CVS Digital Privacy Settlement: $5 or $10, Claims Due November 16, 2026
Questions about this case?
AI Legal Assistant · free · answers in seconds · general information, not legal advice
The email titled “Legal Notice of Class Action Settlement” is about a real, court-approved case: Brewer v. CVS Pharmacy and Criteo. Anyone who used cvs.com, cvshealth.com or the CVS app in the United States before July 27, 2026 can claim up to $5 without proof or up to $10 with proof — one payment per household — by November 16, 2026. You do not need the email to file. Filing is free.
Editorially Reviewed — Content reviewed for accuracy using published legal research, government data, and verified court records. See our methodology
Reviewed by Leonard Goldberg, Editor · Last updated
What the Lawsuit Says Happened
The lawsuit concerns the “alleged disclosure of health or private information, personal information, browsing data, identifiers, or other data” of people who used CVS’s websites and app “to Criteo or other technology providers or third parties through technology embedded” on them. The settlement agreement describes Criteo as “a digital advertising company that provides advertising support, including on the CVS Website and CVS App.”
The complaint, as amended, alleges violation of the federal Electronic Communications Privacy Act, state statutory claims, invasion of privacy and negligence. CVS and Criteo deny violating any law. The court has not decided who is right — the case was settled, not tried.
Case Details
Brewer, et al. v. CVS Pharmacy, Inc. and Criteo Corp., Case No. CACE-26-008094, Circuit Court for the 17th Judicial Circuit in and for Broward County, Florida, before Judge Shari A. Olefson. This is a state court case, not a federal one. On the preliminary approval order the caption reads Ariel Brooks, et al v. Criteo Corp., et al — the same case. The settlement administrator is Simpluris, Inc. Official site: CVSDigitalPrivacySettlement.com.
Status: Settlement Open for Claims
Nothing is paid until the court grants final approval and any appeals end. Other CVS lawsuits — opioids, drug pricing and more — are separate; see our CVS lawsuit overview.
Who Can Claim
The class is “All living individuals who accessed the CVS Digital Properties in the United States prior to July 27, 2026.” That means cvs.com, cvshealth.com or the CVS app. No purchase, account or prescription is required. Shopping only in a CVS store does not count. Defendants’ officers and employees, court staff and anyone who opts out are excluded.
No email does not mean no claim. Membership depends on having used the sites, not on getting notice. The agreement provides for email notice where CVS and Criteo have addresses, plus publication notice. If you have no Login ID and PIN, the settlement website lets you file without logging in.
What You Can Actually Get
Read the fine print. Only one payment per household, meaning everyone at the same mailing address. Both amounts “may decrease proportionately depending on the number of Valid Claims submitted.” The headline $20.5 million is a “Maximum Cash Payment” that also covers administration costs, attorneys’ fees of up to 37.5% and service awards of up to $2,500 per class representative. Unclaimed money “shall revert to Defendants” — it does not go to other claimants. Payment comes by PayPal, Venmo, Zelle or check, and you may owe tax on it. Our news analysis works through the math.
CVS Digital Privacy Settlement Timeline
- 1
March 17, 2026 — Mediation
CVS, Criteo and the plaintiffs’ lawyers mediate before a JAMS mediator and keep negotiating until they reach terms.
- 2
May 15, 2026 — Complaint Filed
The plaintiffs file a putative class complaint in Broward County, Florida. The settlement was negotiated before the suit was filed.
- 3
July 27, 2026 — Preliminary Approval
Judge Shari A. Olefson preliminarily approves the settlement. The class covers anyone who used the CVS sites or app in the U.S. before this date.
- 4
September 2026 — Notice Emails Arrive
Court-ordered notices titled “Legal Notice of Class Action Settlement” reach users by email, many with a Login ID and PIN. News coverage follows.
- 5
November 1 and 16, 2026 — Deadlines
November 1, 2026 is the deadline to opt out or object. November 16, 2026 is the deadline to file a claim, online or postmarked.
- 6
December 1, 2026 — Final Approval Hearing
The court decides whether to finally approve the deal, by Zoom. Payments follow 120 days after final approval and any appeals.
Is It a Scam? Three Traps to Watch For
People searching “cvs scam settlement” or “cvs scam class action” mostly want to know whether the email is real. The settlement is real. The traps are copies of it:
Lookalike links in copied emails
A real notice can be copied and its link swapped. Type CVSDigitalPrivacySettlement.com into your browser yourself. The only mailing address is PO Box 1110, Costa Mesa, CA 92628, and the only phone line is 1-888-654-1271.
“Processing fees” or gift cards
Filing a claim is free. The official form pays out by PayPal, Venmo, Zelle or check. Anyone asking you to pay first to “release” your $5 or $10 is not the administrator.
Texts and calls “from CVS”
Notice went out by email and publication. A text or call asking for your Social Security number, card number or CVS login to “verify” a claim is not how this settlement works — your proof is browsing history, dated screenshots or order receipts.
CVS Digital Privacy Settlement — Questions People Ask
Is the CVS settlement email a scam?
The settlement is real. An email titled “Legal Notice of Class Action Settlement” with a Login ID and PIN matches the court-ordered notice in Brewer v. CVS Pharmacy and Criteo. Because emails can be faked, file by typing CVSDigitalPrivacySettlement.com yourself instead of clicking. The notice itself states: “A court authorized this notice. This is not a solicitation from a lawyer. You are not being sued.”
Who qualifies for the CVS digital privacy settlement?
All living individuals who accessed cvs.com, cvshealth.com or the CVS app in the United States before July 27, 2026. No purchase or account is needed. In-store shopping alone does not qualify.
How much will I get?
Up to $10 with proof that you used the sites, or up to $5 without. One payment per household. Both amounts can shrink if many people file. Our payout calculator shows how pro rata cuts work.
What is the deadline?
Claims are due by 11:59 p.m. Eastern on November 16, 2026, online or postmarked. The deadline to opt out or object is November 1, 2026. Claims filed after November 16, 2026 are not paid.
I did not get an email. Can I still file?
Yes. The class is defined by using the sites, not by receiving notice. The settlement website has a claim option for people without a Login ID and PIN, or you can email info@CVSDigitalPrivacySettlement.com to request yours.
What counts as proof for the $10?
Something showing you used a CVS website or the app before July 27, 2026: browser search history, screenshots showing dates, or email receipts of online purchases. You do not have to prove your data was shared or that you were harmed.
When will I be paid?
Not before the final approval hearing on December 1, 2026. Per the notice, payments go out 120 days after the settlement is finally approved and any appeals end. Checks expire 180 days after they are issued.
What happens if I do nothing?
You get no payment, and if the settlement is approved you still give up your right to sue CVS and Criteo over these claims. Doing nothing costs the money and keeps nothing. For other open cases, see our open settlements list.
Separate from this case: were you injured in the last 2 years?
Class-action payouts are fixed amounts through an administrator. A personal injury claim is a different case — and often worth far more. Free estimate, no obligation.
Related Consumer Brand Lawsuits
CVS Lawsuits Overview
Opioids, drug pricing and other CVS cases, explained
Open Class Action Settlements
Settlements you can still file a claim in, with deadlines
Settlement Payout Calculator
Estimate what a pro rata settlement may pay per claim
Data Breach Settlement Calculator
Compare payouts in privacy and data breach settlements