A class-action lawsuit filed against Costco Wholesale Corporation in early 2026 has captured national attention, alleging that the retail giant collected and used customer email addresses for targeted marketing purposes without proper consent under state privacy laws. The lawsuit, filed in the Western District of Washington, claims that Costco violated the California Consumer Privacy Act and similar state statutes by sending promotional emails to customers who had not affirmatively opted in to marketing communications. With over 130 million cardholders in the United States and Canada, the potential scope of this case is enormous, and the outcome could set significant precedent for how major retailers handle customer data and email marketing practices.
For Costco members across the country, this lawsuit raises important questions about privacy rights, data collection practices, and whether the emails cluttering their inboxes were legally obtained. Understanding the details of the case, who qualifies as a potential plaintiff, and what remedies are being sought is essential for any Costco shopper who has ever provided their email address at checkout, online, or through the Costco mobile application.
What Happened: The Costco Email Lawsuit Explained
The lawsuit, filed by lead plaintiff Maria Gonzalez of Sacramento, California, alleges that Costco systematically collected customer email addresses through its membership database, online shopping platform, and in-store checkout kiosks, and then used those addresses to send promotional emails containing product recommendations, sale announcements, and personalized marketing content. According to the complaint, Costco failed to obtain the affirmative, opt-in consent required under the CCPA and similar privacy laws in other states before sending these marketing communications.
Under the CCPA, businesses operating in California must obtain clear and affirmative consent from consumers before using their personal information for marketing purposes. The lawsuit argues that Costco's practice of adding email addresses to its marketing list as a condition of membership or through pre-checked boxes at checkout does not constitute valid opt-in consent. The complaint further alleges that Costco's privacy policy, which was updated in 2025, buried the email marketing disclosure in dense legal language that most consumers would not read or understand.
Costco has responded to the lawsuit by stating that its email marketing practices comply with all applicable laws and that its privacy policy clearly describes how customer information is used. The company has also noted that all marketing emails include a conspicuous unsubscribe link, and that customers can opt out of email marketing at any time through their account settings. However, the plaintiffs argue that opt-out mechanisms are insufficient under laws that require opt-in consent.
Key Allegations
The complaint outlines several specific allegations against Costco. First, the company allegedly sent marketing emails to customers who had provided their email addresses solely for membership or transactional purposes, such as receipt delivery and account management, without separately obtaining consent for marketing use. Second, Costco allegedly used email addresses collected through its website and mobile app for personalized marketing without adequately disclosing this practice in a clear and conspicuous manner. Third, the lawsuit alleges that Costco shared customer email addresses with third-party marketing partners for co-branded promotions without obtaining explicit consent from members.
Who Is Affected?
The potential plaintiff class in this lawsuit is vast. According to Costco's most recent annual report, the company operates 897 warehouses in the United States and Canada, with approximately 132 million paid cardholders. Of these members, an estimated 85 million have provided email addresses to Costco through membership registration, online shopping, or in-store data collection. The lawsuit seeks to represent all Costco members in the United States who received marketing emails from Costco without having affirmatively opted in to such communications.
If you are a Costco member who has received promotional emails from the company, you may be eligible to join the class-action lawsuit. The lawsuit covers marketing emails sent between January 1, 2024, and the present date. Even if you have since unsubscribed from Costco's marketing emails, you may still be eligible for relief if you received such emails without prior consent during the covered period. Members who signed up for Costco's email marketing through a clear opt-in process, such as checking an unchecked box specifically for marketing emails, are excluded from the class.
What Remedies Are Being Sought?
The lawsuit seeks both monetary and injunctive relief on behalf of affected Costco members. Monetary damages include statutory damages of $100 to $750 per affected consumer per violation under the CCPA, which, given the potential class size of millions of members, could amount to hundreds of millions or even billions of dollars in total damages. The complaint also seeks punitive damages for Costco's alleged willful violations of privacy laws.
Injunctive relief requested in the lawsuit includes a court order requiring Costco to implement a clear opt-in consent mechanism for all email marketing communications, to cease sending marketing emails to members who have not affirmatively consented, and to provide clear and conspicuous disclosures about how customer email addresses are used for marketing purposes. The plaintiffs are also requesting that Costco engage an independent third-party auditor to review and certify its compliance with privacy laws on an ongoing basis.
For individual Costco members, the practical impact depends on the outcome of the litigation. If the class is certified and the plaintiffs prevail, members could receive individual payments estimated between $50 and $200, depending on the total damages awarded and the number of class members who file claims. However, the primary benefit of the lawsuit may be the injunctive relief, which would change Costco's marketing practices going forward and establish precedent for the broader retail industry.
Legal and Industry Implications
The Costco email lawsuit arrives at a time of heightened scrutiny over corporate data practices and consumer privacy. The patchwork of state privacy laws, including the CCPA in California, the Virginia Consumer Data Protection Act, and similar laws in Colorado, Connecticut, and other states, has created a complex compliance landscape for national retailers. Costco, like many large companies, has attempted to navigate these requirements with a single privacy policy that applies to all members nationwide, an approach that critics argue is insufficient to meet the varying requirements of different state laws.
The outcome of this lawsuit could establish important precedent for how national retailers handle email marketing consent across state lines. If the court rules that Costco's current practices violate the CCPA, it could trigger a wave of similar lawsuits against other major retailers, including Walmart, Target, Amazon, and grocery chains that use email marketing extensively. Legal experts note that the case could also influence federal privacy legislation, as Congress considers a national privacy law that would preempt state statutes.
The retail industry's email marketing ecosystem is vast and lucrative. According to a 2025 study by the Data & Marketing Association, email marketing generates an average return of $36 for every dollar spent, making it one of the most cost-effective marketing channels available. Retailers like Costco use personalized email campaigns to drive foot traffic and online sales, with industry estimates suggesting that targeted email marketing accounts for approximately 20 percent of total retail e-commerce revenue.
Why This Matters in 2026
The Costco email lawsuit is more than a legal dispute between a retailer and its customers. It is a landmark case that will shape the future of consumer privacy and marketing practices in the United States. As data-driven marketing becomes increasingly sophisticated, with retailers using artificial intelligence and machine learning to personalize communications at scale, the question of how and when companies can use customer information has never been more important. This case will test the strength of state privacy laws and determine whether major corporations can continue to use broad consent mechanisms or must adopt more specific, affirmative opt-in practices.
For Costco members and all American consumers, the implications are clear. Your email address is a valuable piece of personal data, and you have the right to control how it is used. Whether this lawsuit results in a massive settlement, sweeping changes to Costco's marketing practices, or a legal precedent that affects the entire retail industry, the message to companies is unmistakable: consumer privacy matters, and the era of treating email consent as an afterthought may be coming to an end.
Frequently Asked Questions
Am I eligible to join the Costco email lawsuit? If you are a Costco member in the United States who received marketing emails from Costco between January 1, 2024, and the present without having affirmatively opted in to email marketing, you may be eligible to join the class-action lawsuit. You do not need to have actively unsubscribed to be eligible.
How much money could I receive from this lawsuit? Individual payouts, if the lawsuit is successful, are estimated to range from $50 to $200 per affected member, depending on the total damages awarded and the number of class members who file claims. The primary benefit, however, may be the changes to Costco's marketing practices going forward.
Does this lawsuit affect other retailers? While the lawsuit is specifically against Costco, the legal precedent it establishes could affect other major retailers that use similar email marketing practices. A ruling against Costco could trigger similar lawsuits against Walmart, Target, Amazon, and other companies that collect and use customer email addresses for marketing without clear opt-in consent.