Lenovo Group is currently embroiled in a major class-action lawsuit in California, USA, filed by Almeida Law Firm on behalf of plaintiff Spencer Christy. The lawsuit accuses Lenovo of breaching the 'Bulk Sensitive Data Transfer Regulations' implemented by the U.S. Department of Justice in April 2025. These regulations are designed to safeguard the behavioral data of U.S. citizens from being transferred to 'countries of concern', thereby mitigating potential national security risks.

The plaintiff contends that Lenovo, utilizing pre-installed software and hardware trackers, collected behavioral data, biometric information, and geolocation data from U.S. users without obtaining explicit consent. This data was then allegedly transmitted to servers located in China, thereby posing a threat to U.S. national security. However, Lenovo has refuted all allegations, asserting that its data processing practices adhere strictly to U.S. laws and industry standards. The company further emphasized that U.S. user data is securely stored in data centers situated in North Carolina and Singapore, and has never been transferred to China.