Columbus Regional Health $25.50 Settlement for Meta Pixel Patient Privacy Claims

Columbus Regional Health (Bartholomew County Public Hospital) agreed to a class action settlement tied to patient privacy after allegations that it used website tracking technology—specifically a “Meta pixel” and other trackers—to send confidential information to third parties without patient consent. The lawsuit focuses on people who registered for access to the hospital’s electronic health records and logged into a patient portal between Nov. 1, 2017, and June 30, 2022. Eligible Indiana class members include 20,763 current and former patients, and they may be able to submit a claim for a cash payment of $25.50 plus one year of “CyEx Privacy Shield Pro” (with benefits like VPN, password management tools, and monitoring services). The case was filed because the plaintiffs argued that digital tracking can reveal personally identifiable and protected health information (even if unintentionally) when users interact with online medical systems, potentially violating privacy expectations under federal healthcare privacy rules such as the HIPAA framework and broader consumer privacy principles. While Columbus Regional Health denied wrongdoing, the significance of the settlement is that it provides a direct remedy to affected patients and underscores growing legal attention on how healthcare providers’ websites share data through adtech-style tools. Similar disputes have been cropping up nationwide as hospitals, insurers, and other health entities grapple with how they deploy analytics and tracking technologies, and whether consent, contracting safeguards, and technical controls are adequate to prevent unauthorized disclosures—especially as regulators and courts increasingly scrutinize online data flows.