PogoWasRight.org

Menu
  • About
  • Privacy
Menu

Cole v. Quest Diagnostics: The Third Circuit Weighs in on Pixels, Privacy, and Medical Data

Posted on November 21, 2025 by Dissent

Kathryn M. Rattigan of Robinson & Cole LLP writes:

Angela Cole and Beatrice Roche filed suit against Quest Diagnostics, claiming that Quest violated California’s privacy laws by letting Facebook’s Pixel tracker collect sensitive information when they used Quest’s websites, both the public pages and the password-protected patient portal.

Specifically, they pointed to two California laws:

  • California Invasion of Privacy Act (CIPA), which prohibits secret “interception” of communications; and
  • Confidentiality of Medical Information Act (CMIA), which protects patients’ medical information from unauthorized use and disclosure.

The complaint alleged that, when Quest installed the Facebook Pixel, their browsers sent page URLs, titles, and metadata straight to Facebook, while users were logged into Facebook.

The lower court tossed out all claims, and the Third Circuit agreed.

Read more at The National Law Review to find out why the Third Circuit agreed.

Related posts:

  • In 2023, Resolve to Fix Your Organization’s Meta Pixel Problem
  • Facebook Is Receiving Sensitive Medical Information from Hospital Websites
  • Mortgage Brokers Sent People’s Estimated Credit, Address, and Veteran Status to Facebook
  • Suicide Hotlines Promise Anonymity. Dozens of Their Websites Send Sensitive Data to Facebook
Category: BreachesCourtFeatured NewsHealthcareOnlineSurveillanceU.S.

Post navigation

← Closing the Privacy Gap: HIPRA Targets Health Apps and Wearables
UK privacy regulator has seen ‘collapse in enforcement activity,’ rights coalition says →

Search

Contact Me

Email: info[at]pogowasright.org
Security Issue: security[at]pogowasright.org
Mastodon: Infosec.Exchange/@PogoWasRight
Signal: Dissent.73
DMCA Concern: dmca[at]pogowasright.org

Research Report of Note

A report by EPIC.org:

State Attorneys General & Privacy: Enforcement Trends, 2020-2024

Categories

Recent Posts

  • U.S. Plans to Scrutinize Foreign Tourists’ Social Media History
  • ANNOUNCEMENT: EFF Launches Age Verification Hub as Resource Against Misguided Laws
  • FTC Denies Petition from SpyFone App CEO to Vacate 2021 Order
  • Privacy concerns raised as Grok AI found to be a stalker’s best friend
  • PRIVACY—S.D. Cal.: Employee did not waive privacy right in personal email data on company provided laptop, (Dec 5, 2025)
  • EU justice chief draws red line on privacy reforms
  • Kaiser Permanente to Pay Up to $47.5M in Web Tracker Lawsuit

RSS Recent Posts at DataBreaches.net

  • Teen who allegedly stole millions of personal data records arrested in Spain
  • Akira ransomware: FBI tallies 250 million in payouts
  • IE: HSE confirms second ransomware attack but ‘no evidence’ patient data was stolen
  • Examining impact of federal relief program after major healthcare cyberattack — Research Brief
  • Justice Department Announces Actions to Combat Two Russian State-Sponsored Hacking Groups
©2025 PogoWasRight.org. All rights reserved.