One of the suits, filed in the Northern California district of U.S. District Court alleges that the tracking tool, dubbed Meta Pixel, collected sensitive medical information without consent from patient portals for UCSF Medical Center and Dignity Health.
Another suit filed in California federal court, also alleges that the tracking tool has been installed at more than 664 health system and medical provider websites and is receiving private medical data when patients access hospital websites for healthcare providers.
The tool, which allegedly sends Facebook patients’ data when people schedule appointments in exchange for analytics about the ads that the health system places on Facebook and Instagram, has raised concerns regarding its HIPAA compliance.
Under HIPAA, covered entities are prohibited from sharing identifiable patient health information with third parties like Facebook, unless consent is given.
The news site The Markup conducted an investigation into the tool and said it had found no evidence that the health systems nor Facebook were obtaining patients’ consent.
Facebook’s corporate parent Meta said the tool isn’t meant to send sensitive health information to the company.
According to Meta, if information such as medical conditions, treatments or mental health status is sent by mistake, Meta Pixel will filter out that information and prevent the data from feeding into ads.
Both suits are seeking compensatory damages paid to consumers.
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.