Three major settlements, two platform bombshells, and one very clear message: Your tracking grace period just expired.
This Week's "Oh Sh*t" Moment
Meta Flips from Passive to Aggressive
Remember when Meta would politely ask you to fix your non-compliant audiences? Yeah, that's over.
Starting Q3 2025, Meta is automatically scanning and nuking custom audiences and conversion events that smell like health conditions or financial qualifiers. Even if they were previously approved.
What's getting axed:
- Custom audiences with health-related names ("arthritis_interest_list" – see ya!)
- Custom conversions with condition or financial qualifiers
- Pretty much anything that makes it obvious you're targeting sick people
The sneaky part: Your campaigns won't pause immediately. They'll just... stop working. Performance tanks, new campaigns using those audiences get blocked at setup, and you're left wondering why your ROAS suddenly looks like a dumpster fire.
Translation: If you've been using descriptive audience names because it makes your life easier, go anonymize them. Right now. Not next quarter. Now.
Google Joins the Party
Google updated its Healthcare and Medicines policy in October 2025, and while they're being slightly nicer about it (7-day warning before suspension instead of instant account execution), the requirements are tightening.
What changed:
- New certification requirements for health advocacy campaigns
- Prescription drug terms now locked behind certification
- Simplified enforcement = no more gray areas
The silver lining: At least they're telling you before they nuke your account. Small mercies.
The Settlement Scoreboard
SSM Health MyChart: $31.50 Per Person (Final Hearing THIS WEEK)
Urgency level: 🔥🔥🔥 Final fairness hearing is November 21, 2025
SSM Health settled over Meta Pixel and tracking tools on their MyChart patient portal. The damage? Collecting patient status, physician names, health conditions, treatments, and facility visits and shipping it all to Meta and Google.
Class members get $31.50 cash plus a 12-month privacy membership. SSM denies wrongdoing but apparently $31.50 per affected user was cheaper than finding out what a jury thinks.
Why this matters: Patient portals are ground zero for pixel lawsuits. If you're running GA or Meta Pixel on authenticated pages, you're standing in the blast radius.
University of Tennessee Medical Center: $25 + Privacy Shield
- Data collection period: January 1, 2015 - September 30, 2023 (that's almost 9 years of exposure)
- Final hearing: December 8, 2025
- Claims deadline: December 9, 2025
Margaret Mary Community Hospital: Another $25
- Tracking period: 2020-2023
- Final hearing: December 18, 2025
- Claims deadline: December 1, 2025
Pattern recognition time: Notice how these settlements are all landing within weeks of each other? This isn't coincidence. Law firms smell blood in the water, and they're moving fast.
Tallahassee Memorial HealthCare: The "Even Your Website Isn't Safe" Edition
TMH settled over Google Analytics on their regular website (not even the portal). Class members get $17 plus a 2-year financial monitoring subscription.
The key quote from this case: "Google Analytics is explicitly not HIPAA compliant and cannot be used by covered entities to track activity on websites where individually identifiable health information is collected."
Read that again. Slowly. Then go check if you're running standard GA on your site.
The Math Is Mathing
A Chicago digital marketing firm is tracking these lawsuits and used the phrase "avalanche of lawsuits." Not "wave." Not "increase." Avalanche.
We're at 200+ class-action lawsuits in 2024 alone. That's roughly one every 1.8 days. And if you think your organization is too small to be a target, remember: Margaret Mary Community Hospital made this list.
Your Actual To-Do List (Not the Scary Kind)
This Week:
- Audit your Meta account for health-related audience names. Anonymize anything suspicious.
- Check if you're running standard Google Analytics on patient-facing pages. If yes, you have a problem.
- Look at your patient portal – any tracking pixels there? Cool cool cool cool cool. Remove them.
This Month:
- Document everything you're doing for compliance. If litigation comes, "we tried" beats "we ignored it."
- Consider server-side tracking if you need conversion data without the liability.
- Talk to your legal team about your current setup. Show them this newsletter. Watch their face.
The Bottom Line
The "we didn't know" defense died somewhere in 2023. We're now firmly in "you should have known" territory, and courts are agreeing.
The organizations settling right now? They're not the last ones. They're the early ones. The firms filing these lawsuits are getting faster, the platforms are getting stricter, and the settlements are getting bigger.
The good news: Unlike most compliance nightmares, this one has a clear solution. You can track conversions, run effective campaigns, AND stay compliant. You just can't do it the old way anymore.
The era of loose tracking practices isn't ending. It already ended. Some organizations just haven't gotten the memo yet.
Don't be one of them.