Jennifer GaengSep 29, 2026 5 min read

CVS Agrees to $20.5 Million Settlement Over Website Data Sharing

Anderson - Circa April 2018: CVS Pharmacy Retail Location. CVS is the Largest Pharmacy Chain in the US II
Adobe Stock

If you've ever refilled a prescription on CVS.com, browsed the app, or ordered anything from CVS online, there's a class action settlement with your name on it.

CVS has agreed to a $20.5 million settlement after a lawsuit accused the company of illegally sharing customer data from its website and mobile app with Criteo — an advertising technology company — and other third parties, without customers' knowledge or consent. CVS denies any wrongdoing but agreed to the settlement to resolve the litigation.

The deadline to file a claim is November 16, 2026. Don't skip this one — unlike a lot of these settlements, the eligibility requirements are extremely broad.

Who Qualifies

Any US resident who accessed CVS.com, CVSHealth.com, or the CVS mobile app before July 27, 2026, is eligible. That's it. You don't have to have been hacked. You don't have to have suffered any documented harm. If you visited the CVS website to check store hours, looked up a prescription, or used the app to manage your pharmacy account at any point before late July — you qualify.

How Much You Can Get

There are two payout levels.

Banking, cash, money
Adobe Stock

Up to $5 with no documentation required. You fill out the claim form, confirm you used CVS's digital properties, and that's it.

Up to $10 if you provide proof. The claim form asks for documentation showing you accessed CVS.com, CVSHealth.com, or the CVS app before July 27, 2026. Acceptable proof includes browser search history, screenshots showing dates of access, or email receipts from online purchases through CVS.

The ten dollars isn't going to change your life. But five minutes filling out a form is a reasonable trade for it — especially if you have an email receipt sitting in your inbox from a CVS online order.

Key Dates

File your claim by November 16, 2026 on CVSDigitalPrivacySettlement.com. If you want to opt out of the settlement and preserve your right to sue CVS independently, you must submit an exclusion request by November 1. Written objections to the settlement terms are also due November 1. A final approval hearing is scheduled for December 1, 2026. Online claims are due by 10:59 p.m. CT on November 16, and mailed claims must be postmarked by November 6.

To file a claim or get more information, visit the official settlement website or call 1-888-654-1271.

What CVS Was Doing With Your Data

Criteo, the company at the center of this lawsuit, is one of the largest digital advertising platforms in the world — its business model is built on tracking consumer behavior across websites and apps to build detailed profiles that let advertisers target people based on their browsing habits. When you visit a retail website and suddenly start seeing ads for that same store everywhere you go online, Criteo is often the reason.

Code, HTML, php web programming source code. Abstract code background - 3d rendering
Adobe Stock

The lawsuit alleged that CVS integrated Criteo's tracking technology into its website and app and allowed it to collect customer data — browsing patterns, search behavior, health-related purchases — without proper disclosure or user consent. For a pharmacy specifically, the sensitivity of that data is higher than it would be for a clothing retailer. Health-related browsing and purchase data carries real privacy implications that go beyond typical consumer information.

CVS isn't the first major retailer to face this kind of lawsuit, and it won't be the last. Similar Criteo-related data privacy cases have been filed against Sephora, Kohl's, and several other major retailers in recent years, as plaintiffs' attorneys have zeroed in on the gap between what retailers disclose about third-party tracking and what they actually do with customer data.

The $20.5 million fund works out to a relatively small payout per claimant — which tells you something about how many people are potentially in the class. The more people who file, the smaller each individual payout may ultimately be. But the deadline is November 16, and the form is straightforward. Worth the five minutes.


Curious for more stories that keep you informed and entertained? From the latest headlines to everyday insights, YourLifeBuzz has more to explore. Dive into what’s next.

Explore by Topic