Doe v. Adventist Health System/West
Summary
A California Court of Appeal (Second District, Div. Three) partially reversed and partially affirmed a trial court's denial of class certification in a putative class action alleging that Adventist Health shared patient information with Meta and Google via tracking pixels and analytics. The appellate court ruled on certification issues only, remanding some subclasses for further proceedings and explicitly declining to decide merits questions under CIPA or CMIA.
Litigation Status
Procedural Posture
Plaintiffs (four Does, current or former patients) filed a putative class action in Los Angeles County Superior Court alleging sharing of information via Meta Pixel and Google Analytics; the trial court (Judge Laura A. Seigle) denied class certification in full; the Court of Appeal reviewed and issued a partially favorable decision on certification and remanded.
Reported Holding
The Court of Appeal (filed July 24, 2026; certified for publication Aug. 24, 2026) reversed the trial court's denial of class certification for the health risk assessment (HRA) form subclass and for certain patient-portal subclass claims (including a CIPA Penal Code § 631(a) wiretapping claim), and affirmed the denial of class certification of the CMIA claims for the patient-portal subclass. The panel also affirmed the trial court's finding that plaintiffs forfeited certification under Penal Code § 632(a) due to briefing failures. The court held that whether transmitted URLs constitute 'contents' under CIPA or 'medical information' under CMIA is a merits question and that the trial court had prematurely resolved that issue for certification purposes. The panel also found a class action was superior given the modest damages at stake (at most $7,700 plus attorney fees per patient).
What the Court Decided
On class certification only: reversed the denial of certification for the HRA-form subclass and for certain patient-portal subclass claims (including a Penal Code § 631(a) CIPA claim); affirmed denial of CMIA-class certification for the portal subclass; affirmed forfeiture of a Penal Code § 632(a) certification effort for briefing failure; remanded to Los Angeles County Superior Court for further proceedings.
What the Court Did Not Decide
The court did not decide the merits of whether Adventist Health System/West violated CIPA or the CMIA, did not address HIPAA, and did not resolve federal claims; it treated merits issues as generally reserved for later proceedings.
Significance
Generally viewed as plaintiff-favorable. Characterizations of significance describe how the matter has generally been discussed in tracked public sources; individual holdings are often narrow, procedural, or fact-specific, and this page does not state or imply broader holdings than the sources support.
What This Page Does and Does Not Say
This page reports what our tracked public sources say about this matter — including, where identified, the procedural posture (for example, a ruling on a motion to dismiss is not a final merits decision). It does not report legal conclusions beyond those sources, does not predict outcomes, and does not constitute legal advice.
Technologies at Issue
- Meta Pixel
- Google Analytics
- tracking pixels
- cookies
- IP/user-agent fingerprinting
Third parties named or identified in tracked sources: Meta (Facebook), Google, Cerner (patient-portal host), Adventist Health System/West (defendant), Meta, Cerner, HealthAware, Adventist Health System/West.
Statutes Invoked
- California Invasion of Privacy Act (Pen. Code, §§ 630 et seq.); California Confidentiality of Medical Information Act (CMIA) (Cal. Civ. Code, §§ 56 et seq.)
- California Invasion of Privacy Act (Penal Code §§ 630–638.55); Confidentiality of Medical Information Act (Civil Code §§ 56–56.37)
Claims Asserted
- California Invasion of Privacy Act (CIPA) — Penal Code §§ 630 et seq.
- CIPA §632 (wiretapping/eavesdropping claim noted as forfeited)
- California Confidentiality of Medical Information Act (CMIA) (Cal. Civ. Code §§ 56 et seq.)
- California Invasion of Privacy Act (CIPA) - Penal Code § 631(a)
- CIPA - Penal Code § 632(a) (recording claim alleged but found forfeited for certification)
- Confidentiality of Medical Information Act (CMIA)
What This Matter May Mean for Website Operators
For operators using similar technologies, the recurring factual questions in matters like this one are whether advertising pixels transmit page URLs or hashed form data before a consent choice; what page URLs and query strings analytics tools share with third parties. Our scanner tests these behaviors empirically.
Detection of a similar technology on a website is an informational risk indicator, not a legal conclusion, and nothing in this section is legal advice.
Related Intelligence
Sources
- Doe v. Adventist Health System/West, B344951 (Cal. Ct. App. 2026)
- California Court Splits on Hospital Tracking Pixel Class Ruling
About This Page
Publisher: Inspection-Ready Institute, Inc. (DBA Crandall Consulting), an independent website compliance and risk consultancy. We are not a law firm and nothing on this page is legal advice.
How this content is produced: Facts are extracted from publicly available sources — court and government materials, recognized legal press, professional analysis, and industry reports — by our litigation intelligence engine, stored with full source provenance, and rendered from the database. Risk guidelines are computed by a deterministic formula, never by an AI model directly. See the full methodology.
Limitations: Counts labeled "Tracked" reflect matters identified in our source set and are not official court statistics. We report what courts decided and did not decide; we do not predict outcomes.
Corrections: If you believe anything on this page is inaccurate, contact us via the contact page and we will review the underlying sources promptly.
Is Your Website Creating Hidden Tracking Risk?
Scan your site for third-party tracking and potential wiretap exposure. Free, no account required.
Scan My Website