Digital TCPA settlement?
Visit the official settlement administrator's website listed in your class notice. You will need to provide your name, mailing address, the cell phone number that received the calls, and confirm eligibility. Most TCPA settlements allow online filing. If you did not receive a notice but believe you qualify, check whether the administrator's site allows self-identification claims before the deadline.
What is the claim deadline for the Gen Digital settlement?
The exact deadline is set by the court and published in the official settlement notice and on the settlement administrator's website. Deadlines can shift due to court scheduling, so confirm the current date directly on the official site rather than relying on a secondary source. Missing the deadline means forfeiting your right to a payment even if you are a valid class member.
Does the Gen Digital settlement cover text messages as well as phone calls?
The TCPA covers both calls and text messages made with an ATDS. Whether the Gen Digital settlement includes texts depends on the specific class definition in the settlement agreement, which may reference calls, texts, or both. Review the official settlement notice for the exact covered communications. Do not assume text messages are included without confirming against the class definition.
What is the TCPA and why does it allow class action lawsuits?
The Telephone Consumer Protection Act, 47 U.S.C. § 227, is a federal law passed in 1991 that restricts autodialed calls, prerecorded calls, and unsolicited faxes. It creates a private right of action with statutory damages of $500 to $1,500 per violation. Because violations are often systematic (the same dialing system calls thousands of people), courts allow class actions where one plaintiff represents all affected consumers.
Can I still sue Gen Digital separately if I accept the settlement payment?
No. Accepting a settlement payment and staying in the class means you release your individual TCPA claims against Gen Digital related to the covered calls. If you want to preserve your right to sue separately, you must opt out of the class before the opt-out deadline. The settlement agreement spells out exactly which claims are released, so read that section before deciding.
What does 'prior express written consent' mean under the TCPA?
Under FCC rules implementing the TCPA, prior express written consent for marketing calls made with an autodialer or prerecorded voice means a signed (wet or electronic) agreement that clearly authorizes the caller to make such calls to a specific phone number. The agreement must also include the number. A phone number given for a different purpose, like account creation, generally does not meet this standard.
How long do TCPA class action settlements take to pay out?
From preliminary court approval to final checks, TCPA settlements typically take 12 to 24 months. The process includes a notice period (60-90 days), a fairness hearing, any appeals, and then claim processing and distribution. Appeals by objectors can add another 6-18 months. If the Gen Digital settlement follows a typical timeline with no appeals, payments could arrive within 12-18 months of preliminary approval.
What should businesses do to avoid TCPA liability similar to Gen Digital's?
Document written consent for every cell number before autodialing or using prerecorded messages. Honor revocation requests immediately. Scrub calling lists against the National DNC Registry every 31 days. Audit any third-party vendor that makes calls on your behalf. Review your consent language against the FCC's January 2025 one-to-one consent rule, which bars bundled consents to multiple companies at once.
Is the $2.75 million Gen Digital settlement large or small compared to other TCPA cases?
It is mid-range. Major TCPA settlements have reached $75.5 million (Capital One, 2014) and the Dish Network FTC action reached $280 million in 2017. Many cases settle in the $1-5 million range, especially when the class is well-defined but not enormous. The Gen Digital amount is comparable to the UnitedHealthcare $2.5 million TCPA settlement and similar mid-tier cases resolved in 2023-2024.
Does the Facebook v. Duguid Supreme Court ruling affect the Gen Digital case?
The Supreme Court ruled in Facebook, Inc. v. Duguid (2021) that an ATDS must randomly or sequentially generate the numbers it dials, more than dial from a stored list. If Gen Digital's calling system dialed from a stored list of customers rather than randomly generating numbers, plaintiffs would need to work around Duguid. The settlement's existence suggests both sides saw meaningful litigation risk regardless of that ruling.
How does the FCC's 2025 one-to-one consent rule change TCPA exposure?
The FCC's rule effective January 2025 requires that TCPA consent for marketing calls name one specific seller and be obtained in a context logically related to that seller's business. Blanket consent to 'marketing partners' on a lead gen page no longer works. Companies that bought leads with bundled consent face retroactive exposure on those numbers and must rebuild their consent process under the new standard.
Sources
- U.S. Congress, Telephone Consumer Protection Act, 47 U.S.C. § 227: The TCPA prohibits autodialed or prerecorded calls to cell phones without prior express consent and provides $500-$1,500 per violation in statutory damages
- PACER / U.S. District Court, Gen Digital TCPA class action settlement docket: Gen Digital agreed to a $2.75 million class action settlement resolving TCPA claims without admitting liability
- FCC, Rules and Regulations Implementing the TCPA, 47 CFR § 64.1200: FCC rules require prior express written consent for autodialed or prerecorded marketing calls to cell phones, including a signed agreement specifying the number to be called
- U.S. Supreme Court, Facebook Inc. v. Duguid, 592 U.S. 395 (2021): The Supreme Court held that an ATDS must use a random or sequential number generator to produce or dial numbers, narrowing TCPA ATDS liability
- FTC, National Do Not Call Registry: The National DNC Registry allows consumers to register cell and landline numbers; telemarketers must scrub lists against the registry every 31 days
- U.S. Department of Justice, Office of Public Affairs (Dish Network $280 million judgment, 2017): Dish Network settled with the FTC and DOJ for $280 million in 2017 for TCPA and DNC violations, one of the largest telemarketing enforcement actions
- FTC, Press Releases and Enforcement Actions (Capital One telemarketing refunds, 2014): Capital One reached a $75.5 million TCPA class action settlement in 2014, one of the largest in TCPA history
- FCC, Consumer Complaint Center: Consumers can file informal TCPA and unwanted call complaints with the FCC through its online consumer complaint center
- FTC, Report Fraud: Consumers can report unwanted calls and telemarketing fraud to the FTC, which shares complaint data with state attorneys general
- National Conference of State Legislatures, State Telemarketing Laws: Multiple states have enacted telemarketing and robocall statutes that go beyond federal TCPA requirements, including California's CIPA and Florida's SB 1120