Dermatology & aesthetic clinics may be secretly tracking patients online — Were you affected?

Was your privacy violated by a dermatology or aesthetic clinic’s website or emails?

Individuals who visited a dermatology or aesthetic clinic website or opened one of their emails may have had their personal data collected without consent. Fill out the form on this page to see if you qualify for this class action investigation.

Dermatology and aesthetic clinics are booming, offering a range of services from injectables to laser treatments. Because many of these procedures are considered medical treatments, these clinics are often subject to the same regulations as doctors, particularly when it comes to protecting patient information.

Despite this, some clinics are secretly using tracking pixels and other website tracking tools to collect detailed data about website visitors — including IP addresses, location and browsing activity — often without consent. This lack of transparency can put your personal information at risk and may even violate federal and state data privacy laws. If your privacy was compromised, you may be eligible to join a class action investigation.

What are tracking pixels?

Tracking pixels are tiny images embedded in websites and emails that allow companies to monitor user activity. Often only a single pixel large, these website tracking tools collect information such as page visits, clicks, and browsing behavior, giving companies detailed insights into how users interact with their content.

Operating quietly in the background, tracking pixels are seamlessly integrated into website and email content, making them virtually invisible to the typical user. This makes it easy for companies to gather personal data without your knowledge or consent, raising serious data privacy concerns.

Legal protections for data collection and website tracking

While businesses may use website tracking tools, including tracking pixels, they are required to comply with strict federal and state regulations that govern the collection, storage and sharing of personal information. These rules are designed to protect consumers’ data privacy and ensure that dermatology clinics and other companies handle personal information responsibly.

Federal protections against data collection

The Federal Trade Commission (FTC) was built to protect consumers from unfair and deceptive business practices. One of the many things this organization does is regulate how and when companies can collect and share personal information. If an aesthetic or dermatology clinic uses tracking pixels to share personally identifiable information (PII) without clear disclosure or obtaining user consent, it may be violating federal law.

Additionally, many dermatology and aesthetic clinics are subject to the Health Insurance Portability and Accountability Act (HIPAA). Under HIPAA, any business that handles health-related information is required to follow stringent guidelines regarding the collection, storage and disclosure of data. Sharing any health-related data — including treatment inquiries or IP addresses tied to medical content — without consent could constitute a HIPAA violation.

CCPA: Protecting California residents

In addition to federal protections, California residents have added privacy rights under the California Consumer Privacy Act (CCPA). Enacted in 2018, the CCPA gives consumers the right to:

• Know what personal information is being collected and how it is used or shared
• Request that personal information be deleted from a company’s records
• Opt out of the sale of personal information to third parties
• Correct inaccurate personal data
• Limit the disclosure of sensitive information

Under the CCPA, businesses are required to inform consumers when they collect personal information and give them the ability to opt out. Dermatology or aesthetic clinics that use tracking pixels without obtaining proper consent or letting users know they are in use may be in violation of CCPA regulations.

Take action if your privacy was compromised

If you believe your personal information was collected without consent by an aesthetic or dermatology clinic, you may be eligible to join a data privacy class action lawsuit investigation. This investigation is currently focusing on clinics that allegedly used tracking pixels or other website tracking tools to share patient data. Some of these clinics include:  

• Advanced Dermatology and Cosmetic Surgery
• California Skin Institute
• Forefront Dermatology
• Ideal Image
• LaserAway
• Novuskin
• Pure Medical Spa
• Ritacca Cosmetic Surgery & Medspa
• Sanova Dermatology
• Schweiger Dermatology Group
• Skin Laundry
• South Coast MedSpa
• U.S. Dermatology Partners
• West Dermatology
• And more

If you interacted with one of these clinics online, you can confidentially share your experience using the form on this page. Your participation could help hold these clinics accountable for potential data privacy violations.

Fill out the form on this page to see if you qualify for a free case evaluation.