University of Rochester $2.85M Privacy Settlement

Consumers who accessed or used the University of Rochester Medical Center’s MyChart patient portal or filled out a form on the University of Rochester Medical Center’s public website may qualify to claim a cash payment from a class action settlement.

The University of Rochester Medical Center agreed to pay $2.85 million to settle a class action lawsuit alleging it violated federal and state privacy laws while operating its public website and MyChart patient portal, specifically regarding fillable forms and website features.

Who is eligible for a University of Rochester Medical Center payout?

Class members meet at least one of the following criteria:

• They accessed or used the University of Rochester Medical Center's MyChart patient portal any time between Jan. 11, 2021, and Jan. 11, 2023.
• They filled out a form on URMC’s public website any time between Jan. 1, 2018, and June 12, 2023.

How much is the privacy payout?

• Pro Rata Payment: Funds will be distributed evenly among all eligible class members who file valid claims.

How to claim a University of Rochester class action rebate

To receive a settlement payment, class members must file a claim online. Alternatively, they can download, print and complete the PDF claim form, then mail it to the settlement administrator.

Settlement administrator's mailing address: URMC Privacy Settlement, c/o Settlement Administrator, P.O. Box 25226, Santa Ana, CA 92799

Is proof/documentation required to submit a claim?

To submit an online claim, class members must have their Unique ID and PIN found on the notice they received from the settlement administrator.

Payout options

• PayPal (online claims only)
• Venmo (online claims only)
• Zelle (online claims only)
• Paper check mailed to the provided address

$2.85 million University of Rochester settlement fund breakdown

The $2.85 million settlement fund covers:

• Settlement administration costs: Up to $200,000
• Attorneys' fees and expenses: Up to $997,500
• Service awards to class representatives: $2,500 each ($5,000 total)
• Payments to eligible class members: All remaining funds after the above deductions

Important dates

• Claim Deadline: July 21, 2025
• Exclusion Deadline: July 21, 2025
• Final Approval Hearing: Aug. 21, 2025

When is the privacy settlement payout date?

The settlement administrator will mail or submit payments 30 days after the final settlement is approved and any claim disputes have been resolved.

Why was there a class action lawsuit?

The class action lawsuit alleged the University of Rochester Medical Center violated federal and state privacy laws in the way it operated its public website and MyChart patient portal. The lawsuit claimed that by using tracking technologies and online forms, URMC may have violated patient privacy.

URMC denies all allegations, specifically that it implemented any tracking technologies in its patient portal or electronic medical record system. Both sides agreed to settle to avoid the costs and risks of continued litigation and trial.

Sources

1. Settlement Notice
2. Settlement Agreement
3. Settlement Website FAQ