Tracking Pixels on Aesthetic Websites Trigger Heavy Fines Under Privacy Laws

Digital tracking pixels on medical aesthetic websites collect and transmit consumer health data, triggering strict regulatory obligations under state privacy laws like Washington's My Health My Data Act. Under this act, which took effect in 2024, a single violation constitutes a consumer protection violation. This allows private plaintiffs and the state Attorney General to seek actual damages, attorneys' fees, and up to $25,000 in treble damages per violation.

The enforcement landscape is sharpening. In July 2026, the Federal Trade Commission, California, and Utah filed a complaint against Hims & Hers Health Inc. for allegedly sharing sensitive patient treatment data with advertising platforms via tracking pixels.

To protect your practice, you must secure a separate, explicit opt-in consent before collecting or sharing any consumer health data, publish a dedicated health privacy policy, and process patient deletion requests within 45 days. Finally, ensure any geofenced ad campaigns are set to target areas at least 2,000 feet away from healthcare facilities to avoid steep statutory penalties.

Source: Holland & Knight, https://www.hklaw.com/en/insights/publications/2026/08/the-pixel-problem-advertising-triggers-health-data-obligations