[Enforcement library](/enforcement)

# Kaiser Permanente patient-portal litigation

The private action alleged disclosure of patient information through tracking on authenticated websites and mobile apps. The administrator lists a final order and a $46 million base settlement fund.

US District Court, Northern District of California · Wiretap and privacy claims

- Case record
- What this record establishes
- Checks for your own systems
- Sources and limits

## Case record

| Fact | Record |
| --- | --- |
| Authority or court | US District Court, Northern District of California |
| Law or issue | Wiretap and privacy claims |
| Procedural record | Final settlement order dated 22 July 2026 |
| Final order | 22 July 2026 |
| Amount | US$46,000,000 · Base settlement fund, not a civil fine |
| Source reviewed | 16 October 2026 |

[Settlement source](https://kaiserprivacysettlement.com/)

## What this record establishes

A settlement notice, party agreement or approval order does not establish liability after a trial. Where final approval, appeal resolution or payment is not established by the cited record, this page says so. A scheduled hearing and a proposed fund are not an award or proof of payment.

## Checks for your own systems

Inth’s technical interpretation: use this case to choose what evidence to collect in your own implementation. These checks are not instructions issued by the court or regulator.

- Inspect URLs, referrers, search terms, form values and account identifiers in outgoing payloads.
- Check health, financial and authenticated surfaces separately from public pages.
- Compare browser traffic with server relays, vendor logs and the purposes described to users.

> **Limits of technical evidence**
> A browser capture can show a transfer. It cannot establish every server operation, the terms of a contract or whether a law applies. Compare observed behaviour with the relevant disclosures and legal assessment.

## Sources and limits

[Settlement source](https://kaiserprivacysettlement.com/)

Source review: 16 October 2026. This record covers the cited source and procedural stage. It does not audit the organisation’s present implementation or establish every later legal development.

[Browse the enforcement library](/enforcement)