Penn Medicine $9.25 Million Settlement for MyPennMedicine Tracking Pixel Data

Penn Medicine has reached a $9.25 million class action settlement over allegations that its myPennMedicine patient portal used “tracking pixels” and analytics tools that secretly sent patients’ personally identifiable information to outside companies. The lawsuit focused on people who accessed the portal between January 23, 2021 and January 23, 2023 and had a Pennsylvania address on file during that time. Under the settlement, eligible class members can submit a claim for cash payments of up to $15. Penn Medicine agreed to the settlement without admitting wrongdoing, but it also agreed to make changes to how it uses tracking technologies on its website for at least two years. The case was filed because the plaintiffs argued Penn Medicine’s third-party data sharing happened without proper patient consent, violating the Pennsylvania Wiretapping and Electronic Surveillance Control Act. Its significance lies in how it mirrors a broader wave of lawsuits targeting privacy practices in digital health—especially the use of advertising and analytics infrastructure (including vendors like Meta and Google) that can collect and transmit information as pages load. Similar cases across the healthcare and consumer tech industries have increasingly challenged whether tracking is “consent-based” and whether patients are adequately informed, pushing companies to reassess web trackers, privacy disclosures, and consent mechanisms. The industry context is shaped by stronger expectations and enforcement around consumer privacy and electronic surveillance, and by the reality that healthcare platforms often embed third-party services that process user data in ways ordinary users can’t see. In this settlement, the legal process and the required payment claims (with deadlines such as Sept. 16, 2026) underscore that courts are treating certain online tracking behaviors as potentially actionable privacy harms, even when companies deny misconduct and resolve matters through settlements to reduce legal risk. For eligible patients, the settlement offers a concrete remedy, while the promised technology changes signal that providers may face growing regulatory and litigation pressure to limit third-party tracking and strengthen transparency and consent practices.