Six health systems and vendors have closed or advanced tracker lawsuits, and the recurring remedy is not cash for patients but a promise to stop instrumenting the front door. The settlements, disclosed November 12, 2026, all stem from allegations that pixel and analytics tools handed sensitive health data to third parties without consent. Every organization denies wrongdoing.
Prime Healthcare gives up ad tech
The largest structural term belongs to Prime Healthcare. Beyond a $20 cash payment and a year of identity monitoring, the system agreed to keep Google Analytics and Meta Pixel code off its websites for five years and to stand up a Web Governance Committee running annual audits. Any tracking vendor it does use must sign a business associate agreement. Opt-outs close December 21, 2026, with a final fairness hearing on March 9, 2027.
Cash pools and portal classes
Fertility Centers of Illinois put $375,000 into a fund covering anyone who visited its site between September 2020 and December 2024. Dental Intelligence faces a $5.75M fund over appointment scheduling through its LocalMed portal from March 2022 to June 2025. Tenet’s Saint Francis Hospital-Memphis class covers portal users, form submitters and urgent care check-ins from 2017 through September 2023, paying $16 plus two years of monitoring. USC Arcadia Hospital offers a share of $200,000, and Missouri Delta Medical Center pays $20 to portal users going back to 2017.
What the terms tell a compliance officer
The BAA requirement and five-year code ban are the parts worth copying into a vendor contract review. Tracking tools that touch a patient portal or appointment flow are handling PHI, and the settlement record now treats access logging, vendor agreements and site governance audits as the price of using them at all.
