From the end of that article,
"In a statement which PCMag shared with Motherboard, Avast said “We are in receipt of the DPA's request and we will diligently work with the DPA in full cooperation. We take concern about our users' privacy very seriously, which is why we voluntarily made changes to our privacy policy in December, and made the decision to close Jumpshot last month. Avast's core mission is to keep its users' data safe online, and any practice that jeopardizes user trust is unacceptable. Protecting user privacy is embedded in everything we do in our business, and as such we remain focused on continuing to innovate our products for the benefit of our users and their privacy.”
Until the findings are published, all posts are simply speculation.