Meta Must Face Four Classes Over Pixel Tracking on Health Sites, Judge Rules

Meta Platforms is about to face a courtroom crowd. On October 30, 2026, U.S. District Judge William Orrick certified four classes of Facebook users who claim the company illegally harvested their health data, according to the HIPAA Journal. The ruling lands in the consolidated case In Re Meta Pixel Healthcare Litigation, in the Northern District of California.

At the center of it all is Meta Pixel, the tracking tool planted on hospital and prescription drug websites, portals and apps. The plaintiffs say it intercepted their communications and shipped sensitive details straight to Meta without anyone asking permission — names, conditions, prescriptions, and proof they were patients at all. That data, they claim, gets monetized and fed into targeted ads across Meta's platforms and the wider web.

The plaintiffs have flagged more than 660 hospital systems and medical providers that installed the pixel. They argue the tool's presence on those sites breaks Meta's contract with its users and runs afoul of federal and state law. Meta denies the whole thing, has tried twice to get the case thrown out, and says it disagrees with the certification ruling and will appeal.

The certified classes cover people whose sensitive data was allegedly collected from June 17, 2018, to the present. Their claims split across breach of contract, breach of implied contract, intrusion upon seclusion, and California's Comprehensive Computer Data Access and Fraud Act, with the CIPA piece narrowed to a California subclass. Three of the classes also bring federal Electronic Communications Privacy Act and California Invasion of Privacy Act claims.

One wrinkle worth noting: nobody can sue over HIPAA directly — there's no private right of action. The lawsuit doesn't assert HIPAA violations, but Orrick found the law relevant to what a reasonable consumer would expect from Meta's promises that its partners had lawful rights to the data they handed over.

Certification is a pit stop, not a verdict. Orrick hasn't ruled on whether Meta actually broke any laws, and if Meta's appeal fails, the classes get refined, a notice plan gets hashed out, and members choose whether to stay or opt out. Similar suits against healthcare providers have mostly ended in settlements rather than trials — defendants staring down a possible blockbuster jury verdict, plaintiffs risking steep legal costs.