A proposed class-action lawsuit filed against Atlanta-based Grady Memorial Hospital alleges the health system disclosed patients’ protected health information to Google and other third parties through tracking technologies embedded on its website.
The lawsuit, filed May 20 in the U.S. District Court for the Northern District of Georgia, claims Grady Memorial Hospital Corp. used tools including Google Analytics and Google DoubleClick to collect and transmit patients’ online activity without their knowledge or consent.
Plaintiff Michelle Williamson alleges the tracking technologies transmitted information from users interacting with Grady’s website, including searches for physicians and medical conditions, appointment scheduling activity, provider pages viewed and other health-related browsing behavior.
According to the complaint, viewed by Becker’s, the information allegedly transmitted to third parties included IP addresses, cookie identifiers, appointment requests and URLs reflecting patients’ healthcare searches and treatment interests.
The lawsuit alleges Grady violated the federal Electronic Communications Privacy Act and was unjustly enriched by using patients’ information for advertising and analytics purposes.
The complaint also cites federal guidance issued by HHS warning healthcare organizations that online tracking technologies may expose protected health information when used improperly.
Ms. Williamson seeks to represent a nationwide class of individuals whose health information allegedly was disclosed through Grady’s website tracking tools.
The lawsuit seeks class-action certification, damages, injunctive relief, attorneys’ fees and changes to Grady’s privacy and website tracking practices.
A spokesperson for Grady Memorial Hospital told Becker’s the organization is aware of the lawsuit and is currently investigating.
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.