Judge Certifies Four Classes in In Re Meta Pixel Healthcare Litigation Over Patient Data Collected via Meta Pixel
On October 30, 2026, Judge William Orrick (N.D. Cal.) certified four classes of Facebook users in the consolidated In Re Meta Pixel Healthcare Litigation against Meta Platforms. The plaintiffs allege that the Meta Pixel on healthcare provider and prescription drug websites, portals and apps sent sensitive patient data to Meta without consent. The data covered conditions, prescriptions, appointments and patient status, and the claims cover collection from June 17, 2018 to the present. Plaintiffs identified more than 660 hospital systems and providers using the Pixel. Meta disagrees with the ruling and plans to appeal. The court has made no finding that Meta broke any law.
Detalhes técnicos
- Certified classes: Patient Status Button-Click, Patient Health Information, Prescription Drug Information and Patient Device Intrusion. The last covers the _fbp cookie and Core Setup logic running on the user's device.
- Claims: breach of contract, breach of implied contract, intrusion upon seclusion, CIPA (California subclass only) and CDAFA. Three classes also assert ECPA and CIPA claims.
- HIPAA gives no private right of action and no HIPAA claims are asserted. The judge held that HIPAA is relevant to reasonable consumer expectations and to how Meta's contractual promises should be read.
Linha do tempo
-
Judge Certifies Four Classes in In Re Meta Pixel Healthcare Litigation Over Patient Data Collected via Meta Pixel
ler a análise desta fonte ocultar
On October 30, 2026, Judge William Orrick (N.D. Cal.) certified four classes of Facebook users in the consolidated In Re Meta Pixel Healthcare Litigation against Meta Platforms. The plaintiffs allege that the Meta Pixel on healthcare provider and prescription drug websites, portals and apps sent sensitive patient data to Meta without consent. The data covered conditions, prescriptions, appointments and patient status, and the claims cover collection from June 17, 2018 to the present. Plaintiffs identified more than 660 hospital systems and providers using the Pixel. Meta disagrees with the ruling and plans to appeal. The court has made no finding that Meta broke any law.
Technical Details
- Certified classes: Patient Status Button-Click, Patient Health Information, Prescription Drug Information and Patient Device Intrusion. The last covers the _fbp cookie and Core Setup logic running on the user's device.
- Claims: breach of contract, breach of implied contract, intrusion upon seclusion, CIPA (California subclass only) and CDAFA. Three classes also assert ECPA and CIPA claims.
- HIPAA gives no private right of action and no HIPAA claims are asserted. The judge held that HIPAA is relevant to reasonable consumer expectations and to how Meta's contractual promises should be read.