Medical technology company Medtronic has been handed a lawsuit following allegations that it impermissibly shared users’ private health information with Google and other unspecified third parties. The class action lawsuit was filed on August 30, 2023 in the Central District of California.
The plaintiffs in the case are users of Medtronic’s InPen system, a smart insulin delivery device used by individuals with diabetes to monitor insulin levels and dosage. The suit revolves around the assertion that the company has been disclosing the users’ personally identifiable information (PII) and protected health information (PHI), collectively referred to as ‘Private Information’, without users’ explicit consent.
Should the allegations be upheld, they would reflect a gross violation of privacy rights, as well as potential noncompliance with federal laws enacted to protect the transmission of personal health information. The suit may open up a broad range of questions about the handling and sharing of patient data in the healthcare technology landscape.
Experts watching the case have opined that its outcome could potentially influence the manner in which tech companies operating in the healthcare vertical handle private user data moving forward. After all, an acknowledgment of wrongdoing or a ruling against Medtronic could set a significant precedent for similar cases in the future.
On a note specifically pertinent to legal professionals and corporate entities, this case should serve as an important reminder of the legal obligations involved in handling sensitive user data. It underlines the necessity for stringent data handling policies that balance the capabilities of modern tech with the rights and protections of individual users.
For a deeper understanding of the allegations against Medtronic, read more on the JD Supra website .