A US$20.5 million settlement has been agreed to resolve consolidated class action litigation against CVS Health and the advertising technology firm Criteo over tracking technologies on the CVS Health website and CVS Pharmacy mobile app. The suit, pending in Broward County, Florida, alleges the tools collected users' personal and protected health information and transmitted it to third parties including Criteo, Adobe, Medallia and Quantum Metric without knowledge or consent, and pleads negligence, breach of confidence, invasion of privacy and violations of the Electronic Communications Privacy Act. The defendants deny wrongdoing. A separate US$2,037,751.46 fund resolves claims against American Wellness Corp, with class payments estimated between US$51.14 and US$102.29; the deadline for claims, objections and opt-outs is 30 October and the fairness hearing is set for 15 January 2027. The pattern has direct analogues in Australia, where OAIC guidance treats third-party analytics and advertising pixels on health-related pages as a disclosure risk.
| Attribute | Detail |
|---|---|
| Sector | Healthcare |
| Date | 2026-09-25 |
| Source | HIPAA Journal |
| Reliability | Tier 2 |