CVS Health CorpCVS Health agreed to a $20.5M settlement over alleged unlawful sharing of user health data via website tracking tools, adding compliance costs and potential limits on digital marketing.
CVS Health and ad tech firm Criteo agreed to a US$20.5 million settlement resolving website tracking litigation over user data. The suit alleged CVS Health shared personal and protected health information with third parties through online tracking tools without user consent, and the agreement covers claims that Criteo received sensitive CVS website visitor data allegedly used for targeted advertising. CVS Health, a US$114.0b healthcare group, runs an integrated mix of pharmacies, insurance services and health solutions, so scrutiny of how it handles personal data can ripple across several tightly regulated parts of its operations. The payment size is small compared with a business measured in hundreds of billions of dollars of revenue, yet it can still feed into compliance costs and potential limits on using tracking tools that support digital engagement. The next useful checkpoint is CVS Health's upcoming quarterly filing and management commentary, where investors can look for explicit discussion of any new data governance controls, changes to digital marketing practices with partners like Criteo, and whether management quantifies ongoing legal or compliance spend tied to consumer privacy.
CVS Health CorpCVS Health agreed to a $20.5M settlement over alleged unlawful sharing of user health data via website tracking tools, adding compliance costs and potential limits on digital marketing.
Criteo SaCriteo agreed to a $20.5M settlement over receiving sensitive CVS website visitor data used for targeted advertising, a privacy/legal hit.