CVS Settles $20.5 Million Lawsuit Over Customer Data Sale
Eligible online shoppers could receive up to $10 in compensation.
1CVS Faces Data Privacy Lawsuit
CVS has agreed to a $20.5 million settlement following allegations that it shared customer data with third parties, including advertising company Criteo. The lawsuit claims that CVS disclosed private health information and browsing data without consent. While CVS denies any wrongdoing, it settled to avoid further legal costs and business disruptions. The settlement covers customers who shopped on CVS websites or mobile apps before July 27, 2026.
2Eligibility and Claim Process
Customers who shopped on CVS platforms before July 27, 2026, are eligible to file a claim. The deadline for submission is November 16, 2026. Claimants without documentation may receive up to $5, while those with valid proof of eligibility could get up to $10. However, the final payout may vary based on the number of valid claims. Payments will be issued 120 days after court approval, expected by December 1, 2026.
3Opt-Out Option Explained
Class members have the option to opt out of the settlement by November 1, 2026. Opting out means forfeiting any settlement payment but preserves the right to sue CVS individually. This is a common feature in class action lawsuits, allowing individuals to pursue their own legal actions if they believe they deserve greater compensation than what the settlement offers.
4Payment Methods and Timeline
Approved claimants will receive payments via check, PayPal, Venmo, or Zelle. The final hearing for the settlement is scheduled for December 1, 2026. If the court approves the settlement, payments will be distributed within 120 days. This timeline ensures that all claims are processed and verified before funds are disbursed.
5Implications for Data Privacy
This lawsuit highlights growing concerns over consumer data privacy in the retail sector. CVS’s alleged sharing of sensitive information with third parties underscores the need for stricter data protection measures. The settlement serves as a reminder for companies to prioritize transparency and consent in handling customer data.
6Impact on CVS’s Reputation
The lawsuit and subsequent settlement could affect CVS’s reputation among consumers. While the company denies wrongdoing, the allegations may erode trust in its digital platforms. This case could prompt CVS to reevaluate its data-sharing practices and implement stronger safeguards to protect customer information.
7Broader Industry Implications
The CVS settlement reflects a broader trend of increasing scrutiny over data privacy in retail and healthcare. Companies in these sectors may face similar lawsuits if they fail to secure customer data adequately. This case could set a precedent for future legal actions and encourage stricter compliance with privacy regulations.
8What Customers Should Do
Eligible CVS customers should review the settlement details and decide whether to file a claim or opt out. Submitting a claim requires minimal effort but could result in a small payout. Those who believe they deserve greater compensation may choose to pursue individual legal action. Staying informed about data privacy rights is crucial in today’s digital landscape.
Original article: CNET — CVS Settles $20.5 Million Lawsuit Over Customer Data Sale