DOE v. REDEEMER HEALTH

CourtDistrict Court, E.D. Pennsylvania
DecidedSeptember 28, 2023
Docket2:23-cv-02405
StatusUnknown

This text of DOE v. REDEEMER HEALTH (DOE v. REDEEMER HEALTH) is published on Counsel Stack Legal Research, covering District Court, E.D. Pennsylvania primary law. Counsel Stack provides free access to over 12 million legal documents including statutes, case law, regulations, and constitutions.

Bluebook
DOE v. REDEEMER HEALTH, (E.D. Pa. 2023).

Opinion

IN THE UNITED STATES DISTRICT COURT FOR THE EASTERN DISTRICT OF PENNSYLVANIA

JANE DOE, CIVIL ACTION Plaintiff,

v.

REDEEMER HEALTH AND HOLY NO. 23-2405 REDEEMER HEALTH SYSTEMS, Defendants.

MEMORANDUM OPINION Plaintiff Jane Doe, proceeding pseudonymously on behalf of herself and a putative class of others similarly situated, alleges a range of state law medical privacy violations by Defendants Redeemer Health and Redeemer Health Systems (collectively, “Redeemer”). The crux of her complaint is that Redeemer embeds tracking pixels in the source code of its website and patient health portal, and that these pixels transmit sensitive medical information to third parties without patients’ knowledge or consent. Invoking the federal officer removal statute, 28 U.S.C. § 1442, Redeemer removed this action from state court, and presently pending is Doe’s motion to remand back. For the reasons that follow, Doe’s motion will be granted. FACTUAL BACKGROUND A. Allegations in the Complaint Doe’s complaint alleges the following facts, which are accepted as true in this posture. Redeemer manages a wide range of healthcare facilities, and it owns and operates the website https://www.redeemerhealth.org. Using the patient portal accessible through this website, Redeemer patients can perform tasks like exploring treatment options, making appointments, communicating with providers, and checking test results. Redeemer actively encourages its patients to use these digital tools, and its website assures visitors that “Redeemer does not share any individual data gathered online with people outside of Redeemer.” Doe was a regular user of Redeemer’s website during 2022 and 2023, and she used its patient portal to search for treatment options for her arthritis and gastrointestinal issues. Notwithstanding its assurance of patient privacy, Redeemer’s website incorporates

multiple tracking pixels, including the Meta Pixel, and these pixels surreptitiously transmit private medical information to third party companies, including Facebook and Google. For background, websites consist of “markup,” which is the visible portions of a web page, and “source code,” which is a set of instructions for the browser when a web page loads or when a specific event triggers the code. In the case of Redeemer’s website, this source code includes tracking pixels that act like physical wiretaps on a phone. When triggered, they collect user data and funnel it directly to third parties in a manner that is not visible or consented to by the user. These data include IP addresses—unique numerical identifiers assigned to ever computer connected to the internet—and records of users’ activities on Redeemer’s website, including searches performed, pages visited, and communications sent. The third-party companies who

receive these data use it for behavioral profiling and targeted advertising, which generates revenue for them. In exchange for installing tracking pixels, these companies provide website operators like Redeemer with analytics about the performance of their ads on the companies’ platforms, as well as additional tools for tracking visitors to their websites. As mentioned, Doe is a Redeemer patient who used its website to search for information regarding her medical conditions. She is also an active Facebook user, and shortly after performing those searches, she began to receive targeted advertising on her Facebook page related to her health conditions, including advertisements for arthritis treatments. Doe never consented to the sharing of her health data with Facebook or other social media companies, which she views as a violation of her medical privacy rights. Moreover, in light of Redeemer’s large patient population, she believes there are numerous other Pennsylvania residents who used Redeemer’s website and whose privacy rights were likewise violated. B. Notice of Removal

As required by 28 U.S.C. § 1446(a), Redeemer’s notice removing this action from state court alleged the following basis for invoking this Court’s jurisdiction. For almost two decades, the federal government has sought to develop a nationwide infrastructure for health-related information technology and expand the use of electronic health records. A major component of this federal policy is the Meaningful Use Program, which provides incentive payments to private healthcare providers who increase patient engagement with electronic records. This program, originally enacted through an executive order, was later codified in the Health Information Technology for Economic and Clinical Health Act of 2009 (“HITECH Act”), 42 U.S.C. § 300jj-31. That statute earmarked federal dollars for payments to healthcare providers who adopt the “meaningful use” of electronic health records, and it directed the U.S. Department of

Health and Human Services (“HHS”) to establish criteria for what constitutes meaningful use. Under the program devised by HHS, healthcare providers must develop and maintain electronic records and other digital tools in order to qualify for the incentive payments, which are pegged to specific rates of patient engagement over time. Redeemer has participated in the Meaningful Use Program since 2013, and it uses the patient portal accessible through its website to meet the requirements of that program. To increase patient engagement with its website and web portal, Redeemer utilizes many common web practices, including targeted marketing, web beacons, and third-party analytic resources. These tools—some of which are also used on websites maintained by federal agencies—allow Redeemer to increase patient awareness of its digital resources and provide a more user-friendly experience for visitors to its website, thereby effectuating its obligations under the Meaningful Use Program. Thus, attempts to impose liability on Redeemer for these practices implicate the federal government’s goal of increased patient engagement with electronic health records.

LEGAL STANDARD Under the federal officer removal statute, any action commenced in state court against or directed to “[t]he United States or any agency thereof or any officer (or any person acting under that officer) of the United States or of any agency thereof, in an official or individual capacity, for or relating to any act under color of such office” may be removed to federal court. 28 U.S.C. § 1442(a)(1). This statute, which has existed in some form for more than two centuries, exists “to protect the Federal Government from the interference with its operations that would ensue were a State able, for example, to arrest and bring to trial in a State court for an alleged offense against the law of the State, officers and agents of the Federal Government acting within the scope of their authority.” In re Commonwealth’s Motion to Appoint Counsel Against or Directed

to Defender Ass’n of Phila., 790 F.3d 457, 466 (3d Cir. 2015) (“Defender Ass’n”) (quoting Watson v. Philip Morris Cos., Inc., 551 U.S. 142, 150 (2007)). Removal under the statute “is to be broadly construed in favor of a federal forum.” Id. at 467 (internal quotation marks omitted). Nonetheless, as the removing defendant, Redeemer bears the ultimate burden of establishing federal jurisdiction. See Samuel-Bassett v.

Free access — add to your briefcase to read the full text and ask questions with AI

Related

Cite This Page — Counsel Stack

Bluebook (online)
DOE v. REDEEMER HEALTH, Counsel Stack Legal Research, https://law.counselstack.com/opinion/doe-v-redeemer-health-paed-2023.