Kaiser Foundation Health Plan, a prominent insurance provider, has recently agreed to a settlement of between $46 million and $47.5 million to resolve a class action lawsuit. The lawsuit alleges that the company unlawfully tracked and shared sensitive data from millions of individuals through its websites and mobile applications.
The class members claim that Kaiser’s practices resulted in the unauthorized dissemination of sensitive patient information, including personal identifiers, medical histories, and interactions with healthcare professionals, to third-party tech companies such as Google and Microsoft. Despite the serious nature of the allegations, Kaiser has denied any wrongdoing.
Initially, the lawsuit identified multiple entities of Kaiser Permanente, including Kaiser Foundation Hospitals and Kaiser Foundation Health Plan of Washington, but over time shifted focus solely onto Kaiser Foundation Health Plan after two entities were dismissed.
Eligible class members include more than 13 million individuals from various states who accessed their patient portal accounts between November 2017 and May 2024. States involved in this settlement include California, Colorado, Georgia, Hawaii, Maryland, Oregon, Virginia, Washington, and Washington D.C. Current or former members of Kaiser are able to file a claim, regardless of their current enrollment status.
Individuals can submit a claim form by the deadline of March 12, 2026. Estimated payments are projected to be between $20 and $40, contingent on the number of valid claims filed.
The class-action settlement has received preliminary court approval, with a fairness hearing scheduled for May 7, 2026. Notices regarding the settlement are expected to reach affected individuals by January 16, 2026. This case highlights the increasing scrutiny over data privacy in the healthcare sector, underscoring the importance of safeguarding sensitive patient information in an increasingly digital world.
Additionally, Kaiser Permanente finds itself addressing another legal matter involving a $10.5 million settlement related to unsolicited text messages, reflecting broader issues concerning consumer rights and corporate accountability.