As first reported by USA Herald, a U.S. District Court in California has ruled that a proposed class-action lawsuit accusing Google of unlawfully collecting personal health information from healthcare websites may proceed—marking a pivotal moment in the broader debate over tech firms’ handling of sensitive medical data. Judge Vince Chhabria allowed most claims brought by anonymous consumers to move forward, limiting the case to alleged data collection that occurred before Google updated its guidance in 2023.
The lawsuit, originally filed in May 2023, alleges that Google captured individually identifiable health information through tracking tools like Google Analytics without user consent, using the data to bolster its advertising services. While Google denies wrongdoing and moved to dismiss the case, the court determined there was sufficient evidence to suggest Google may have intended to receive and use this information before its policy update. Claims under the federal Wiretap Act, California Invasion of Privacy Act, and several common law doctrines remain active, though some breach of contract allegations were dismissed.
Judge Chhabria noted that although Google advised providers not to send sensitive data after 2023, the company’s prior awareness of its technology’s capabilities may imply complicity in the earlier data collection practices. The case is being handled by several prominent privacy law firms on behalf of the plaintiffs, while Google is represented by Willkie Farr & Gallagher LLP. The court’s decision signals increased scrutiny over tech companies operating in regulated sectors like healthcare, where privacy obligations are especially stringent.
