CVS has agreed to pay $20.5 million to resolve a class action lawsuit alleging the pharmacy giant shared customers' personal information with an advertising company, according to court documents. The settlement, which still requires final approval, could put cash in the pockets of millions of Americans who have used CVS's digital platforms.
The lawsuit claims CVS disclosed data collected on its website to Criteo, a global ad tech firm. CVS denies any wrongdoing but chose to settle the case to avoid a protracted legal battle. The company has not admitted liability.
Under the terms of the deal, affected individuals can receive either $5 or $10. The larger payment requires proof of use. The class includes "all living individuals who accessed the CVS Digital Properties in the United States prior to July 27, 2026." That encompasses anyone who visited CVS.com, CVSHealth.com, or used the CVS mobile app for any purpose—whether scheduling a vaccine, checking a prescription, ordering products, or printing photos.
To claim the full $10, filers must upload evidence such as browser search history, dated screenshots, or email receipts showing they accessed a CVS digital property before the deadline. Those without proof can still file for $5.
Claims can be submitted online or by mail and must be postmarked by Nov. 16. Payments will be issued via PayPal, Venmo, or Zelle. A final approval hearing is set for Dec. 1.
This settlement is the latest in a string of high-profile data privacy cases. Just last month, Meta agreed to a $17.1 billion settlement over allegations it failed to protect teen users—a deal some critics say misses a chance to curb teen addiction. Meanwhile, federal regulators continue to scrutinize how tech and retail companies handle consumer data.
For CVS customers, the clock is ticking. The claims process is straightforward, but the burden of proof for the higher payment may leave many with just the base amount. Still, for a company that touches millions of lives through its pharmacies and digital services, the settlement serves as a reminder that data privacy remains a costly liability.
Eligible individuals should act before the November deadline to secure their share of the fund. As with any class action, the total payout depends on how many claims are filed, but the minimum $5 is guaranteed for all who qualify.
