Up to $20.5M CVS Digital Privacy Settlement Ends Lawsuit Over Website and App User Data Disclosures

New to ClassAction.org? Read our Newswire Disclaimer

CVS Pharmacy, Inc. and digital advertising firm Criteo Corp. have agreed to an up to $20.5 million class action settlement to resolve a lawsuit that alleged the companies violated federal and state law by disclosing the data of CVS website and app users to third parties without consent via embedded online tracking technologies. 

Want to stay in the loop on class action lawsuits that matter to you? Sign up for ClassAction.org’s free weekly newsletter. 

The CVS digital privacy class action settlement received preliminary approval from the court on July 27, 2026. Eligible to participate in the settlement are all living individuals who accessed CVS digital properties, including CVS.com, CVSHealth.com and the CVS mobile app, in the United States at any time prior to July 27, 2026. 

The court-approved CVS settlement website can be found at CVSDigitalPrivacySettlement.com. 

Settlement class members who submit a timely, valid claim form with proof showing their membership in the settlement class—that is, documentation evidencing their interaction with CVS digital properties—can receive a cash payment of up to $10. 

Examples of acceptable forms of proof to submit with a CVS claim form include browser search history, screenshots showing dates, and email receipts of online purchases. 

Class members who submit a claim form with no proof of their membership in the settlement class can receive a cash payment of up to $5. 

Related Reading: Health Data Privacy Investigations

Each class member’s cash payout may be reduced on a pro rata (proportional) basis, depending on the total number of valid claims filed, among other factors. 

To file a CVS settlement claim form online, class members can head to this page and enter the login ID and PIN found on their copy of the settlement notice. Those who did not receive a login ID and PIN or are unable to locate them can head to this page to file a claim without logging in. Class members can also email the settlement administrator at info@CVSDigitalPrivacySettlement.com to request their login ID and PIN. 

Alternatively, class members can download a PDF claim form to print, complete and return by mail to the settlement administrator.

All CVS digital privacy settlement claim forms must be filed online or by mail by November 16, 2026. 

The court will decide whether to grant final approval to the CVS/Criteo settlement following a hearing on December 1, 2026. Settlement money will begin to be distributed after the deal receives final approval and any appeals are resolved. 

The class action lawsuit against CVS Pharmacy and Criteo alleged that the companies unlawfully disclosed the health information, personal information, browsing details and other identifiers and data of CVS website and app users to third parties without consent by way of embedded tracking technologies in CVS’s digital properties. 

Check out ClassAction.org’s lawsuit list for the latest top class action lawsuits.