Website tracking · Source dated
Website pixel lawsuits keep settling, even outside HHS enforcement
Two reported settlements show why website tools and advertising tags deserve an owner and a review, separate from HHS enforcement.
By Quantum Clinical Advisors · Published
Illustrative photography; not the organization or people discussed.
What happened
HIPAA Journal reported on June 23, 2026 that settlements were agreed in class action lawsuits against Bartholomew County Public Hospital, doing business as Columbus Regional Health in Indiana, and St. Joseph Hospital in Nashua, New Hampshire, over website tracking tools.
The lawsuits alleged that the tools disclosed patients’ personal and protected health information to third parties such as Meta and Microsoft without patients’ knowledge or consent. They also alleged that the data was used to enhance advertising technology and serve targeted ads. These are allegations and settlements; this summary does not state a finding of wrongdoing.
Reported terms for Columbus Regional Health included a one-time payment of $25.50 plus a 12-month membership in a digital privacy and identity protection service. St. Joseph Hospital’s reported terms included a one-time payment of $50 per class member. Both settlements also included fees and administration costs. These reported amounts do not indicate what a single practice would face.
Read the source (opens in a new tab)Why it's important to know
Private lawsuits are separate from HHS enforcement.
Even a small practice benefits from knowing which website tools and advertising tags load.
Legal questions about those tools belong with the practice’s attorney.
How this could potentially affect your practice
- Depending on your practice’s website tools, advertising or analytics tags could raise questions about information shared with third parties.
- Website changes might be a useful point to review which tags load and who owns that review.
- A privacy policy may need review if it does not accurately describe the tools on the site.
- The reported settlements could prompt a discussion with your attorney, but the reported amounts do not indicate what your practice would face.
Questions for your practice
These are QCA discussion points, not findings about your practice or a compliance certification.
- Which advertising or analytics tags load on the site?
- Does anyone review them when the site changes?
- Is the privacy policy accurate about them?
- Has the practice talked with its attorney about website tools?
Source and scope
HIPAA Journal: Columbus Regional Health; St. Joseph Hospital Settle Pixel Privacy Lawsuits (opens in a new tab). Source dated June 23, 2026. The reported facts above are summarized from the cited sources; the practice questions are QCA's commentary.
This article is general business information, not medical, legal or financial advice. Applicability depends on your practice and its activities. Consult qualified legal, compliance and IT advisers for decisions about HIPAA and other privacy obligations. QCA provides marketing and website consulting only and does not access patient information.