The suit also alleges that Old Navy unlawfully shares consumer data with third parties without informing consumers or seeking consent.
Old Navy, through its parent company Gap, declined to comment.
Old Navy isn't the only one to face similar charges.
For now, states have different privacy rules, but there is no unifying federal-level regulation about online privacy.
With no comprehensive federal online privacy legislation, companies are free to charge ahead without having to put privacy protections in place.
Persons:
Irina Raicu, Raicu, It's, Ari Lightman
Organizations:
Navy, Central District of, Old, Home Depot, General Motors, Ford, JCPenney, Markkula Center, Applied, Santa Clara University . Companies, Companies, JPMorgan, Verizon, Old Navy, Carnegie Mellon University's Heinz College
Locations:
Central District, Central District of California, California, U.S, Europe, Canada, Europe . Colorado , Connecticut , Utah, Virginia, Delaware, Florida, Iowa