Healthcare Organizations Challenge Online User Tracking in Landmark Privacy Lawsuit

On November 2, 2023, a significant case was filed that could reshape legal proceedings related to online user tracking. The American Hospital Association and the Texas Hospital Association, together with Texas Health Resources and United Regional Health Care System, filed a lawsuit against the Secretary of the Department of Health and Human Services (HHS) and the Director of the HHS Office for Civil Rights (OCR).

The suit centers around the OCR’s guidance on the use of tracking technologies by entities compliant with the Health Insurance Portability and Accountability Act (HIPAA). The details of this filing and its potential consequences shed light on escalating concerns about data privacy in healthcare institutions.

The legal action was taken in response to the OCR’s instructions regarding the deployment and usage of third-party web trackers. These types of trackers, often employed to collect user data and behavior online, are largely unregulated, leading the plaintiffs to seek clearer rules and better protections for healthcare organizations.

Depending on the resolution of the lawsuit, future guidelines on how healthcare entities should protect and utilize their data may shift dramatically. The ripple effects of this judicial decision could reach far beyond the involved parties, bringing tangible changes to practices around digital data protection and usage.

For more details and follow-up updates on this evolving case, please refer to the legal analysis provided by Sheppard Mullin Richter & Hampton LLP.