If you are a California resident who logged into Sutter Health's MyHealthOnline portal between June 10, 2015 and March 20, 2020, you could be in line for a piece of a $21.5 million privacy settlement that might put up to $90 in your pocket. The class action, filed in 2019 on behalf of roughly 1.6 million consumers, claimed that tracking tools on some Sutter webpages quietly sent personally identifiable and protected health information to outside companies. Sutter denies any wrongdoing, and the settlement does not count as an admission of liability.
How to check whether you qualify and file a claim
According to the Sutter Analytics Settlement, eligible Californians can file a claim online or mail in a paper form. Claims must be submitted electronically or postmarked by May 5, 2026.
The official site lists the settlement administrator's phone number, 1-888-835-0109, along with the mailing address for paper claims:
Sutter Health Analytics Litigation Settlement Administrator,
P.O. Box 4276,
Portland, OR 97208-4276.
Payouts will come from a $21.5 million fund and will be distributed on a pro rata basis, with payments capped at $90 per person, according to the administrator. The more people who file valid claims, the smaller each individual payment will be.
What the lawsuit alleged
Plaintiffs said Sutter used third-party tracking, analytics and advertising tools on certain webpages, including the MyHealthOnline login page, that could transmit patient information to outside companies such as Google and Meta. The complaint accused Sutter of disclosing patients' personally identifiable information and protected health information to third parties without consent, according to the San Francisco Chronicle.
The case, Jane Doe I and Jane Doe II et al v. Sutter Health, was filed in Sacramento Superior Court in 2019 on behalf of about 1.6 million Californians who used the portal during the covered period.
Sutter's response and what the settlement does (and does not) do
Both the settlement administrator's FAQ and the parties' agreement state that Sutter denies the plaintiffs' allegations and that the settlement is not an admission of liability. In other words, Sutter is paying to resolve the case, not because it concedes it broke the law.
The deal, reached in 2025 and approved by the court earlier this year, sets aside the $21.5 million fund to cover notice and administration costs, attorneys' fees, incentive awards for class representatives and payments to eligible claimants. If there is any money left over after those distributions, it will go as cy pres to privacy-focused nonprofits that the court approves.
Why this matters beyond individual payouts
Privacy lawyers and consumer advocates see this lawsuit as part of a broader wave of cases that test how health systems use web tracking technology on pages that interact with sensitive data. Similar actions and settlements involving other providers have pushed hospitals and insurers to comb through their websites, audit third-party tags and tighten data flows, according to Top Class Actions.
For patients, the Sutter case is a reminder that even routine clicks and logins on a health portal can have legal and privacy implications, whether or not there is a headline-grabbing data breach.
What to watch for next
No one gets paid until the settlement becomes fully final and any appeals are resolved. The exact amount each person receives will depend on how many valid claims are submitted.
If you think you might qualify, start by confirming your eligibility on the official settlement website. You can contact the settlement administrator at the listed phone number, or speak with an attorney if you have detailed questions about your situation or what documentation to keep.
For now, keep an eye on the court docket and the settlement site for updates on when payments are expected to go out and for any changes that could affect the May 5 claim deadline.
