Google was named in a sweeping federal class-action lawsuit filed late Tuesday, alleging the tech giant “secretly” and unlawfully activated its Gemini AI assistant across its communication platforms, including Gmail, Chat, and Meet. The lawsuit claims this move allows Google to be sued over secret Gemini AI activation in Gmail, alleging the tool “accesses and exploits” the private, confidential communications of hundreds of millions of users without their knowledge or consent, in what the complaint frames as a mass-scale violation of California’s wiretapping laws.
The lawsuit, filed November 11, 2025, in the U.S. District Court for the Northern District of California, alleges this default-on activation occurred in or around October 2025. It further claims that while users can disable the feature, the opt-out control is “buried” in complex privacy settings, making it inaccessible to the average user and rendering any claim of “consent” illusory.
Key Facts: The ‘Thele v. Google’ Lawsuit
- The Case: A proposed class-action lawsuit, Thele v. Google LLC (25-cv-09704), was filed in federal court in San Jose, California, on November 11, 2025.
- Core Allegation: The suit claims Google activated its Gemini AI “by default” in October 2025 for all users of Gmail, Google Chat, and Google Meet, without providing notice or obtaining consent.
- The Claimed Harm: This activation allegedly allows Google to “access and exploit the entire recorded history of its users’ private communications,” including “literally every email and attachment sent and received.
- Legal Basis: The lawsuit accuses Google of violating the California Invasion of Privacy Act (CIPA), a 1967 law that prohibits the recording of or “eavesdropping” on confidential communications without the consent of all parties.
- The ‘Opt-Out’ Issue: The complaint argues that the opt-out process is non-transparent and requires users to “dig into Google’s privacy settings,” meaning the vast majority of users remain unaware their private messages are being processed by the AI.
The Allegation: A ‘Secret’ Shift to Default-On
The central claim of the Thele v. Google lawsuit is a fundamental shift in how Google deploys its powerful AI. Previously, advanced AI features in products like Gmail (such as Smart Compose or summarization) were either limited or presented as explicit, opt-in features.
The lawsuit alleges that in October 2025, this changed. Without a clear notification, update, or consent-request screen, Google allegedly enabled Gemini for all users. This, the plaintiffs argue, changed the basic function of Google’s communication tools from a private conduit to a “surveillance” tool.
According to the complaint, this activation grants the Gemini AI system “sweeping access to user emails, messages and video calls.
This case moves the legal battle over AI from Google’s past to its present. While an earlier 2023 class-action lawsuit (filed by the Clarkson Law Firm) accused Google of unlawfully training its AI models by scraping public and private data, this new Thele lawsuit accuses Google of using the live, active AI to intercept and process current private communications.
At Stake: The California Invasion of Privacy Act (CIPA)
The legal foundation for the lawsuit is CIPA, a California law that is stricter than federal regulations. CIPA is an “all-party consent” law, meaning it is illegal to record or “eavesdrop” on a confidential conversation unless all parties in that conversation consent.
The lawsuit’s argument is that:
- An email, a private chat, or a Google Meet call is a “confidential communication.”
- Google’s Gemini AI, by processing this data in real-time, is effectively “intercepting” or “recording” it.
- Google has not obtained consent from the user or from the other people in the communication (the sender of an email, the other participants in a chat).
This legal theory, if successful, would classify Google’s AI as an unauthorized wiretapping device. This is a critical legal challenge, as it attempts to apply a 1967 law to a 2025 technology, arguing the principle of privacy remains the same.
Data & Scale: A Lawsuit of Unprecedented Scope
The potential implications of this case are staggering, primarily due to the scale of Google’s user base and the high statutory penalties under CIPA.
1. The User Base: 1.8 Billion+
As of 2024, Google’s free consumer Gmail service has over 1.8 billion active users globally. While the lawsuit originates in California, it seeks class-action status, and CIPA has been used to penalize companies for violations affecting California residents, regardless of where the company is based.
2. The Financial Stakes: $5,000 Per Violation
The California Invasion of Privacy Act allows for statutory damages of up to $5,000 per violation. In the context of a class action, “per violation” could be interpreted as per user, or even per email or message processed. If the class is certified and Google is found liable, the financial exposure could be astronomically high—potentially one of the largest privacy penalties in history.
3. The Policy Contradiction
The lawsuit’s claims appear to stand in direct contrast to Google’s public-facing policies, especially for its enterprise customers. In its “Generative AI in Google Workspace Privacy Hub,” Google repeatedly assures its paid Workspace customers:
However, the lawsuit targets the broader user base, including the 1.8 billion consumer (free) accounts. The terms of service for these “Unpaid Services” are different. Google’s Gemini API terms, for example, state that for “Unpaid Services,” Google does use content to “improve, and develop Google products and services and machine learning technologies.
The lawsuit alleges this practice was secretly extended to the core of Gmail itself, where users have a much higher expectation of privacy.
Expert Analysis & User Impact
The lawsuit captures a growing “chilling effect” that generative AI has had on user trust. Even if AI features are intended to be helpful, the perception of surveillance can be damaging.
“This is the quintessential digital privacy nightmare,” said one technology analyst, speaking on background. “The core allegation is that the ‘feature’ is the ‘bug.’ The ‘helpfulness’ of the AI is predicated on it reading everything, and the lawsuit claims Google skipped the most important step: asking permission.”
This sentiment is echoed in user forums. In a public Reddit thread in late October 2025, one user described their reaction to AI features appearing in their email:
Legal experts note the case will likely hinge on whether Google’s updated terms of service—which users implicitly agree to by using the product—constituted “consent” under CIPA. The plaintiffs argue that “consent” hidden in a terms of service update for such an invasive action is not legally sufficient.
What to Watch Next
As a newly filed case, the legal battle has just begun. The key developments to watch will be:
- Google’s Official Response: The company has not yet commented on the Thele lawsuit. Its first move will likely be a motion to dismiss, which will outline its core legal defense.
- Class Certification: The plaintiffs’ attorneys will petition the court to certify the case as a class action, representing all affected users in California or nationwide. This is often the most significant battle in such lawsuits.
- Regulatory Scrutiny: This lawsuit will undoubtedly trigger investigations by data protection authorities in the U.S. and, most notably, the European Union, which operates under the even stricter GDPR.
Conclusion
The lawsuit Thele v. Google LLC is a direct challenge to Google’s ambitious AI integration. It moves the privacy debate from the abstract (training data) to the immediate and personal (reading live emails).
While Google has long maintained its commitment to user privacy, this case alleges it crossed a critical line by converting its 1.8-billion-user email service into a default-on AI processing engine without explicit, informed consent. As Google pushes to win the generative AI race, this lawsuit argues it may have violated one of the oldest and most powerful privacy laws on the books, risking a historic legal and financial reckoning.
