Heathline's $1.55M Privacy Fine: What Went Wrong?

Welcome Back to the CHEQ Up

In this episode, we break down California’s landmark $1.55 million settlement with Healthline—the largest CCPA penalty to date. This case shows how even leading publishers can stumble when opt-outs don’t work, sensitive data slips through, and vendor oversight falls short.

Inside the episode:

• What really happened with Healthline’s opt-outs and data sharing

• Why even article titles can count as sensitive health data

• How weak vendor contracts create downstream compliance risks

• What the settlement requires—and what regulators are signaling next

Takeaway:

Healthline’s case is a turning point. Privacy promises must be backed by working technology, enforceable contracts, and real audits. Compliance isn’t a banner—it’s continuous validation across every layer of your stack.