John Does 1-5, et al. v. Kaiser Foundation Health Plan, Inc., et al.

District Court, N.D. California·Decided July 14, 2026·No. 3:23-cv-02865·Unknown

Opinion

JOHN DOES 1-5, et al., Case No. 23-cv-02865-EMC

Plaintiffs, ORDER GRANTING PLAINTIFFS’ v. MOTION FOR FINAL APPROVAL; GRANTING IN PART PLAINTIFFS’ KAISER FOUNDATION HEALTH PLAN, MOTION FOR ATTORNEYS’ FEES, INC., et al., ETC.; AND DENYING OBJECTORS’ Defendants. Docket Nos. 401-02, 411 Plaintiffs are individuals who have filed a class action against three Kaiser entities (collectively, “Kaiser”).1 Plaintiffs allege that Kaiser violated their privacy rights, and those of others similarly situated, in violation of various federal and state laws. According to Plaintiffs,

unbeknownst to Plaintiffs and other Kaiser Plan Members, Kaiser has installed code from multiple third parties throughout the Kaiser website and mobile applications that allows third party companies, including but not limited to Quantum Metric, Twitter, Adobe, Microsoft Bing, . . . Google[,] [and Dynatrace] (collectively, “Third Party Wiretappers”) to intercept the content of Plaintiffs and Class Members’ patient status, identifying information, medical topics researched, choices made, information shared and communications with their medical providers, including personally identifiable medical information, Protected Health Information (“PHI”) that Kaiser was required to protect under the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”), 42 U.S.C. § 1320d-6, and other confidential information and communications, when that information is in transit. CAC ¶ 4. / / / Previously, the Court granted approval to Plaintiffs’ motion for preliminary approval of a class action settlement. Now pending before the Court are the following: (1) Plaintiffs’ motion for final approval; (2) Plaintiffs’ motion for attorneys’ fees, litigation expenses, and service awards; and (3) Objectors’ fee application in which objectors’ counsel seeks a portion of the fee award. Having considered the papers filed, the oral argument of counsel, and all other evidence of record, the Court hereby GRANTS the motion for final approval, GRANTS in part the motion for attorneys’ fees, litigation expenses, and service awards, and DENIES Objectors’ fee application. A. Plaintiffs’ Motion for Final Approval The Court previously granted preliminary approval to the parties’ class action settlement. The settlement covers approximately 13.1 million people. Under the settlement, Kaiser will pay out a gross settlement amount of $46 million, which could increase to $47.5 million depending on the number of opt-outs. See Docket No. 384 (Order at 2). As discussed below, now that the number of opt-outs has been finalized, the gross settlement amount will be $47.5 million. The amount available for distribution to the class will be smaller because attorneys’ fees, litigation expenses, settlement administration expenses, and incentive awards will need to be deducted from the gross settlement fund. In addition, how much monetary relief each class member will get depends on how many members submitted claims. At preliminary approval, the parties anticipated a claims rate of 5-10%, which would mean each claiming class member would receive about $20-40 in terms of monetary relief. Each class member has already benefited from Plaintiffs’ litigation of the case because, after Plaintiffs moved for a preliminary injunction, Kaiser disabled, deleted, or modified the third-party tracking technologies. In addition, Kaiser implemented consent banners on its website and mobile apps. See Docket No. 384 (Order at 2-3). The Court granted preliminary approval to the settlement, taking into account, inter alia, that there was significant litigation risk should Plaintiffs continue to litigate the case. Litigation risk included the following: • Plaintiffs were pursuing a factual theory that Kaiser allowed the code on its website • Individuals could be subject to arbitration (such as the named California plaintiff whom the Court did compel to arbitration). • Choice of law might require application of the laws of multiple state laws which could then make it difficult for Plaintiffs to satisfy Rule 23(b)(3)’s requirements of predominance and superiority (i.e., for class certification). • Privacy breach case law is still developing (e.g., damages methodologies). • Not all claims would necessarily survive – e.g., in its order granting in part the motion to dismiss the first amended complaint, the Court dismissed Plaintiffs’ claims for violations of the Electronic Communications Privacy Act, the California Invasion of Privacy Act, and the California Confidentiality of Medical Information Act. • If claims with statutory damages were dismissed, then there might be nominal damages only or damages could be too individualized. • Courts have recognized that data breach cases face difficulties in obtaining class certification. Because the Court granted preliminary approval, the main issues for final approval are: (1) whether there was sufficient notice to the class members; and (2) how the class has responded to notice of the settlement. 1. Notice to the Class The Court has reviewed the information provided by the settlement administrator concerning notice to the class. Per the Court’s preliminary approval order, notice was given to those persons who received from Kaiser the May 2024 notice of privacy breach.2 Notice was given by (1) email or (2) mail (a postcard) if no email address was known. Notice by email or mail was given via a short-form notice. See Sett. Agmt. ¶ 1.22 & Ex. E. A long-form notice was 2 “May 2024 Notice List” is defined in the settlement agreement as follows: “the confidential list of current and former Kaiser Permanente members who were notified in May 2024 pursuant to 45 CFR §§ 164.400-414, including their names and contact information used to provide individualized notice (email address and mailing address where email address is not known).” posted on the settlement website, which the settlement administrator maintained. The settlement administrator also maintained a toll-free number. Kaiser provided the settlement administrator with records for 13,134,307 settlement class members. See Docket No. 424 (Mulholland Reply Decl. ¶ 5). Notice was successfully provided to the vast majority of the class. Based on the settlement administrator’s calculations, the number of members who did not get notice was approximately 139,534. This translates to about 1% of the 13.1 million-member class. At the hearing, the Court discussed whether additional notice through, e.g., a social media campaign might be of benefit. Plaintiffs did not believe additional notice was needed, particularly because there was the equivalent of publication notice since the settlement was covered through local as well as nationwide press (USA Today). The cost of additional notice was another consideration. The Court agreed that additional notice was not necessary. 2. Response of the Class The settlement administrator has provided an update regarding the responses of class members. As of the March 12, 2026, claims filing deadline, the number of individuals who have submitted claims is 755,551, see Docket No. 436 (Mulholland Decl. ¶ 13) (adding that, after the claims filing deadline, an additional 17,932 claim forms were received) – representing a claims rate of approximately 5.7% (i.e., 755,551/13,134,307). Though the claims rate is not large, it is consistent with the rate expected by the settlement administrator (as stated at preliminary approval) and with the rates obtained by plaintiffs in similar cases. See Docket No. 345-5 (Mulholland Decl. ¶ 23) (settlement administrator noting that it considered “five comparative data breach settlements and the related claims rate for each”; the claims rates range “from 1.95% to 9.17% (mid-point 5.56%) with an averag

Free access — add to your briefcase to read the full text and ask questions with AI

John Does 1-5, et al. v. Kaiser Foundation Health Plan, Inc., et al., (N.D. Cal. 2026).

John Does 1-5, et al. v. Kaiser Foundation Health Plan, Inc., et al. (John Does 1-5, et al. v. Kaiser Foundation Health Plan, Inc., et al.) — published by Counsel Stack Legal Research, free access to 12M+ legal documents.

Related

Nachshin v. Aol, LLC
663 F.3d 1034 (Ninth Circuit, 2011)
Reena Frailich v. Sandra Disner
688 F.3d 645 (Ninth Circuit, 2012)
Theodore H. Frank v. Netflix, Inc.
779 F.3d 934 (Ninth Circuit, 2015)
Laura Faught v. American Home Shield Corporation
444 F. App'x 445 (Eleventh Circuit, 2011)
Vizcaino v. Microsoft Corp.
290 F.3d 1043 (Ninth Circuit, 2002)