Skip to content

Menu

LexBlog, Inc. logo
NetworkSub-MenuBrowse by SubjectBrowse by PublisherJoin the NetworkGet StartedSubscribeSupportContact
Search
Close

CVS settles class action Web Tracker Privacy lawsuit for $20.5M!

By Peter Vogel on September 17, 2026
Email this postTweet this postLike this postShare this post on LinkedIn
1789661781-5140-4717-lxb_photoV5BFjJNm_Kslxb_photo-
Iris Yan, Unsplash

HealthCareInfoSecurity.com reported that “CVS Health and digital advertising firm Criteo have agreed to pay $20.5 million to settle claims that the retail pharmacy giant unlawfully disclosed personal and health information of patients to Criteo through web tracking technology embedded on the company’s websites and apps.”  The September 16, 2026 article entitled “CVS, Criteo Settle Web Tracker Data Privacy Suit for $20.5M” (https://tinyurl.com/3vvk5bkv) included these comments:

 The proposed class action litigation, filed in a Florida state court in May, alleged violations of the Electronic Communications Privacy Act, state statutory claims, breach of confidence, invasion of privacy and negligence by both companies.

“Through the third-party code it implemented on the website and app, CVS has, unbeknownst to plaintiffs and without their consent, enabled the third-party trackers’ interception, eavesdropping, and/or recording of information about plaintiffs’ and class members’ medical conditions, immunizations and vaccines, prescriptions and other private information, including their activity searching for and purchasing sensitive healthcare products,” the lawsuit claimed.

“By failing to receive the requisite consent, CVS breached its duty of confidentiality and aided the third-party trackers in unlawfully intercepting plaintiff’s private information,” the complaint alleged. Plaintiffs described the lapse as “egregious violations” of CVS patients’ right to a “reasonable expectation of privacy.”

Court documents don’t indicate how much CVS and Criteo are each contributing to the $20.5 million settlement. Under the proposal, eligible class members include “all living individuals who accessed the CVS Digital Properties in the U.S. prior to July 27, 2026,” the date on which the court approved the preliminary settlement.

A final approval hearing for the settlement is set for Dec. 1.

Interesting ending of the class action case!

First published at https://www.vogelitlaw.com/blog/cvs-settles-class-action-web-tracker-privacy-lawsuit-for-205m

  • Posted in:
    Class Action & Mass Torts, Health Care and Life Sciences, Privacy and Cybersecurity
  • Blog:
    Internet, IT & e-Discovery
  • Organization:
    Peter S. Vogel PC
  • Article: View Original Source

Call us at 1-800-913-0988 or email sales@lexblog.com.

Facebook LinkedIn Twitter RSS
The Library at LexBlog
  • About LexBlog
  • The Field We Built
  • Library at LexBlog
  • Our Beliefs
  • Our Team
  • Contact LexBlog
  • Disclaimer
  • Editorial Policy
  • Terms of Service
  • Get Started
  • Publishing Solutions
  • Compass
  • Submit a Request
  • Support Center
  • System Status
Copyright © 2026, LexBlog, Inc. All Rights Reserved.
Law blog design & platform by LexBlog LexBlog Logo