Insight
August 21, 2025

CA AG’s $1.55M Healthline Settlement: Key Lessons on Health Data, Opt-Outs, and Vendor Oversight (PLI PLUS)

California AG’s Healthline settlement tests CCPA’s reach over web tracking, setting precedent for health data enforcement.

In a sign of continued regulatory scrutiny on health data and advertising practices, on July 28, 2025, California Attorney General (the CA AG) Rob Bonta finalized a settlement with Healthline Media LLC over alleged violations of the California Consumer Privacy Act (CCPA). The CA AG’s complaint, announced on July 1, alleged multiple violations of the CCPA and its purpose limitation principle as well as California’s Unfair Competition Law, including ineffective opt-outs for targeted advertising, noncompliant vendor contracts, and deceptive privacy interfaces. The settlement agreement includes a significant monetary penalty and detailed injunctive terms.

Read our full analysis of this case in PLI Plus: “Article 3: CA AG’s $1.55M Healthline Settlement: Key Lessons on Health Data, Opt-Outs, and Vendor Oversight” (published August 19, 2025)

We would like to thank Federica De Santis for their assistance with this insight.