Privacy & Data Breach Class Action Settlements

Privacy and data breach class action settlements both stem from the mishandling of personal information, and they frequently overlap. A privacy case is brought when a company collects, shares, stores, or sells your personal data without proper consent — think biometric identifiers like faceprints and fingerprints, precise location history, browsing and app activity, or health and video-viewing habits quietly passed to advertisers. A data breach case arises when a company fails to protect that information and it is exposed or stolen in a hack, leak, or unauthorized disclosure, putting people at risk of identity theft and fraud.

Two fast-growing types of claim sit right at this intersection. Pixel tracking cases target websites — often hospitals, retailers, and streaming services — that embedded invisible tracking pixels (such as the Meta Pixel) which secretly transmitted sensitive activity to third parties. Wiretapping claims, brought under the federal Wiretap Act and state laws like California's CIPA and the Video Privacy Protection Act, cover session-recording tools, chat widgets, and trackers that intercept your communications or viewing history without consent. Both can entitle large groups of ordinary users to compensation even when no money was ever spent.

You generally qualify if you used the app, website, or service — or were a customer, patient, or member of the breached organization — during the defined class period, usually while living in a covered state. Because eligibility turns on your use or relationship rather than a purchase, most of these settlements require no proof of purchase and can be claimed in just a few minutes. Review the active privacy and data breach settlements below, confirm the class period and covered states, and file before each deadline.