Mount Sinai Medical Center Data Disclosure Settlement: Up to $20 Per Claim

Mount Sinai Medical Center of Florida (often referred to as Mount Sinai Medical Center) agreed to settle a class action alleging that, between June 10, 2021, and Sept. 18, 2025, its website and patient portal used third-party tracking, analytics, and advertising technologies that allegedly disclosed sensitive information to outside entities. The alleged data included personally identifying information, protected health information (PHI), and confidential communications—raising concerns that routine “online engagement” could reveal details patients never intended to share beyond the hospital. Under the settlement, eligible people who accessed the site or portal during the covered period may be able to claim an estimated cash payment of about $20 (which could vary with the number of valid claims) and receive a code to enroll in one year of free medical data monitoring, even if they don’t submit a cash claim. The lawsuit was filed to challenge whether the hospital’s online technology practices complied with privacy expectations and the legal duties that apply to health data handling. Its significance is that it targets a common industry problem: the use of third-party tools can sometimes enable data flows that may be inconsistent with privacy laws and obligations—especially when PHI is involved. In the broader regulatory landscape, healthcare providers in the U.S. must follow HIPAA and related federal and state privacy requirements, and many cases hinge on whether vendors and website technologies can access or transmit PHI without proper safeguards, agreements, or controls. Similar disputes have occurred across the healthcare and tech sectors as plaintiffs increasingly scrutinize “invisible” tracking mechanisms on medical websites and portals, pushing providers toward stricter data governance and vendor oversight. For class members, the practical impact is clear: there’s a defined window of eligibility, an easy claims process (online or by mail), and a monitoring benefit designed to help detect potential misuse. Importantly, the hospital denies the allegations, but still chose settlement to avoid the expense and uncertainty of trial—an outcome that often influences how other healthcare organizations evaluate their own website and portal technologies. The case also underscores the growing expectation that healthcare systems treat digital tracking like any other sensitive data pathway, requiring clear compliance controls, limited data sharing, and robust contractual and technical safeguards, which is why the settlement exists despite the denial of wrongdoing by Mount Sinai Medical Center