CVS Health & Criteo, AmWell Reach $22.5M+ Settlements Over Unauthorized Health Data Tracking Two major class-action lawsuits have resulted in multimillion-dollar settlements over allegations that healthcare and digital advertising companies unlawfully shared users’ sensitive health data with third parties via website tracking tools. CVS Health & Criteo Settlement ($20.5M) CVS Health and digital advertising firm Criteo have agreed to a $20.5 million settlement to resolve claims that their use of web tracking technologies on the CVS website and mobile app led to the unauthorized disclosure of users’ personal and protected health information (PHI). The consolidated lawsuit Brewer, et al. v. CVS Pharmacy, Inc. and Criteo Corp. alleges that tracking tools embedded in CVS’s platforms transmitted sensitive data to companies like Criteo, Adobe, Medallia, and Quantum Metric without user knowledge or consent. The plaintiffs accused the defendants of negligence, breach of confidence, invasion of privacy, and violations of the Electronic Communications Privacy Act, though CVS and Criteo deny any wrongdoing. The settlement, preliminarily approved by a Florida circuit court, covers all individuals who accessed the CVS Health website or app before July 27, 2026. Class members with proof of access may claim up to $10, while those without documentation may receive up to $5, subject to pro rata adjustments if claims exceed the fund. The deadline for objections and opt-outs is November 1, 2026, with claims due by November 16. A final fairness hearing is scheduled for December 1, 2026. AmWell Settlement ($2M+) Separately, American Wellness Corp. (AmWell) has agreed to a $2,037,751.46 settlement to resolve allegations that its LiveHealth Online website and mobile apps shared users’ personally identifiable medical information and confidential communications with third parties via tracking pixels. The lawsuit Polk v. American Well Corp. filed in California, accused AmWell of violating the Federal Wiretap Act, California’s Invasion of Privacy Act, and other state laws. The settlement, which does not admit fault, covers U.S. users who booked appointments on LiveHealth Online platforms between October 2024 and August 2025. After deductions for legal fees and administrative costs, eligible claimants may receive between $51.14 and $102.29, depending on the number of valid claims. The deadline for objections, opt-outs, and claims is October 30, 2026, with a final fairness hearing set for January 15, 2027. Both cases highlight growing scrutiny over healthcare companies’ use of tracking technologies and their compliance with privacy laws.