# CVS Settles $20.5 Million Lawsuit Over Customer Data Sale Eligible online shoppers could receive up to $10 in compensation. - **Source:** [CNET](https://brifing.si/source/ce507de7-7f24-4ff4-ab6d-7635abcc095a) - **Published:** 2026-09-24 - **Topic:** [Business](https://brifing.si/c/business) - **Original article:** - **On Brifing:** https://brifing.si/s/6c03ffa2-fb1a-4352-aab1-7f84f74ceda9 ## CVS Faces Data Privacy Lawsuit CVS has agreed to a $20.5 million settlement following allegations that it shared customer data with third parties, including advertising company Criteo. The lawsuit claims that CVS disclosed private health information and browsing data without consent. While CVS denies any wrongdoing, it settled to avoid further legal costs and business disruptions. The settlement covers customers who shopped on CVS websites or mobile apps before July 27, 2026. ## Eligibility and Claim Process Customers who shopped on CVS platforms before July 27, 2026, are eligible to file a claim. The deadline for submission is November 16, 2026. Claimants without documentation may receive up to $5, while those with valid proof of eligibility could get up to $10. However, the final payout may vary based on the number of valid claims. Payments will be issued 120 days after court approval, expected by December 1, 2026. ## Opt-Out Option Explained Class members have the option to opt out of the settlement by November 1, 2026. Opting out means forfeiting any settlement payment but preserves the right to sue CVS individually. This is a common feature in class action lawsuits, allowing individuals to pursue their own legal actions if they believe they deserve greater compensation than what the settlement offers. ## Payment Methods and Timeline Approved claimants will receive payments via check, PayPal, Venmo, or Zelle. The final hearing for the settlement is scheduled for December 1, 2026. If the court approves the settlement, payments will be distributed within 120 days. This timeline ensures that all claims are processed and verified before funds are disbursed. ## Implications for Data Privacy This lawsuit highlights growing concerns over consumer data privacy in the retail sector. CVS’s alleged sharing of sensitive information with third parties underscores the need for stricter data protection measures. The settlement serves as a reminder for companies to prioritize transparency and consent in handling customer data. ## Impact on CVS’s Reputation The lawsuit and subsequent settlement could affect CVS’s reputation among consumers. While the company denies wrongdoing, the allegations may erode trust in its digital platforms. This case could prompt CVS to reevaluate its data-sharing practices and implement stronger safeguards to protect customer information. ## Broader Industry Implications The CVS settlement reflects a broader trend of increasing scrutiny over data privacy in retail and healthcare. Companies in these sectors may face similar lawsuits if they fail to secure customer data adequately. This case could set a precedent for future legal actions and encourage stricter compliance with privacy regulations. ## What Customers Should Do Eligible CVS customers should review the settlement details and decide whether to file a claim or opt out. Submitting a claim requires minimal effort but could result in a small payout. Those who believe they deserve greater compensation may choose to pursue individual legal action. Staying informed about data privacy rights is crucial in today’s digital landscape. ## Sources covering this story - https://www.cnet.com/tech/cvs-20-million-settlement-claim/ — --- _Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._