Data Breach

Meta Pixel Healthcare Data Privacy Litigation

Data Breach class action lawsuit

Case Overview

The Meta Pixel is a snippet of JavaScript code that website operators embed to track user behavior for advertising purposes. Beginning in 2022, investigative reports revealed that hundreds of hospitals and healthcare providers had installed the Meta Pixel on their patient portals and appointment scheduling pages, inadvertently (or negligently) transmitting sensitive patient data — including medical conditions searched, doctor appointments scheduled, and prescription information — directly to Meta without patient knowledge or consent. Plaintiffs brought class action claims under the Federal Wiretap Act, the California Confidentiality of Medical Information Act (CMIA), and various state consumer protection laws, arguing that Meta knowingly received and profited from illegally intercepted protected health information.

The litigation consolidated numerous cases against both Meta and the individual hospital systems. Separately, in July 2024, Meta agreed to pay $1.4 billion to the State of Texas to settle a parallel government enforcement action over the Pixel's collection of biometric data — the largest privacy settlement ever paid to a single state. The federal class action against Meta remains active, with plaintiffs continuing to pursue damages on behalf of millions of patients whose private health information was allegedly intercepted and used to build advertising profiles without their knowledge or consent.

Who May Qualify

Individuals in the United States who visited a hospital, healthcare provider, or health system website that had the Meta Pixel installed on patient-facing pages (such as patient portals, appointment schedulers, or symptom checkers) and whose health-related information was thereby transmitted to Meta Platforms without their consent.

Frequently Asked Questions

What is the Meta Pixel healthcare lawsuit about?

The lawsuit alleges that Meta's tracking tool (the Meta Pixel), which was embedded on hospital and healthcare websites, secretly collected and transmitted patients' sensitive medical information to Meta for advertising purposes — without patients' knowledge or consent, potentially in violation of HIPAA and federal wiretapping laws.

How do I know if my medical data was shared with Meta?

If you used an online patient portal, scheduled a medical appointment online, or used a symptom checker on a hospital website between approximately 2016 and 2022, your data may have been transmitted to Meta. Hundreds of major hospital systems were found to have had the Pixel installed.

Has Meta settled the healthcare data privacy lawsuit?

Meta paid $1.4 billion to settle a Texas state government action over related biometric data collection in 2024. The broader federal class action on behalf of patients is still ongoing, and no class-wide settlement has been announced as of mid-2025.