Meta Pixel Healthcare Privacy Litigation

Meta Platforms is facing a sweeping class action alleging that its Meta Pixel tracking tool — a snippet of JavaScript code widely used for advertising analytics — was improperly deployed on the websites and patient portal login pages of major hospital systems across the United States. When patients scheduled appointments, searched for doctors, or logged into healthcare portals, the Pixel allegedly captured and transmitted sensitive data including medical conditions searched, appointment details, physician names, and button-click actions to Meta, all without patients' knowledge or consent. Dozens of major health systems, including UCSF Medical Center, Advocate Aurora Health, and Dignity Health, have acknowledged using the Pixel and have since removed it following scrutiny from federal regulators and journalists.

The consolidated litigation, overseen in the Northern District of California, asserts violations of the Electronic Communications Privacy Act (ECPA), the California Confidentiality of Medical Information Act (CMIA), and HIPAA-related state law theories, as well as common law intrusion upon seclusion. A parallel investigation by the HHS Office for Civil Rights resulted in updated HIPAA guidance specifically addressing the use of online tracking technologies in healthcare. Meta has sought to compel arbitration and dismiss claims, but courts have largely allowed core claims to proceed. Settlements have been reached with several of the hospital co-defendants, and the litigation against Meta itself remains active with class certification briefing ongoing.