Supreme Court backs FCC fines in AT&T, Verizon location-data case

AT&T and Verizon just lost a high-stakes Supreme Court fight over $104 million in FCC fines, and the bigger issue was not just the money. In an 8-1 ruling, the court said the FCC did not violate the carriers' right to a jury trial when it fined them for selling users' real-time location data without consent. Justice Clarence Thomas dissented, but the majority reversed the 5th Circuit and sided with the FCC's enforcement process.

That matters because the carriers were not just arguing about this specific penalty. They were trying to knock out the mechanism behind it. AT&T had persuaded the US Court of Appeals for the 5th Circuit to overturn its fine last year, while Verizon lost in the 2nd Circuit. The Supreme Court took the case to resolve that split, and now the answer is clear: companies that get hit with FCC financial penalties cannot assume they can sidestep them by claiming the Constitution guarantees a jury trial first. For executives, that is a loud reminder that regulatory process itself can be the battleground, not just the underlying conduct.

The underlying conduct dates back to violations revealed in 2018, when the FCC found that the carriers had sold users' real-time location data without consent. The agency later fined AT&T and Verizon a total of $104 million in 2024. Both carriers paid their fines and then challenged them in circuit appeals courts, where judges' panels handled the cases. That setup became the legal flashpoint. The carriers argued the process deprived them of the Seventh Amendment right to a jury trial, an argument aimed at the structure of enforcement rather than the facts that triggered the penalties. The Supreme Court was asked to decide whether that structure itself crossed the line, and in today's ruling it said no.

For a company sitting under a regulator's microscope, this is the kind of ruling that can change the math on how to respond after an enforcement action lands. If the agency has authority to impose financial penalties through its own administrative process, and that process survives a Seventh Amendment challenge, then the path to undoing a fine gets narrower fast. That does not mean every agency fine is automatically safe from challenge, but it does mean the constitutional escape hatch that AT&T and Verizon tried to open just slammed shut here. And because the court resolved a circuit split, the ruling is not just a one-off loss for two telecom giants. It offers a cleaner national rule for future disputes of this kind.

The real-world stakes are broader than telecom. Any business that handles sensitive consumer data, especially location data, will read this as a warning that enforcement over privacy and consent issues can move from agency finding to actual dollar penalty, and then survive the trip through multiple appeals. That is especially relevant for operators in sectors where data collection is baked into the product and where consent language, app permissions, and partner-sharing arrangements can become legal tripwires. The message from the court is not that companies have no defenses. It is that fighting the process itself, at least on the jury-trial theory the carriers advanced here, is a tough road.

There is also a governance lesson for boards and senior teams. The fact pattern here spans several years: violations revealed in 2018, fines issued in 2024, then appeals in different circuits, and finally a Supreme Court ruling. That time gap is a feature of modern regulatory risk. By the time a company is debating whether to pay, appeal, or reserve for a penalty, the issue may already have morphed from an operational mistake into a legal precedent. In that environment, compliance failures are not just possible headlines. They can become long-tail liabilities that outlast product teams, leadership cycles, and even the original market context in which the decision was made.

For AT&T and Verizon, the immediate result is straightforward: the Supreme Court has left their fines in place and their constitutional challenge defeated. For everyone else, the signal is more subtle but arguably more useful. Agencies like the FCC can still be powerful enforcers when Congress has given them penalty authority, and companies that sell, share, or otherwise expose sensitive user information need to assume that enforcement can survive far beyond the first headline. If you are a CEO, CFO, or board member, the practical question is not only whether the underlying behavior is defensible. It is whether your compliance systems, contracts, consent flows, and legal reserves are strong enough to handle a regulatory case that may not end where you hope it does.