[Enforcement library](/enforcement)

# Sutter Health analytics litigation

Patients alleged that analytics and advertising tools on the MyHealthOnline portal disclosed private information without authorisation. The settlement provides a $21.5 million fund.

Sacramento County Superior Court · CIPA and related privacy claims

- Case record
- What this record establishes
- Checks for your own systems
- Sources and limits

## Case record

| Fact | Record |
| --- | --- |
| Authority or court | Sacramento County Superior Court |
| Law or issue | CIPA and related privacy claims |
| Procedural record | Administrator reports distribution began 21 August 2026 |
| Distribution began | 21 August 2026 |
| Amount | US$21,500,000 · Class settlement fund |
| Source reviewed | 16 October 2026 |

[Settlement source](https://www.sutteranalyticssettlement.com/en)

## What this record establishes

A settlement notice, party agreement or approval order does not establish liability after a trial. Where final approval, appeal resolution or payment is not established by the cited record, this page says so. A scheduled hearing and a proposed fund are not an award or proof of payment.

## Checks for your own systems

Inth’s technical interpretation: use this case to choose what evidence to collect in your own implementation. These checks are not instructions issued by the court or regulator.

- Inspect URLs, referrers, search terms, form values and account identifiers in outgoing payloads.
- Check health, financial and authenticated surfaces separately from public pages.
- Compare browser traffic with server relays, vendor logs and the purposes described to users.

> **Limits of technical evidence**
> A browser capture can show a transfer. It cannot establish every server operation, the terms of a contract or whether a law applies. Compare observed behaviour with the relevant disclosures and legal assessment.

## Sources and limits

[Settlement source](https://www.sutteranalyticssettlement.com/en)

Source review: 16 October 2026. This record covers the cited source and procedural stage. It does not audit the organisation’s present implementation or establish every later legal development.

[Browse the enforcement library](/enforcement)