California Pixel-Wiretap Rulings Split the Same Week: Blue Shield Claim Dismissed, BlueChew Claims Advance
Independently fact-checked against primary sources (last audited July 23, 2026). · Law checked current as of August 9, 2026. · 2 primary sources cited on this page. How we verify our legal content
California Pixel-Wiretap Rulings Split the Same Week: Blue Shield Claim Dismissed, BlueChew Claims Advance
Two Northern District of California judges issued website tracking-pixel wiretap rulings within days of each other in July 2026, and they cut in opposite directions. One dismissed a federal Wiretap Act claim against Blue Shield of California. The other let state wiretap claims against Google and Meta proceed.
Information last verified on July 23, 2026. Both decisions are motion-to-dismiss rulings, not final judgments, and both cases remain active.
Jurisdiction scope: These rulings apply the federal Wiretap Act (18 U.S.C. 2510-2522) and California and other state wiretap statutes as interpreted in the U.S. District Court for the Northern District of California. California's own eavesdropping law, the California Invasion of Privacy Act (CIPA), is a separate state statute from the federal Wiretap Act. This is general legal information, not legal advice.
What Happened
Both cases involve the same technology: small pieces of tracking code, often called pixels, that website operators embed to send visitor activity to advertising and analytics companies such as Meta and Google. The legal question in each case was whether loading that code onto a health-related website amounts to an illegal interception of the visitor's communications.
On July 10, 2026, Judge Yvonne Gonzalez Rogers of the Northern District of California dismissed the federal Wiretap Act claim in a proposed class action against Blue Shield of California, captioned Doe I v. California Physicians' Service dba Blue Shield of California (No. 4:25-cv-03925). The plaintiffs alleged that Blue Shield embedded the Meta Pixel and Google Analytics on its website and that those tools disclosed enrollees' health-related browsing to Meta and Google.
The court dismissed the federal Wiretap Act count with leave to amend, meaning the plaintiffs may file a revised complaint. According to reporting on the order, the court acknowledged that the alleged disclosure of medical information could be serious and analogous to a traditional privacy harm. The claim failed on a narrower point: the complaint itself attributed the actual interception to Google and Meta, not to Blue Shield. The federal Wiretap Act, the court reasoned, does not create a private claim against a defendant merely for procuring, facilitating, or aiding another party's interception, and there is no general aiding-and-abetting liability under the statute.
Days later, in mid-July 2026, a separate Northern District of California case moved the opposite way. In M.D. v. Google LLC and Meta Platforms Inc., a proposed class action over tracking pixels on the telehealth site BlueChew (operated by Dermacare), the court largely denied Google's and Meta's motions to dismiss. Legal-press coverage placed the decision the week of July 14, 2026.
That case is before Judge Araceli Martinez-Olguin, who had dismissed an earlier version of the complaint on September 23, 2025. This time, the court allowed most of the amended claims to proceed. A central defense argument was consent: Meta contended that users agreed to be tracked by accepting its privacy policy. The court rejected the idea that a general, boilerplate privacy policy establishes the specific, informed consent the wiretap statutes require, treating consent as a fact question that cannot be resolved on a motion to dismiss. The practical result is that Google and Meta, the pixel providers themselves, now face discovery rather than an early exit.
One point deserves emphasis, because the two cases are easy to conflate. The Blue Shield ruling turned on the federal Wiretap Act. The BlueChew ruling rested on state wiretap and privacy law, including the California Invasion of Privacy Act and comparable state statutes, not the federal Wiretap Act. They are related legal theories, but they are not the same statute, and each has its own tests.
What the Law Actually Says
The federal Wiretap Act, part of the Electronic Communications Privacy Act, is codified at 18 U.S.C. 2510 through 2522. Its core prohibition, in 18 U.S.C. 2511, bars intentionally intercepting the contents of an electronic communication. The statute also allows a private lawsuit by a person whose communications are unlawfully intercepted.
Two features of that statute drove the Blue Shield result. First, the Act targets the party that intercepts. Courts have consistently declined to read a broad procurement or aiding-and-abetting theory into the private right of action, so a defendant that merely enabled someone else's interception is not automatically on the hook. Second, the statute contains a party exception in 18 U.S.C. 2511(2)(d): a party to the communication does not violate the Act unless the interception is done to commit a crime or tort. A website operator is generally treated as a party to the visitor's communication with its own site, which is why claims that pin the interception on the site operator itself often struggle. When the plaintiffs' own theory placed the interception with Google and Meta, the claim against Blue Shield as a procurer had no statutory home.
State wiretap laws can operate differently, which is why the BlueChew case survived on separate ground. California's CIPA, at Penal Code sections 631 and 632, reaches a third party that secretly records or reads a communication in transit, and California courts have allowed CIPA theories against pixel and tracking-technology providers who are not parties to the communication. Consent is a defense under both the federal and state schemes, but it must be actual and informed. The BlueChew court's refusal to treat a boilerplate privacy policy as blanket consent reflects a recurring theme: consent is usually a fact question, and generic policy language rarely resolves it at the pleading stage. California's separate California data privacy laws and its broader recording and eavesdropping rules add further layers that a federal Wiretap Act analysis does not address.
Analysis: Why This Matters
The following is analysis from the Recording Law Editorial Team.
Read together, the two rulings are less contradictory than they first appear. They turn on two variables that run through nearly all pixel-tracking litigation: the identity of the alleged interceptor, and the quality of any consent.
When the defendant is the first-party website operator, as Blue Shield was, the federal Wiretap Act's structure works against the plaintiff. The operator is a party to the communication, and the statute does not readily punish a party for handing data to a third party's tool. That is a doctrinal problem, not a factual one, which is why the Blue Shield plaintiffs received leave to amend rather than a clean win for the insurer. They may try to reframe their theory, and the underlying claims remain live.
When the defendant is the third-party pixel provider, as Google and Meta were in the BlueChew case, the analysis shifts. A company that is not a party to the communication cannot invoke the party exception, so the litigation moves to consent, and consent is fact-intensive. A privacy policy buried in a footer is a weak substitute for the specific, informed agreement these statutes contemplate, and courts have been increasingly willing to say so at the motion-to-dismiss stage. Because the BlueChew claims rest on state law, they also sidestep the federal procurement problem entirely.
We are not predicting how either case ends. Both are at the motion-to-dismiss stage, and surviving a motion to dismiss is not the same as proving a violation. What the pairing shows is a maturing body of law that sorts pixel cases by structure rather than by headline, and that outcome depends heavily on which statute a plaintiff invokes and against whom.
How This Affects You
Pixel-tracking wiretap litigation is about whether embedding third-party advertising or analytics code on a website, especially a health, insurance, or telehealth site, discloses a visitor's activity in a way the law treats as interception without consent. These are civil class actions, not criminal cases, and the current wave centers on how tracking data flows to companies like Meta and Google.
If you visited a health-related site and are wondering whether your data was shared, these rulings do not resolve that for any individual. A motion-to-dismiss decision addresses whether a lawsuit may proceed, not whether any particular person was harmed or is owed anything. Separately, some pixel-tracking matters have led to settlements, such as the Allina Health pixel-tracking settlement and the Duke MyChart pixel settlement, each with its own eligibility terms and deadlines set by a court-appointed administrator. Nothing here is individualized legal advice, and this article does not tell you whether you have a claim.
This is general legal information, not legal advice. Wiretap and privacy law is fact-specific and varies by jurisdiction and by statute, and both cases discussed here are ongoing. For advice about your situation, consult a licensed attorney in your state.
Last updated: 2026-07-23. This is a developing story; details verified as of 2026-07-23.
Frequently Asked Questions
What did the court decide in the Blue Shield of California pixel case?
On July 10, 2026, Judge Yvonne Gonzalez Rogers of the Northern District of California dismissed the federal Wiretap Act claim against Blue Shield of California in Doe I v. California Physicians' Service (No. 4:25-cv-03925). The dismissal came with leave to amend, so the plaintiffs may file a revised complaint. It was not a final judgment and did not end the case.
Why was the federal Wiretap Act claim against Blue Shield dismissed?
The court reasoned that the complaint attributed the actual interception to Google and Meta rather than to Blue Shield, and that the federal Wiretap Act does not create a private claim against a defendant merely for procuring or facilitating another party's interception. There is no general aiding-and-abetting liability under the statute's private right of action.
Does the dismissal mean Blue Shield won the case?
No. A dismissal with leave to amend means the plaintiffs may try again with a revised complaint. It resolves how the current version of the claim was pleaded, not whether Blue Shield ultimately violated any law. The matter remains an active case in the Northern District of California.
What happened in the BlueChew case involving Google and Meta?
In M.D. v. Google LLC and Meta Platforms Inc., a Northern District of California judge largely denied Google's and Meta's motions to dismiss claims that tracking pixels on the telehealth site BlueChew captured users' prescription and identifying data without consent. Legal press reported the decision the week of July 14, 2026. As a result, the pixel providers face discovery rather than an early dismissal.
Is the BlueChew ruling a federal Wiretap Act decision?
No, and this is an important distinction. The surviving BlueChew claims rest on state wiretap and privacy law, including the California Invasion of Privacy Act and comparable state statutes, not the federal Wiretap Act. That is one reason the case avoided the procurement problem that defeated the federal claim against Blue Shield.
Why did the consent defense fail in the BlueChew case?
Google and Meta argued that users consented to tracking by agreeing to a privacy policy. The court declined to treat a general, boilerplate privacy policy as the specific, informed consent the wiretap statutes require, and it treated consent as a fact question that cannot be resolved on a motion to dismiss. Consent may still be litigated later in the case.
How is California's CIPA different from the federal Wiretap Act?
The federal Wiretap Act (18 U.S.C. 2510-2522) is a federal statute, and its private right of action generally targets the party that intercepts, with a party exception for those involved in the communication. California's Invasion of Privacy Act (Penal Code sections 631 and 632) is a separate state law that reaches third parties who secretly read or record a communication in transit. The two use different tests, which is why one claim can fail while the other proceeds.
What is a tracking pixel, and why does it raise wiretap questions?
A tracking pixel is a small piece of code a website embeds to send data about a visitor's activity to an advertising or analytics company. Plaintiffs argue that on sensitive sites, such as health or telehealth pages, this can transmit protected information to a third party without proper consent, which they frame as an unlawful interception under federal or state wiretap law.
Updates
Governing law re-checked for recent changes
Independently fact-checked against the cited primary sources
The Law Behind This Article
This article rests on the statutory provisions below, held in our own legal record and retrieved from the official source. Tap a section to read the operative text.
California Penal Code
§ 631In forcecited in 13 of our articles
(a) Any person who, by means of any machine, instrument, or contrivance, or in any other manner, intentionally taps, or makes any unauthorized connection, whether physically, electrically, acoustically, inductively, or otherwise, with any telegraph or telephone wire, line, cable, or instrument, including the wire, line, cable, or instrument of any internal telephonic communication system, or who willfully and without the consent of all parties to the communication, or in any unauthorized manner, reads, or attempts to read, or to learn the contents or meaning of any message, report, or communication while the same is in transit or passing over any wire, line, or cable, or is being sent from, or received at any place within this state; or who uses, or attempts to use, in any manner, or for any purpose, or to communicate in any way, any information so obtained, or who aids, agrees with, employs, or conspires with any person or persons to unlawfully do, or permit, or cause to be done any of the acts or things mentioned above in this section, is punishable by a fine not exceeding two thousand five hundred dollars ($2,500), or by imprisonment in the county jail not exceeding one year,…
Official text (excerpt) · last checked 2026-09-16 · Read the full text in our law library · Verify at leginfo.legislature.ca.gov
Cited in 202 court opinions in our collectionLatest citing opinion in our collection: 2026
Opinions citing this section in our collection:
- Ribas v. Clark (California Supreme Court 1985, 38 Cal. 3d 355)“…iminal statutes prohibiting various forms of eavesdropping (Pen. Code, §§ 631, subd. (a), and 637), as well as for in…”
- Warden v. Kahn (California Court of Appeal 1979, 99 Cal. App. 3d 805)“…not to be found elsewhere among the states of the nation. Penal Code section 631 provides: "Any person who, by means of…”
- Rogers v. Ulrich (California Court of Appeal 1975, 52 Cal. App. 3d 894)“…nowledge the incident amounted to wiretapping as defined by Penal Code section 631; a statutory penalty in the amount of $…”
Identified automatically from the court opinions citing this section — not a ranking of which case controls.
Also relied on in: Serial CIPA Website-Wiretap Filer Declared a Vexatious Litigant, Otter.ai Faces Consolidated Wiretap Class Action Over Its AI Meeting Notetaker and All-Party Consent, Otter.ai Lawsuit: Judge Lets Core Privacy Claims Proceed (2026)
United States Code Title 18
§ 2510DefinitionsIn forcecited in 137 of our articles
As used in this chapter— “wire communication” means any aural transfer made in whole or in part through the use of facilities for the transmission of communications by the aid of wire, cable, or other like connection between the point of origin and the point of reception (including the use of such connection in a switching station) furnished or operated by any person engaged in providing or operating such facilities for the transmission of interstate or foreign communications or communications affecting interstate or foreign commerce; “oral communication” means any oral communication uttered by a person exhibiting an expectation that such communication is not subject to interception under circumstances justifying such expectation, but such term does not include any electronic communication; “State” means any State of the United States, the District of Columbia, the Commonwealth of Puerto Rico, and any territory or possession of the United States; “intercept” means the aural or other acquisition of the contents of any wire, electronic, or oral communication through the use of any electronic, mechanical, or other device.1 So in original. The period probably should be a semicolon.
Official text (excerpt) · last checked 2026-07-28 · Read the full text in our law library · Verify at uscode.house.gov
Cited in 2,382 court opinions in our collectionLatest citing opinion in our collection: 2026
In the courts (editorial summary, independently checked):United States v. New York Telephone Co. (1977) held that pen registers fall outside Title III because they do not acquire the contents of a communication as Section 2510(4) and (8) define interception. Forsyth v. Barr (1994) applied the same definitions, treating the defendant officers as law enforcement officers under Section 2510(7).
Opinions citing this section in our collection:
- Forsyth v. Barr (Court of Appeals for the Fifth Circuit 1994, 19 F.3d 1527)✓Neighbors tapped an informant's home line and the overheard charges reached Dallas internal affairs; the Fifth Circuit saw no evidence the police defendants intercepted anything and held they were 2510(7) law enforcement officers, so 2517(1) and (2) allowed their use of it.
- Nixon v. Administrator of General Services (Supreme Court of the United States 1977, 433 U.S. 425)“…of the Omnibus Crime Control and Safe Streets Act of 1968, 18 U. S. C. §§ 2510 et seq. 408 F. Supp., at 363 . We…”
- Gannett Co. v. DePasquale (Supreme Court of the United States 1979, 443 U.S. 368)“…of the Omnibus Crime Control and Safe Streets Act of 1968, 18 U. S. C. § 2510 et seq., be preserved prior to the d…”
Identified automatically from the court opinions citing this section — not a ranking of which case controls.
Also relied on in: Surveillance Camera Laws by State (2026 Guide), US Recording Laws by State (2026): All 50 States Explained, Georgia Recording Laws (2026): One-Party Audio, All-Party Video
§ 2511Interception and disclosure of wire, oral, or electronic communications prohibitedIn forcecited in 441 of our articles
Except as otherwise specifically provided in this chapter any person who— intentionally intercepts, endeavors to intercept, or procures any other person to intercept or endeavor to intercept, any wire, oral, or electronic communication; intentionally uses, endeavors to use, or procures any other person to use or endeavor to use any electronic, mechanical, or other device to intercept any oral communication when— such device is affixed to, or otherwise transmits a signal through, a wire, cable, or other like connection used in wire communication; or such device transmits communications by radio, or interferes with the transmission of such communication; or such person knows, or has reason to know, that such device or any component thereof has been sent through the mail or transported in interstate or foreign commerce; or such use or endeavor to use (A) takes place on the premises of any business or other commercial establishment the operations of which affect interstate or foreign commerce; or (B) obtains or is for the purpose of obtaining information relating to the operations of any business or other commercial establishment the operations of which affect interstate or foreign…
Official text (excerpt) · last checked 2026-09-17 · Read the full text in our law library · Verify at uscode.house.gov
Cited in 2,045 court opinions in our collectionLatest citing opinion in our collection: 2026
In the courts (editorial summary, independently checked):Griggs-Ryan v. Smith (1990) applied the Section 2511(2)(d) prior-consent exception, treating a tenant repeatedly told that all incoming calls were taped as having impliedly consented. United States v. United States District Court (1972) read the then-current Section 2511(3) as conferring no presidential surveillance power.
Opinions citing this section in our collection:
- Mitchell v. Forsyth (Supreme Court of the United States 1985, 472 U.S. 511)✓The Attorney General authorized a warrantless 1970 national security wiretap that caught the plaintiff's calls; the Court held the since-repealed Section 2511(3) disclaimer left the tap lawful under Title III, and that Mitchell had qualified immunity.
- United States v. United States District Court for the Eastern District of Michigan (Supreme Court of the United States 1972, 407 U.S. 297)✓The Attorney General approved warrantless wiretaps on members of a domestic group accused of bombing a CIA office; the Court read Section 2511(3) as a congressional disclaimer conferring no surveillance power, then held the Fourth Amendment required prior judicial approval.
- Forsyth v. Barr (Court of Appeals for the Fifth Circuit 1994, 19 F.3d 1527)✓Dallas police used, in an internal affairs probe of an officer, calls private parties allegedly intercepted illegally; assuming that was unlawful, the Fifth Circuit held Section 2517(1) and (2) allowed the disclosure and use, defeating the Section 2511(1)(c) and (d) claims.
Identified automatically from the court opinions citing this section — not a ranking of which case controls.
Also relied on in: Connecticut Recording Laws (2026): Hybrid Consent Rules Explained, Oregon Recording Laws (2026): Hybrid One-Party and All-Party Rules, Hawaii Recording Laws (2026): Hybrid Consent State Rules
Search our full record of US law — 2.1 million sections, every state + federal →
Sources and References
- Doe I v. California Physicians' Service dba Blue Shield of California, No. 4:25-cv-03925 (N.D. Cal.), docket(courtlistener.com)
- 18 U.S.C. 2511, federal Wiretap Act interception prohibition and private right of action(uscode.house.gov).gov
- California Penal Code section 631, California Invasion of Privacy Act (CIPA)(leginfo.legislature.ca.gov).gov
- Federal Wiretap Act claim against Blue Shield dismissed by US federal judge (context)(mlex.com)
- Google, Meta must face privacy lawsuit over BlueChew trackers, US judge rules (context)(mlex.com)
- Google, Meta Beat BlueChew Users' Privacy Suit, For Now (September 2025 dismissal, context)(news.bloomberglaw.com)