The U.S. Court of Appeals for the Fifth Circuit on Oct. 23, 2026 revived a putative privacy class action that alleges an optical retailer shared customers’ health-related website activity with Meta Platforms, Inc. through the Meta Pixel, holding that the plaintiffs had Article III standing and plausibly alleged the transmissions constituted individually identifiable health information (IIHI).
What the court said and what it means
In its published decision in Rand v. Eyemart Express, L.L.C., the Fifth Circuit reversed the district court’s dismissal and remanded the case for further proceedings. The appeals court concluded the complaint adequately alleged that users’ browsing, purchases and appointment-scheduling activity on Eyemart’s website could be tied to individual Facebook accounts after the Meta Pixel transmitted the data to Meta.
The court treated the plaintiffs’ allegations as sufficient at the pleading stage to show:
- they had Article III standing to sue;
- their website activity—searches, clicks, product views, purchases and appointment scheduling—could plausibly qualify as IIHI because it related to eye care and prescription eyewear; and
- they plausibly alleged Eyemart shared that information with Meta through the Pixel.
Claims and legal theories
The complaint asserts multiple claims, including under the federal Wiretap Act and state privacy laws, based on the contention that the Meta Pixel transmitted detailed user interactions to Meta and that Meta could combine those signals with identifying information from Facebook accounts to link health-related activity to individuals.
The plaintiffs also allege Eyemart uploaded customer lists to Meta, including email addresses and details about prescription eyewear customers viewed or purchased, which would permit matching users to Facebook profiles.
Scope and implications for websites
Although the Fifth Circuit’s decision arose at the pleading stage and does not resolve the ultimate merits, it may broaden the path for privacy suits targeting tracking technologies on websites offering health-related products or services. Legal observers say the ruling provides plaintiffs’ lawyers with precedent that browsing and purchase activity tied to health care–adjacent services can be treated as sensitive health information for standing and pleading purposes.
Companies that operate websites where consumers browse or schedule health-related services should note the decision’s potential to increase litigation risk. The ruling may encourage additional suits alleging that pixels, trackers and other third-party scripts disclose sensitive user activity without adequate notice or consent.
What the decision does not do
The court did not decide the factual questions about what data Meta actually received, how Meta could identify users, or whether the alleged disclosures violate the Wiretap Act or other statutes. The Fifth Circuit limited its holding to the adequacy of the pleading and standing at this stage and sent the case back to the district court for further proceedings.
| Case | Rand v. Eyemart Express, L.L.C. |
|---|---|
| Court | U.S. Court of Appeals for the Fifth Circuit (published Oct. 23, 2026) |
| Key holdings | Plaintiffs have Article III standing; browsing/purchase activity plausibly constitutes IIHI; case reinstated and remanded |
The decision is likely to be cited in future suits that challenge the use of tracking pixels and similar technologies on sites that sell or facilitate access to health-related products and services, and it underscores continuing legal uncertainties about how online behavioral data intersects with established privacy protections.
