{"id":227538,"date":"2026-10-06T15:39:49","date_gmt":"2026-10-06T15:39:49","guid":{"rendered":"https:\/\/datatrue.com\/?page_id=227538"},"modified":"2026-10-06T15:39:49","modified_gmt":"2026-10-06T15:39:49","slug":"oaic-health-pixel-breach-2026","status":"publish","type":"page","link":"https:\/\/datatrue.com\/en\/resources\/enforcement-watch\/oaic-health-pixel-breach-2026\/","title":{"rendered":"OAIC health pixels"},"content":{"rendered":"\n<style id=\"dt-divi-integration\">body h1.entry-title.main_title{display:none !important}#main-content .container{width:100% !important;max-width:100% !important;padding-left:0 !important;padding-right:0 !important;padding-top:0 !important}#left-area{width:100% !important;float:none !important;padding:0 !important}#sidebar{display:none !important}#main-content .container:before{display:none !important}.yarpp-related,.yarpp.yarpp-related{display:none !important}#left-area article.et_pb_post{margin-bottom:0 !important}#dt-page p{padding-bottom:0}#dt-page :is(h1,h2,h3,h4,h5,h6){padding-bottom:0}#dt-page :is(ul,ol){padding:0;margin:0;list-style:none;line-height:inherit}#dt-page img{max-width:100%;height:auto}<\/style><style id=\"dt-page-css\">@import url('https:\/\/fonts.googleapis.com\/css2?family=Lato:wght@400;#dt-page 700;900&family=Work+Sans:wght@400;500;600&family=IBM+Plex+Mono:wght@500;600&display=swap');:root{--ink:#242923;--ink-soft:#55605A;--ink-faint:#8B958E;--mint:#0EA173;--mint-fill:#10B981;--mint-tint:#F3FAF7;--teal:#4C7E93;--teal-tint:#EAF2F4;--surface:#FFFFFF;--border:#DCE7E2;--draft:#B5791A;--draft-tint:#FBF1DF;--warn:#C0453B;--warn-tint:#FDF0EE;--shadow:0 24px 48px -28px rgba(36,41,35,0.28);}#dt-page,#dt-page *{box-sizing:border-box;}#dt-page{-webkit-text-size-adjust:100%;scroll-behavior:smooth;}#dt-page{margin:0;background:var(--surface);color:var(--ink);font-family:'Work Sans','Helvetica Neue',Arial,sans-serif;line-height:1.55;}#dt-page h1,#dt-page h2,#dt-page h3,#dt-page h4{font-family:'Lato','Helvetica Neue',Arial,sans-serif;color:var(--ink);margin:0;text-wrap:balance;line-height:1.22;}#dt-page p{margin:0;}#dt-page a{color:inherit;}#dt-page .wrap{max-width:1120px;margin:0 auto;padding:0 32px;}#dt-page .vh{position:absolute;width:1px;height:1px;padding:0;margin:-1px;overflow:hidden;clip:rect(0,0,0,0);white-space:nowrap;border:0;}#dt-page .breadcrumb{font-family:'IBM Plex Mono',ui-monospace,monospace;font-size:11px;letter-spacing:.04em;color:var(--ink-faint);text-transform:uppercase;}#dt-page .breadcrumb ol{list-style:none;margin:0;padding:0;display:flex;flex-wrap:wrap;gap:6px;}#dt-page .breadcrumb li{display:inline-flex;gap:6px;}#dt-page .breadcrumb li + li::before{content:\"\\203A\";color:#B9C4BE;}#dt-page .breadcrumb a{color:var(--teal);text-decoration:none;}#dt-page .breadcrumb a:hover{text-decoration:underline;}#dt-page .breadcrumb [aria-current]{color:var(--ink-soft);}#dt-page .eyebrow{display:inline-flex;align-items:center;gap:8px;font-family:'IBM Plex Mono',ui-monospace,monospace;font-size:12px;font-weight:600;letter-spacing:.09em;text-transform:uppercase;color:var(--mint);background:var(--mint-tint);border:1px solid #CFE9DF;padding:6px 12px 6px 10px;border-radius:999px;margin-bottom:16px;}#dt-page .eyebrow .dot{width:6px;height:6px;border-radius:50%;background:var(--mint-fill);}#dt-page .eyebrow.on-dark{background:rgba(255,255,255,0.1);border-color:rgba(255,255,255,0.18);color:#8FE3C3;}#dt-page .eyebrow.on-dark .dot{background:#6FE3B6;}#dt-page .section-head{max-width:64ch;}#dt-page .section-head h2{font-size:28px;font-weight:900;letter-spacing:-0.01em;}#dt-page .section-head p{margin-top:10px;color:var(--ink-soft);font-size:15px;line-height:1.6;}#dt-page .ew-sec{padding:52px 0;}#dt-page .ew-sec.tint{background:var(--mint-tint);}#dt-page .ew-sec.teal{background:var(--teal-tint);}#dt-page .ew-sec.rule{border-top:1px solid var(--border);}#dt-page .ew-head{padding:30px 0 0;}#dt-page .ew-head .breadcrumb{margin-bottom:22px;}#dt-page .ew-head h1{font-size:38px;font-weight:900;letter-spacing:-0.015em;line-height:1.15;max-width:900px;}#dt-page .ew-meta{margin-top:18px;display:flex;flex-wrap:wrap;align-items:center;gap:10px 16px;}#dt-page .ew-updated{font-family:'IBM Plex Mono',ui-monospace,monospace;font-size:11.5px;font-weight:500;letter-spacing:.04em;text-transform:uppercase;color:var(--ink-soft);display:inline-flex;align-items:center;gap:6px;}#dt-page .ew-updated svg{width:13px;height:13px;color:var(--mint);}#dt-page .ew-updated time{color:var(--ink);font-weight:600;}#dt-page .definition{position:relative;margin-top:28px;max-width:900px;background:var(--mint-tint);border:1px solid #CFE9DF;border-left:5px solid var(--mint-fill);border-radius:14px;padding:26px 34px 28px 32px;overflow:hidden;}#dt-page .definition::after{content:\"\\201C\";position:absolute;right:22px;top:-18px;font-family:'Lato',Georgia,serif;font-weight:900;font-size:132px;line-height:1;color:var(--mint-fill);opacity:.13;pointer-events:none;}#dt-page .definition.no-glyph::after{content:none;}#dt-page .def-kicker{display:flex;align-items:center;gap:8px;font-family:'IBM Plex Mono',ui-monospace,monospace;font-size:11px;font-weight:600;letter-spacing:.09em;text-transform:uppercase;color:var(--mint);margin-bottom:10px;}#dt-page .def-kicker::before{content:\"\";width:16px;height:2px;background:var(--mint-fill);border-radius:2px;}#dt-page .def-text{position:relative;font-family:'Lato','Helvetica Neue',Arial,sans-serif;font-weight:700;font-size:19.5px;line-height:1.58;color:var(--ink);letter-spacing:-0.002em;}#dt-page .enf{display:inline-flex;align-items:center;gap:6px;font-family:'IBM Plex Mono',ui-monospace,monospace;font-size:11px;font-weight:600;letter-spacing:.03em;line-height:1.25;padding:5px 9px 5px 7px;border-radius:5px;border:1.5px solid transparent;white-space:normal;text-align:left;}#dt-page .enf svg{width:13px;height:13px;flex-shrink:0;}#dt-page .enf .enf-kind{font-size:9.5px;letter-spacing:.08em;text-transform:uppercase;opacity:.85;padding-right:6px;margin-right:1px;border-right:1px solid currentColor;}#dt-page .enf-ftc{background:var(--ink);color:#fff;}#dt-page .enf-cppa{background:var(--teal);color:#fff;}#dt-page .enf-ag{background:var(--surface);color:var(--ink);border-color:var(--teal);}#dt-page .enf-ag svg{color:var(--teal);}#dt-page .enf-dpa{background:var(--teal-tint);color:var(--ink);border-color:#B9D1DA;}#dt-page .enf-dpa svg{color:var(--teal);}#dt-page .enf-oaic{background:var(--ink-soft);color:#fff;}#dt-page .enf-private{background:var(--surface);color:var(--ink-soft);border:1.5px dashed var(--ink-faint);border-radius:999px;padding:4px 11px 4px 8px;}#dt-page .enf-private svg{color:var(--ink-soft);}#dt-page .enf-legend{display:flex;flex-wrap:wrap;gap:8px 10px;margin-top:14px;}#dt-page .enf-key{margin-top:14px;display:grid;grid-template-columns:1fr 1fr;gap:14px;}#dt-page .enf-key-col{border:1px solid var(--border);border-radius:12px;padding:14px 16px;background:var(--surface);}#dt-page .enf-key-col h3{font-family:'IBM Plex Mono',ui-monospace,monospace;font-size:10.5px;font-weight:600;letter-spacing:.07em;text-transform:uppercase;color:var(--ink-faint);margin-bottom:10px;}#dt-page .enf-key-col .enf-legend{margin-top:0;}#dt-page .status{display:inline-block;font-family:'IBM Plex Mono',ui-monospace,monospace;font-size:10.5px;font-weight:600;letter-spacing:.04em;color:var(--ink-soft);background:#F2F5F3;border:1px solid var(--border);border-radius:999px;padding:3px 9px;}#dt-page .case-layout{display:grid;grid-template-columns:minmax(0,1fr) 330px;grid-template-areas:\"main aside\";gap:56px;align-items:start;padding:40px 0 16px;}#dt-page .case-main{grid-area:main;min-width:0;}#dt-page .case-aside{grid-area:aside;}#dt-page .art-sec + .art-sec{margin-top:38px;}#dt-page .art-sec h2{font-size:23px;font-weight:900;letter-spacing:-0.01em;line-height:1.25;}#dt-page .art-sec p,#dt-page .art-sec li{font-size:16px;line-height:1.7;color:var(--ink-soft);max-width:68ch;}#dt-page .art-sec h2 + *{margin-top:12px;}#dt-page .art-sec p + p{margin-top:14px;}#dt-page .art-sec strong{color:var(--ink);font-weight:600;}#dt-page .art-sec a{color:var(--teal);font-weight:600;text-decoration:underline;text-underline-offset:2px;text-decoration-thickness:1px;}#dt-page .art-sec ul{margin:12px 0 0;padding-left:20px;}#dt-page .art-sec li + li{margin-top:6px;}#dt-page .factbox{background:var(--surface);border:1px solid var(--border);border-radius:14px;box-shadow:var(--shadow);overflow:hidden;}#dt-page .factbox h2{font-family:'IBM Plex Mono',ui-monospace,monospace;font-size:11px;font-weight:600;letter-spacing:.08em;text-transform:uppercase;color:var(--mint);background:var(--mint-tint);border-bottom:1px solid #CFE9DF;padding:12px 20px;}#dt-page .factbox dl{margin:0;padding:6px 20px 4px;}#dt-page .fact-row{padding:11px 0;border-bottom:1px solid var(--border);}#dt-page .fact-row:last-child{border-bottom:none;}#dt-page .factbox dt{font-family:'IBM Plex Mono',ui-monospace,monospace;font-size:10px;font-weight:600;letter-spacing:.07em;text-transform:uppercase;color:var(--ink-faint);margin-bottom:4px;}#dt-page .factbox dd{margin:0;font-size:13.5px;color:var(--ink);line-height:1.5;}#dt-page .factbox dd.amt{font-family:'Lato',sans-serif;font-weight:900;font-size:22px;letter-spacing:-0.01em;line-height:1.2;}#dt-page .factbox dd .kind{display:block;margin-top:6px;font-size:12px;color:var(--ink-soft);}#dt-page .fact-summary{padding:14px 20px 18px;border-top:1px solid var(--border);background:#FBFCFB;font-size:13.5px;color:var(--ink-soft);line-height:1.6;}#dt-page .fact-summary strong{color:var(--ink);font-weight:600;}#dt-page .quote-verbatim{margin:14px 0 0;background:var(--teal-tint);border-left:4px solid var(--teal);border-radius:0 12px 12px 0;padding:22px 26px;max-width:68ch;}#dt-page .quote-verbatim p{font-size:16px;line-height:1.65;color:var(--ink-soft) !important;}#dt-page .quote-verbatim .said{font-family:'Lato',sans-serif;font-weight:700;font-size:18px;color:var(--ink);}#dt-page .quote-paraphrase p{font-style:normal;}#dt-page .timeline{list-style:none;margin:16px 0 0 !important;padding:0 !important;position:relative;max-width:68ch;}#dt-page .timeline::before{content:\"\";position:absolute;left:6px;top:8px;bottom:8px;width:2px;background:var(--border);}#dt-page .timeline li{position:relative;padding:0 0 18px 30px;margin:0 !important;}#dt-page .timeline li:last-child{padding-bottom:0;}#dt-page .timeline li::before{content:\"\";position:absolute;left:0;top:6px;width:14px;height:14px;border-radius:50%;background:var(--surface);border:3px solid var(--mint-fill);}#dt-page .timeline li:last-child::before{background:var(--mint-fill);}#dt-page .tl-date{display:block;font-family:'IBM Plex Mono',ui-monospace,monospace;font-size:11.5px;font-weight:600;letter-spacing:.05em;text-transform:uppercase;color:var(--ink);}#dt-page .tl-text{display:block;margin-top:2px;font-size:15px;color:var(--ink-soft);line-height:1.6;}#dt-page .source-cite{margin-top:12px;display:flex;gap:14px;align-items:flex-start;border:1px solid var(--border);border-radius:12px;padding:16px 18px;background:#FBFCFB;max-width:68ch;}#dt-page .source-cite .src-ico{width:34px;height:34px;border-radius:8px;background:var(--teal-tint);color:var(--teal);display:flex;align-items:center;justify-content:center;flex-shrink:0;}#dt-page .source-cite .src-ico svg{width:17px;height:17px;}#dt-page .source-cite p{font-size:14px !important;line-height:1.6 !important;color:var(--ink-soft);}#dt-page .source-cite a{color:var(--teal);font-weight:600;text-decoration:none;}#dt-page .source-cite a:hover{text-decoration:underline;}#dt-page a.ext::after{content:\"\";display:inline-block;width:10px;height:10px;margin-left:4px;vertical-align:0;background:currentColor;-webkit-mask:url(\"data:image\/svg+xml,%3Csvg xmlns='http:\/\/www.w3.org\/2000\/svg' viewBox='0 0 12 12'%3E%3Cpath d='M4 2h6v6M10 2 3 9' fill='none' stroke='black' stroke-width='1.6' stroke-linecap='round'\/%3E%3C\/svg%3E\") no-repeat center\/contain;mask:url(\"data:image\/svg+xml,%3Csvg xmlns='http:\/\/www.w3.org\/2000\/svg' viewBox='0 0 12 12'%3E%3Cpath d='M4 2h6v6M10 2 3 9' fill='none' stroke='black' stroke-width='1.6' stroke-linecap='round'\/%3E%3C\/svg%3E\") no-repeat center\/contain;}#dt-page .src-domain{display:block;margin-top:4px;font-family:'IBM Plex Mono',ui-monospace,monospace;font-size:10.5px;letter-spacing:.04em;text-transform:uppercase;color:var(--ink-faint);}#dt-page .card-grid{display:grid;grid-template-columns:repeat(3,1fr);gap:18px;}#dt-page .card-grid.two{grid-template-columns:repeat(2,1fr);}#dt-page .ew-case-card{position:relative;display:flex;flex-direction:column;gap:12px;background:var(--surface);border:1px solid var(--border);border-radius:14px;padding:22px;transition:border-color .15s,box-shadow .15s;}#dt-page .ew-case-card:hover{border-color:#B8D9CB;box-shadow:var(--shadow);}#dt-page .cc-top{display:flex;flex-direction:column;align-items:flex-start;gap:8px;}#dt-page .cc-date{font-family:'IBM Plex Mono',ui-monospace,monospace;font-size:10.5px;font-weight:500;letter-spacing:.04em;text-transform:uppercase;color:var(--ink-faint);}#dt-page .cc-amt{font-family:'Lato',sans-serif;font-weight:900;font-size:26px;color:var(--ink);letter-spacing:-0.015em;line-height:1.1;}#dt-page .ew-case-card h3{font-size:17px;font-weight:900;line-height:1.3;letter-spacing:-0.005em;}#dt-page .ew-case-card h3 a{text-decoration:none;}#dt-page .ew-case-card h3 a::after{content:\"\";position:absolute;inset:0;border-radius:14px;}#dt-page .ew-case-card .cc-mech{font-size:14px;color:var(--ink-soft);line-height:1.55;}#dt-page .cc-why{font-size:13px;color:var(--ink-soft);border-top:1px solid var(--border);padding-top:10px;}#dt-page .cc-go{margin-top:auto;font-size:13.5px;font-weight:600;color:var(--teal);display:inline-flex;align-items:center;gap:6px;}#dt-page .cc-go svg{width:14px;height:14px;}#dt-page .ew-case-card.featured{border-top:4px solid var(--mint-fill);}#dt-page .ew-stat-band{background:var(--ink);border-radius:16px;padding:36px;display:grid;grid-template-columns:repeat(2,1fr);gap:0;}#dt-page .stat-line{padding:22px 26px;border-top:1px solid rgba(255,255,255,.12);}#dt-page .stat-line:nth-child(-n+2){border-top:none;}#dt-page .stat-line:nth-child(odd){border-right:1px solid rgba(255,255,255,.12);}#dt-page .stat-n{font-family:'Lato',sans-serif;font-weight:900;font-size:40px;color:#6FE3B6;letter-spacing:-0.02em;line-height:1.05;}#dt-page .stat-text{margin-top:10px;font-size:14.5px;color:#DCE7E2;line-height:1.6;}#dt-page .stat-text strong{color:#fff;font-weight:600;}#dt-page .stat-src{margin-top:12px;font-family:'IBM Plex Mono',ui-monospace,monospace;font-size:10.5px;letter-spacing:.03em;color:#A9BDB3;line-height:1.5;}#dt-page .stat-src em{font-style:normal;}#dt-page .index-tools{display:flex;flex-wrap:wrap;align-items:center;gap:10px;margin-bottom:14px;}#dt-page .filter-slot{display:flex;flex-wrap:wrap;gap:8px;align-items:center;padding:12px 14px;border:1.5px dashed #E3C98F;border-radius:10px;background:#FFFCF6;}#dt-page .filter-slot .fs-label{font-family:'IBM Plex Mono',ui-monospace,monospace;font-size:10.5px;font-weight:600;letter-spacing:.06em;text-transform:uppercase;color:var(--ink-faint);margin-right:4px;}#dt-page .filter-chip{font-family:'Work Sans',sans-serif;font-size:12.5px;color:var(--ink-soft);background:var(--surface);border:1px solid var(--border);border-radius:999px;padding:4px 11px;}#dt-page .idx-wrap{border:1px solid var(--border);border-radius:14px;overflow:hidden;}#dt-page table.idx{width:100%;border-collapse:collapse;font-size:14px;}#dt-page .idx th,#dt-page .idx td{padding:14px 16px;text-align:left;vertical-align:top;border-bottom:1px solid var(--border);}#dt-page .idx thead th{font-family:'IBM Plex Mono',ui-monospace,monospace;font-size:10.5px;font-weight:600;letter-spacing:.07em;text-transform:uppercase;color:var(--ink-soft);background:var(--mint-tint);white-space:nowrap;}#dt-page .idx thead th[aria-sort]::after{content:\" \\2193\";color:var(--mint);}#dt-page .idx tr.grp td{background:#F7F9F8;font-family:'IBM Plex Mono',ui-monospace,monospace;font-size:11px;font-weight:600;letter-spacing:.08em;color:var(--ink-faint);padding:8px 16px;}#dt-page .idx tbody tr:not(.grp):hover td{background:#FBFCFB;}#dt-page .idx td.d{font-family:'IBM Plex Mono',ui-monospace,monospace;font-size:11.5px;color:var(--ink);width:140px;line-height:1.5;}#dt-page .idx td.e{width:205px;}#dt-page .idx td.c{font-weight:600;color:var(--ink);width:150px;}#dt-page .idx td.m{color:var(--ink-soft);font-size:13.5px;line-height:1.5;}#dt-page .idx td.a{font-family:'Lato',sans-serif;font-weight:900;font-size:14px;color:var(--ink);width:160px;line-height:1.4;}#dt-page .idx td.l{width:115px;}#dt-page .idx td.l a{color:var(--teal);font-weight:600;text-decoration:none;font-size:13.5px;}#dt-page .idx td.l a:hover{text-decoration:underline;}#dt-page .idx tbody tr:last-child td{border-bottom:none;}#dt-page .rank-list{list-style:none;margin:20px 0 0;padding:0;display:flex;flex-direction:column;gap:12px;counter-reset:rank;}#dt-page .rank-item{counter-increment:rank;display:grid;grid-template-columns:52px minmax(0,1fr) auto;gap:4px 18px;align-items:start;background:var(--surface);border:1px solid var(--border);border-radius:14px;padding:18px 22px 18px 18px;}#dt-page .rank-item::before{content:counter(rank);grid-row:1 \/ span 2;width:40px;height:40px;border-radius:50%;background:var(--mint-tint);border:1px solid #CFE9DF;color:var(--mint);font-family:'Lato',sans-serif;font-weight:900;font-size:17px;display:flex;align-items:center;justify-content:center;}#dt-page .rank-title{font-family:'Lato',sans-serif;font-weight:900;font-size:18px;color:var(--ink);line-height:1.3;}#dt-page .rank-title a{text-decoration:none;}#dt-page .rank-title a:hover{text-decoration:underline;}#dt-page .rank-item .status{justify-self:end;align-self:center;}#dt-page .rank-desc{grid-column:2 \/ span 2;font-size:14.5px;color:var(--ink-soft);line-height:1.6;}#dt-page .rank-tail{margin-top:16px;font-size:15px;color:var(--ink-soft);line-height:1.65;max-width:76ch;}#dt-page .pattern-grid{margin-top:20px;display:grid;grid-template-columns:repeat(3,1fr);gap:14px;}#dt-page .pattern-card{background:var(--surface);border:1px solid var(--border);border-radius:12px;padding:20px;font-size:14.5px;color:var(--ink-soft);line-height:1.6;}#dt-page .pattern-card strong{color:var(--ink);font-weight:700;}#dt-page .pattern-card .pc-n{width:26px;height:26px;border-radius:50%;background:var(--mint-tint);color:var(--mint);border:1px solid #CFE9DF;display:flex;align-items:center;justify-content:center;font-family:'Lato',sans-serif;font-weight:900;font-size:13px;margin-bottom:12px;}#dt-page .reg-list{list-style:none;margin:18px 0 0;padding:0;display:flex;flex-direction:column;gap:10px;max-width:80ch;}#dt-page .reg-list li{border-left:3px solid var(--teal);background:var(--surface);border-radius:0 10px 10px 0;padding:14px 18px;font-size:15px;color:var(--ink-soft);line-height:1.6;}#dt-page .reg-list strong{color:var(--ink);}#dt-page .ew-note{margin-top:18px;background:var(--teal-tint);border-left:3px solid var(--teal);border-radius:10px;padding:18px 20px;font-size:15px;color:var(--ink-soft);line-height:1.65;max-width:80ch;}#dt-page .cta-btn{display:inline-flex;align-items:center;justify-content:center;gap:8px;background:var(--mint-fill);color:#fff;font-family:'Lato',sans-serif;font-weight:700;font-size:15px;border-radius:8px;padding:13px 20px;text-decoration:none;line-height:1.35;text-align:center;max-width:100%;}#dt-page .cta-btn:hover{background:#0C9A6E;}#dt-page .cta-btn svg{width:15px;height:15px;flex-shrink:0;}#dt-page .ew-cta{background:var(--ink);border-radius:16px;padding:44px 40px;text-align:center;}#dt-page .ew-cta h2{color:#fff;font-size:28px;font-weight:900;letter-spacing:-0.01em;margin-top:4px;}#dt-page .ew-cta p{margin:12px auto 0;color:#CFE0D8;font-size:15.5px;line-height:1.65;max-width:62ch;}#dt-page .ew-cta .cta-btn{margin-top:24px;}#dt-page .ew-cta-bar{display:flex;align-items:center;justify-content:center;background:var(--mint-tint);border:1px solid #CFE9DF;border-radius:14px;padding:26px 28px;}#dt-page .ew-cta-bar .cta-btn{max-width:560px;}#dt-page .faq-list{max-width:80ch;display:flex;flex-direction:column;gap:10px;margin-top:20px;}#dt-page .faq-item{border:1px solid var(--border);border-radius:10px;padding:4px 18px;background:var(--surface);}#dt-page .faq-item summary{display:flex;align-items:center;justify-content:space-between;gap:16px;padding:16px 0;font-family:'Lato',sans-serif;font-size:16px;font-weight:700;color:var(--ink);cursor:pointer;list-style:none;}#dt-page .faq-item summary::-webkit-details-marker{display:none;}#dt-page .faq-item summary::after{content:\"+\";font-size:20px;font-weight:400;color:var(--mint);flex-shrink:0;}#dt-page .faq-item[open] summary::after{content:\"\\2212\";}#dt-page .faq-item .faq-a{padding-bottom:16px;font-size:15px;color:var(--ink-soft);line-height:1.65;}#dt-page .hero-copy{margin-top:24px;max-width:68ch;}#dt-page .hero-copy p{font-size:16.5px;color:var(--ink-soft);line-height:1.7;}#dt-page .hero-copy p + p{margin-top:14px;}#dt-page .hero-copy .cta-btn{margin-top:24px;}#dt-page .read-grid{margin-top:24px;display:grid;grid-template-columns:1fr 1fr;gap:18px;}#dt-page .read-card{background:var(--surface);border:1px solid var(--border);border-radius:14px;padding:24px;}#dt-page .read-card .rc-n{font-family:'IBM Plex Mono',ui-monospace,monospace;font-size:11px;font-weight:600;letter-spacing:.08em;color:var(--mint);margin-bottom:8px;}#dt-page .read-card h3{font-size:19px;font-weight:900;}#dt-page .read-card p{margin-top:10px;font-size:14.5px;color:var(--ink-soft);line-height:1.65;}#dt-page .read-card strong{color:var(--ink);font-weight:600;}#dt-page .callout-wide{display:grid;grid-template-columns:minmax(0,1fr) auto;gap:28px;align-items:center;background:var(--surface);border:1px solid var(--border);border-left:4px solid var(--teal);border-radius:14px;padding:28px 30px;}#dt-page .callout-wide h2{font-size:24px;font-weight:900;letter-spacing:-0.01em;}#dt-page .callout-wide p{margin-top:10px;font-size:15px;color:var(--ink-soft);line-height:1.65;max-width:70ch;}#dt-page .link-btn{display:inline-flex;align-items:center;gap:8px;font-family:'Lato',sans-serif;font-weight:700;font-size:14.5px;color:var(--ink);border:1.5px solid var(--ink);border-radius:8px;padding:11px 16px;text-decoration:none;white-space:nowrap;}#dt-page .link-btn:hover{background:var(--ink);color:#fff;}#dt-page .link-btn svg{width:14px;height:14px;}#dt-page .sources-band p{font-size:16px;color:var(--ink-soft);line-height:1.9;max-width:80ch;}#dt-page .sources-band p + p{margin-top:10px;}#dt-page .sources-band a{color:var(--teal);font-weight:600;text-decoration:none;border-bottom:1px solid #B9D1DA;}#dt-page .sources-band a:hover{border-bottom-color:var(--teal);}#dt-page .fine-note{margin-top:14px;font-size:14.5px;color:var(--ink-soft);line-height:1.65;max-width:76ch;}#dt-page .fine-note em{font-style:normal;font-family:'IBM Plex Mono',ui-monospace,monospace;font-size:11.5px;letter-spacing:.02em;color:var(--ink-faint);}#dt-page .also-line{margin-top:18px;font-size:14.5px;color:var(--ink-soft);}#dt-page .also-line .al-k{font-family:'IBM Plex Mono',ui-monospace,monospace;font-size:10.5px;font-weight:600;letter-spacing:.07em;text-transform:uppercase;color:var(--ink-faint);margin-right:8px;}@media (max-width:980px){#dt-page .case-layout{grid-template-columns:1fr;grid-template-areas:\"aside\" \"main\";gap:32px;}#dt-page .case-aside{position:static;}#dt-page .card-grid{grid-template-columns:repeat(2,1fr);}#dt-page .callout-wide{grid-template-columns:1fr;}}@media (max-width:820px){#dt-page .ew-stat-band{grid-template-columns:1fr;padding:14px 8px;}#dt-page .stat-line{border-right:none !important;border-top:1px solid rgba(255,255,255,.12) !important;}#dt-page .stat-line:first-child{border-top:none !important;}#dt-page .pattern-grid,#dt-page .read-grid,#dt-page .enf-key{grid-template-columns:1fr;}#dt-page .idx-wrap{border:none;border-radius:0;overflow:visible;}#dt-page table.idx,#dt-page .idx tbody,#dt-page .idx tr,#dt-page .idx td{display:block;width:auto !important;}#dt-page .idx thead{position:absolute;width:1px;height:1px;overflow:hidden;clip:rect(0,0,0,0);}#dt-page .idx tr.grp td{background:none;padding:18px 2px 8px;border:none;}#dt-page .idx tbody tr:not(.grp){border:1px solid var(--border);border-radius:12px;margin-bottom:10px;padding:14px 16px;display:grid;grid-template-columns:1fr auto;gap:6px 12px;}#dt-page .idx tbody tr:not(.grp) td{border:none;padding:0;}#dt-page .idx td.d{grid-column:1;}#dt-page .idx td.a{grid-column:2;grid-row:1;text-align:right;}#dt-page .idx td.e,#dt-page .idx td.c,#dt-page .idx td.m,#dt-page .idx td.l{grid-column:1 \/ -1;}#dt-page .idx td.c{font-size:16px;}}@media (max-width:680px){#dt-page .wrap{padding:0 20px;}#dt-page .notice .wrap{padding:10px 20px;}#dt-page .ew-head h1{font-size:30px;}#dt-page .definition{padding:22px 20px;}#dt-page .def-text{font-size:16.5px;}#dt-page .card-grid,#dt-page .card-grid.two{grid-template-columns:1fr;}#dt-page .ew-sec{padding:40px 0;}#dt-page .ew-cta{padding:34px 22px;}#dt-page .ew-cta h2{font-size:24px;}#dt-page .section-head h2{font-size:24px;}#dt-page .rank-item{grid-template-columns:44px minmax(0,1fr);}#dt-page .rank-item .status{grid-column:2;justify-self:start;}#dt-page .rank-desc{grid-column:1 \/ -1;}#dt-page .stat-n{font-size:34px;}}@media (prefers-reduced-motion:reduce){#dt-page{scroll-behavior:auto;}#dt-page .ew-case-card{transition:none;}}#dt-page .r1-fig{margin:22px 0 6px;}#dt-page .r1-fig img{display:block;max-width:100%;height:auto;}#dt-page .r1-diagram img{width:100%;max-width:960px;border:1px solid var(--border,#E3EAE6);border-radius:12px;background:#fff;}#dt-page .r1-hero img,#dt-page .r1-card img{width:100%;max-width:640px;aspect-ratio:640\/440;border-radius:14px;}#dt-page .r1-crop>img{display:block;width:100%;height:auto;}#dt-page .r1-crop{border:1px solid var(--border,#E3EAE6);border-radius:12px;overflow:hidden;background:#fff;}#dt-page .r1-shots .r1-crop + .r1-crop{margin-top:14px;}#dt-page .r1-fig figcaption{margin-top:10px;font-size:13.5px;color:var(--ink-soft,#51605A);line-height:1.55;max-width:80ch;}#dt-page .r1-cards{display:grid;grid-template-columns:repeat(3,1fr);gap:14px;}#dt-page .r1-cards img{width:100%;aspect-ratio:640\/440;border-radius:12px;}#dt-page .head-grid{display:grid;grid-template-columns:minmax(0,1fr) minmax(0,440px);gap:40px;align-items:start;}#dt-page .head-grid .r1-fig{margin-top:6px;}#dt-page .r1-hero-wide{margin-top:28px;}#dt-page .ty-hero-grid.r1-onecol{grid-template-columns:1fr;}@media (max-width:900px){#dt-page .head-grid{grid-template-columns:1fr;}#dt-page .r1-cards{grid-template-columns:1fr;}}#dt-page .head-grid.hv2{grid-template-columns:minmax(0,1fr) minmax(0,440px);grid-template-areas:\"title media\" \"rest media\";grid-template-rows:auto 1fr;column-gap:48px;row-gap:0;align-items:start;}#dt-page .head-grid.hv2>.head-title{grid-area:title;}#dt-page .head-grid.hv2>.head-media{grid-area:media;}#dt-page .head-grid.hv2>.head-rest{grid-area:rest;}#dt-page .head-media{display:flex;flex-direction:column;gap:18px;}#dt-page .head-media .r1-fig{margin:6px 0 0;}#dt-page .head-media .definition{margin-top:0;max-width:none;}#dt-page .head-media .def-text{font-size:16px;line-height:1.55;}#dt-page .head-lead{margin-top:24px;}#dt-page .head-rest>.head-lead{margin-top:0;}#dt-page .head-rest{padding-top:24px;}#dt-page .head-rest>.hero-copy>p:first-child{margin-top:0;}#dt-page .head-rest>.hero-copy{margin-top:0;}#dt-page .head-lead h2{font-size:22px;line-height:1.3;margin:0 0 10px;}#dt-page .head-lead p{margin:0 0 14px;}#dt-page .head-lead .section-head{margin:0;max-width:none;}#dt-page .ew-head{padding-bottom:56px;}#dt-page .def-kicker::before{content:none;}#dt-page .definition::after{content:none;}#dt-page .definition .def-text{font-weight:400;letter-spacing:0;}#dt-page .definition .def-text strong{font-weight:700;}#dt-page .hero-link{margin-top:24px;}#dt-page .prof-grid.no-aside{grid-template-columns:minmax(0,780px);}#dt-page .case-hero .head-media .prof-glance{position:static;width:100%;}#dt-page .art-grid>article.prose>h2:first-child,#dt-page .pillar-body>.prose:first-child>h2:first-child{margin-top:0;}#dt-page .head-lead p.lede,#dt-page .head-rest p.lede{font-size:inherit;}#dt-page .case-layout.no-aside{grid-template-columns:minmax(0,780px);grid-template-areas:\"main\";}#dt-page .case-hero .head-lead .definition{margin-top:22px;}#dt-page .case-hero .head-lead .def-text{font-size:16px;line-height:1.55;}#dt-page .case-hero .head-media .case-aside{position:static;}#dt-page .case-hero .head-media .factbox{margin:0;width:100%;max-width:none;}#dt-page .case-hero .head-media .case-aside{width:100%;}@media (max-width:900px){#dt-page .head-grid.hv2{display:flex;flex-direction:column;gap:0;}#dt-page .head-grid.hv2 .head-media{display:contents;}#dt-page .head-grid.hv2>.head-title{order:1;}#dt-page .head-grid.hv2 .head-media .definition{order:2;margin-top:22px;}#dt-page .head-grid.hv2 .head-media .r1-fig{order:3;margin-top:22px;}#dt-page .head-grid.hv2>.head-rest{order:4;}#dt-page .head-grid.case-hero>.head-rest{order:2;}#dt-page .head-grid.case-hero .head-media>*{order:3;margin-top:22px;}}#dt-page .tcta-band{padding:48px 0;}#dt-page .tcta{position:relative;overflow:hidden;display:grid;grid-template-columns:minmax(0,1fr) minmax(0,1.1fr);gap:40px;align-items:center;border-radius:16px;padding:40px 0 40px 40px;background:var(--ink);color:#fff;text-align:left;}#dt-page .tcta::after{content:\"\";position:absolute;right:-120px;top:-120px;width:360px;height:360px;border-radius:50%;background:radial-gradient(circle,rgba(16,185,129,.28),rgba(16,185,129,0) 70%);pointer-events:none;}#dt-page .tcta .eyebrow.on-dark{display:inline-flex;align-items:center;gap:8px;background:rgba(255,255,255,0.1);border:1px solid rgba(255,255,255,0.18);color:#8FE3C3;border-radius:999px;padding:6px 12px;font-family:'IBM Plex Mono',ui-monospace,monospace;font-size:12px;font-weight:600;letter-spacing:.08em;text-transform:uppercase;margin-bottom:14px;}#dt-page .tcta .eyebrow.on-dark .dot{width:6px;height:6px;border-radius:50%;background:#6FE3B6;}#dt-page .tcta h2{font-size:28px;font-weight:900;letter-spacing:-0.01em;line-height:1.2;color:#fff;margin:0;}#dt-page .tcta .tcta-sub{margin:12px 0 0;font-size:15px;line-height:1.6;color:#CFE0D8;}#dt-page .tcta-k{margin-top:22px;font-family:'IBM Plex Mono',ui-monospace,monospace;font-size:10.5px;font-weight:600;letter-spacing:.08em;text-transform:uppercase;color:#8FA69A;}#dt-page .tcta-list{list-style:none;margin:10px 0 0;padding:0;display:grid;gap:8px;font-size:14px;}#dt-page .tcta-list li{display:flex;gap:8px;align-items:flex-start;line-height:1.45;color:#fff;font-weight:600;padding-bottom:8px;border-bottom:1px solid rgba(255,255,255,.08);}#dt-page .tcta-more{list-style:none;margin:10px 0 0;padding:0;display:grid;grid-template-columns:1fr 1fr;gap:8px 18px;font-size:13.5px;color:#E4EEE9;}#dt-page .tcta-more li{display:flex;gap:7px;align-items:flex-start;line-height:1.45;}#dt-page .tcta svg{width:14px;height:14px;flex-shrink:0;margin-top:3px;color:#6FE3B6;}#dt-page .tcta-act{margin-top:26px;display:flex;align-items:center;gap:16px;flex-wrap:wrap;}#dt-page .tcta-btn{display:inline-flex;align-items:center;gap:8px;background:var(--mint-fill);color:#fff;font-family:'Lato',sans-serif;font-weight:700;font-size:16px;border-radius:8px;padding:14px 22px;text-decoration:none;}#dt-page .tcta-btn:hover{background:#0C9A6E;}#dt-page .tcta-btn svg{width:16px;height:16px;margin:0;color:#fff;}#dt-page .tcta-g2{font-size:12.5px;color:#CFE0D8;}#dt-page .tcta-g2 strong{color:#fff;}#dt-page .tcta-g2 .stars{color:#E0A32E;letter-spacing:1px;font-size:11px;}#dt-page .tcta-fine{margin:12px 0 0;font-size:12.5px;line-height:1.55;max-width:52ch;color:#8FA69A;}#dt-page .tcta-shot{align-self:stretch;display:flex;align-items:center;}#dt-page .tcta-frame{width:calc(100% + 140px);border-radius:10px 0 0 10px;overflow:hidden;box-shadow:0 30px 60px -30px rgba(0,0,0,.55);border:1px solid rgba(255,255,255,.14);border-right:none;background:#fff;}#dt-page .tcta-frame .bar{height:26px;display:flex;align-items:center;gap:6px;padding:0 12px;background:#EEF2F0;border-bottom:1px solid var(--border);}#dt-page .tcta-frame .bar i{width:8px;height:8px;border-radius:50%;background:#C9D3CE;}#dt-page .tcta-frame img{display:block;width:100%;height:auto;}#dt-page .tcta-cap{margin-top:10px;font-family:'IBM Plex Mono',ui-monospace,monospace;font-size:10.5px;letter-spacing:.06em;text-transform:uppercase;color:#8FA69A;}@media (max-width:900px){#dt-page .tcta{grid-template-columns:1fr;padding:32px 24px 0;gap:28px;}#dt-page .tcta-shot{margin:0 -24px 0 0;}#dt-page .tcta-frame{width:100%;}}@media (max-width:600px){#dt-page .tcta h2{font-size:23px;}#dt-page .tcta-more{grid-template-columns:1fr;}#dt-page .tcta-btn{width:100%;justify-content:center;}}#dt-page .definition .def-text{font-size:16px;line-height:1.55;}<\/style><div id=\"dt-page\" class=\"dt-page\"><main> <section class=\"ew-head\"><div class=\"wrap\"><nav aria-label=\"Breadcrumb\" class=\"breadcrumb\"><ol><li><a href=\"\/en\/\">Home<\/a><\/li><li><a href=\"https:\/\/datatrue.com\/en\/resources\/\">Resources<\/a><\/li><li><a href=\"https:\/\/datatrue.com\/en\/resources\/enforcement-watch\/\">Enforcement Watch<\/a><\/li><li><span aria-current=\"page\">OAIC health pixels<\/span><\/li><\/ol><\/nav><div class=\"head-grid hv2 case-hero\"><div class=\"head-title\"><h1>Australia&#8217;s OAIC finds tracking pixels breached privacy law: Medmate and Monash IVF (2026)<\/h1><div class=\"ew-meta\"><span class=\"enf enf-oaic\" data-enforcer=\"oaic\"><svg viewBox=\"0 0 16 16\" fill=\"none\" aria-hidden=\"true\"><path d=\"M2 6.2 8 2.8l6 3.4M3.5 6.8v5.4M6.5 6.8v5.4M9.5 6.8v5.4M12.5 6.8v5.4M2 13.4h12\" stroke=\"currentColor\" stroke-width=\"1.4\" stroke-linecap=\"round\" stroke-linejoin=\"round\"\/><\/svg><span class=\"vh\">Regulator: <\/span><span>OAIC (Australia)<\/span><\/span><span class=\"ew-updated\"><svg aria-hidden=\"true\" fill=\"none\" viewbox=\"0 0 16 16\"><rect height=\"11\" rx=\"2\" stroke=\"currentColor\" stroke-width=\"1.5\" width=\"12\" x=\"2\" y=\"3\"><\/rect><path d=\"M2 6.5h12M5.5 1.8v2.4M10.5 1.8v2.4\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-width=\"1.5\"><\/path><\/svg>Last updated <time datetime=\"2026-09-22\">September 22, 2026<\/time><\/span><\/div><\/div><div class=\"head-media\"><div aria-labelledby=\"glance\" class=\"case-aside\"><section class=\"factbox\"><h2 id=\"glance\">At a glance<\/h2><dl><div class=\"fact-row\"><dt>Brought by<\/dt><dd><span class=\"enf enf-oaic\" data-enforcer=\"oaic\"><svg viewBox=\"0 0 16 16\" fill=\"none\" aria-hidden=\"true\"><path d=\"M2 6.2 8 2.8l6 3.4M3.5 6.8v5.4M6.5 6.8v5.4M9.5 6.8v5.4M12.5 6.8v5.4M2 13.4h12\" stroke=\"currentColor\" stroke-width=\"1.4\" stroke-linecap=\"round\" stroke-linejoin=\"round\"\/><\/svg><span class=\"vh\">Regulator: <\/span><span>OAIC (Australia)<\/span><\/span><span class=\"kind\">Regulator<\/span><\/dd><\/div><div class=\"fact-row\"><dt>Company<\/dt><dd>Medmate and Monash IVF<\/dd><\/div><div class=\"fact-row\"><dt>Sector<\/dt><dd>Telehealth and fertility<\/dd><\/div><div class=\"fact-row\"><dt>Law<\/dt><dd>Australian Privacy Act (APPs)<\/dd><\/div><div class=\"fact-row\"><dt>Amount<\/dt><dd class=\"amt\"><span class=\"amt-v\">Breach findings, no fine<\/span><\/dd><\/div><div class=\"fact-row\"><dt>Date<\/dt><dd>Determined Jun 11, 2026<\/dd><\/div><div class=\"fact-row\"><dt>Status<\/dt><dd>Breach findings, no fine<\/dd><\/div><\/dl><\/section><\/div><\/div><div class=\"head-rest\"><div class=\"head-lead\"><div class=\"definition no-glyph\" id=\"definition\"><p class=\"def-kicker\">Summary<\/p><p class=\"def-text\">In June 2026, Australia&#8217;s privacy regulator, the OAIC, found that two health providers, <strong>Medmate and Monash IVF<\/strong>, breached the Privacy Act by using tracking pixels that sent visitors&#8217; sensitive health information to advertising platforms without consent. These are formal breach findings with remediation orders, and they carry no monetary fine.<\/p><\/div><\/div><\/div><\/div><\/div><\/section><div class=\"wrap\"><div class=\"case-layout no-aside\"><div class=\"case-main\"><section class=\"art-sec\"><h2>What happened<\/h2><p>Medmate is a telehealth provider and Monash IVF provides fertility services. The determinations are dated June 11, 2026. On Medmate&#8217;s site, Meta and TikTok pixels collected health data and fed targeted social-media advertising. On Monash IVF&#8217;s site, seven different pixels were used at various times (five were active in December 2024), and a custom Meta pixel tracked visits to fertility pages and form submissions. Monash also uploaded Custom Audience lists to Meta containing names, email addresses, phone numbers and states.<\/p><\/section><section class=\"art-sec\"><h2>The mechanism<\/h2><p>These are standard advertising pixels on health sites, doing what pixels do: sending what a visitor looked at to a third party. When the site is about telehealth or fertility, what a visitor looked at is sensitive health data. Australia&#8217;s Privacy Act protects that through the Australian Privacy Principles (<strong>APPs<\/strong>), and the OAIC found breaches of the rules on collecting sensitive information, notifying people, and using it for direct marketing.<\/p><figure class=\"r1-fig r1-diagram\"><img decoding=\"async\" src=\"\/wp-content\/uploads\/2026\/09\/D04.png\" alt=\"A clinic booking page&#x27;s pixel sends the cardiology page and a hashed email to an ad platform: health data tied to a person.\" width=\"960\" height=\"400\" loading=\"lazy\"><\/figure><\/section><section class=\"art-sec\"><h2>Why it was preventable<\/h2><p>A pixel that sends page-visit data from a health site to an ad platform is exactly what payload inspection surfaces. The fix starts with seeing what each pixel sends, and from which pages.<\/p><\/section><section class=\"art-sec\" data-quote=\"verbatim\"><h2>In the regulator&#8217;s words<\/h2><figure class=\"quote-verbatim\"><p>The Privacy Commissioner said: <span class=\"said\">&#8220;[W]ebsite providers must obtain consent where they&#8217;re using tracking pixels to collect sensitive information, such as data on health, political opinions, race or ethnicity.&#8221;<\/span><\/p><\/figure><\/section><section class=\"art-sec\"><h2>Timeline<\/h2><ol class=\"timeline\"><li><span class=\"tl-date\">Jun 11, 2026<\/span><span class=\"tl-text\">determinations dated.<\/span><\/li><li><span class=\"tl-date\">Jun 24, 2026<\/span><span class=\"tl-text\">published.<\/span><\/li><\/ol><\/section><section class=\"art-sec\"><h2>Source<\/h2><div class=\"source-cite\"><span class=\"src-ico\"><svg aria-hidden=\"true\" fill=\"none\" viewbox=\"0 0 16 16\"><path d=\"M4 1.8h5.2L12.5 5v9.2H4z\" stroke=\"currentColor\" stroke-linejoin=\"round\" stroke-width=\"1.4\"><\/path><path d=\"M9 1.8V5.2h3.4M6 8.2h4.5M6 10.7h4.5\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-width=\"1.4\"><\/path><\/svg><\/span><div><p><a class=\"ext\" href=\"https:\/\/www.oaic.gov.au\/news\/media-centre\/privacy-commissioner-finds-privacy-breaches-in-third-party-tracking-pixel-investigation\" rel=\"noopener\" target=\"_blank\">oaic.gov.au media release<\/a>; full determinations [2026] AICmr 40 and 41 on AustLII.<\/p><span class=\"src-domain\">oaic.gov.au<\/span><\/div><\/div><\/section><\/div><\/div><\/div><section class=\"ew-sec rule\"><div class=\"wrap\"><h2 id=\"faq\">Questions<\/h2><div class=\"faq-list\"><details class=\"faq-item\" open=\"\"><summary>Who found these breaches?<\/summary><p class=\"faq-a\">The OAIC, the Office of the Australian Information Commissioner. It found that Medmate and Monash IVF breached the Privacy Act. These are formal breach findings with remediation orders, and they carry no monetary fine.<\/p><\/details><details class=\"faq-item\"><summary>What did the pixels do?<\/summary><p class=\"faq-a\">On Medmate&#8217;s site, Meta and TikTok pixels collected health data and fed targeted advertising. On Monash IVF&#8217;s site, seven different pixels were used at various times (five were active in December 2024), and a custom Meta pixel tracked visits to fertility pages and form submissions. Monash also uploaded Custom Audience lists to Meta containing names, email addresses, phone numbers and states.<\/p><\/details><details class=\"faq-item\"><summary>Why is this sensitive data?<\/summary><p class=\"faq-a\">When a site is about telehealth or fertility, what a visitor looked at reveals a health matter. Australia&#8217;s Privacy Act protects that through the Australian Privacy Principles, which require consent to collect sensitive information.<\/p><\/details><\/div><\/div><\/section><section class=\"ew-sec tint\"><div class=\"wrap\"><h2 id=\"related\">Related cases<\/h2><div class=\"card-grid\" style=\"margin-top:20px\"><article class=\"ew-case-card\" style=\"border-left:4px solid var(--teal)\"><div class=\"cc-top\"><span class=\"cc-date\">Enforcement Watch<\/span><\/div><h3><a href=\"\/en\/resources\/enforcement-watch\/health-pixel-lawsuits\/\">The health-pixel lawsuit wave<\/a><\/h3><\/article><article class=\"ew-case-card\"><div class=\"cc-top\"><span class=\"enf enf-private\" data-enforcer=\"private\"><svg viewBox=\"0 0 16 16\" fill=\"none\" aria-hidden=\"true\"><circle cx=\"5.5\" cy=\"5.5\" r=\"2.1\" stroke=\"currentColor\" stroke-width=\"1.4\"\/><circle cx=\"11\" cy=\"6\" r=\"1.7\" stroke=\"currentColor\" stroke-width=\"1.4\"\/><path d=\"M1.8 13.2c.4-2.3 1.9-3.6 3.7-3.6s3.3 1.3 3.7 3.6M9.4 9.8c.5-.3 1-.4 1.6-.4 1.5 0 2.7 1.1 3 3\" stroke=\"currentColor\" stroke-width=\"1.4\" stroke-linecap=\"round\"\/><\/svg><span>Private litigation<\/span><\/span><span class=\"cc-date\">2025 (prelim approval; no final approval entered)<\/span><\/div><div class=\"cc-amt\">Up to ~$18.47M (proposed)<\/div><h3><a href=\"\/en\/resources\/enforcement-watch\/aspen-dental-pixel-settlement-2025\/\">Aspen Dental&#8217;s pixel-tracking settlement<\/a><\/h3><p class=\"cc-mech\">Meta Pixel and Google Analytics on appointment site (alleged)<\/p><\/article><article class=\"ew-case-card\"><div class=\"cc-top\"><span class=\"enf enf-ftc\" data-enforcer=\"ftc\"><svg viewBox=\"0 0 16 16\" fill=\"none\" aria-hidden=\"true\"><path d=\"M2 6.2 8 2.8l6 3.4M3.5 6.8v5.4M6.5 6.8v5.4M9.5 6.8v5.4M12.5 6.8v5.4M2 13.4h12\" stroke=\"currentColor\" stroke-width=\"1.4\" stroke-linecap=\"round\" stroke-linejoin=\"round\"\/><\/svg><span class=\"vh\">Regulator: <\/span><span>FTC, with Utah and California<\/span><\/span><span class=\"cc-date\">Jul 29, 2026 (filed)<\/span><\/div><div class=\"cc-amt\">Pending<\/div><h3><a href=\"https:\/\/datatrue.com\/en\/resources\/enforcement-watch\/hims-hers-pixel-lawsuit-2026\/\">FTC v. Hims &amp; Hers<\/a><\/h3><p class=\"cc-mech\">Alleged sharing of health data (ED, mental health) with ad platforms, not clearly disclosed<\/p><\/article><\/div><\/div><\/section><section class=\"tcta-band\"><div class=\"wrap\"><div class=\"tcta\"> <div class=\"tcta-copy\"><span class=\"eyebrow on-dark\"><span class=\"dot\"><\/span>30-day free trial<\/span><h2>See what your tags send before it becomes a case<\/h2><p class=\"tcta-sub\">DataTrue runs real journeys on your site in each consent state and reads what each tag sends, field by field. A tag sending what it should not shows up in a test.<\/p> <div class=\"tcta-k\">What DataTrue checks<\/div><ul class=\"tcta-list\"><li><svg viewBox=\"0 0 16 16\" fill=\"none\" aria-hidden=\"true\"><path d=\"M3.5 8.5l3 3 6-7\" stroke=\"currentColor\" stroke-width=\"1.8\" stroke-linecap=\"round\" stroke-linejoin=\"round\"\/><\/svg>Every page, with coverage scans<\/li><li><svg viewBox=\"0 0 16 16\" fill=\"none\" aria-hidden=\"true\"><path d=\"M3.5 8.5l3 3 6-7\" stroke=\"currentColor\" stroke-width=\"1.8\" stroke-linecap=\"round\" stroke-linejoin=\"round\"\/><\/svg>Scheduled runs, with alerts when a result changes<\/li><li><svg viewBox=\"0 0 16 16\" fill=\"none\" aria-hidden=\"true\"><path d=\"M3.5 8.5l3 3 6-7\" stroke=\"currentColor\" stroke-width=\"1.8\" stroke-linecap=\"round\" stroke-linejoin=\"round\"\/><\/svg>Full journeys, like checkout and signup, in each consent state<\/li><li><svg viewBox=\"0 0 16 16\" fill=\"none\" aria-hidden=\"true\"><path d=\"M3.5 8.5l3 3 6-7\" stroke=\"currentColor\" stroke-width=\"1.8\" stroke-linecap=\"round\" stroke-linejoin=\"round\"\/><\/svg>What each tag sent, field by field<\/li><\/ul> <div class=\"tcta-k\">Also in the full platform<\/div><ul class=\"tcta-more\"><li><svg viewBox=\"0 0 16 16\" fill=\"none\" aria-hidden=\"true\"><path d=\"M3.5 8.5l3 3 6-7\" stroke=\"currentColor\" stroke-width=\"1.8\" stroke-linecap=\"round\" stroke-linejoin=\"round\"\/><\/svg>PII detection with test personas<\/li><li><svg viewBox=\"0 0 16 16\" fill=\"none\" aria-hidden=\"true\"><path d=\"M3.5 8.5l3 3 6-7\" stroke=\"currentColor\" stroke-width=\"1.8\" stroke-linecap=\"round\" stroke-linejoin=\"round\"\/><\/svg>iOS and Android app testing<\/li><li><svg viewBox=\"0 0 16 16\" fill=\"none\" aria-hidden=\"true\"><path d=\"M3.5 8.5l3 3 6-7\" stroke=\"currentColor\" stroke-width=\"1.8\" stroke-linecap=\"round\" stroke-linejoin=\"round\"\/><\/svg>Pre-publish testing for GTM and Adobe Tags<\/li><li><svg viewBox=\"0 0 16 16\" fill=\"none\" aria-hidden=\"true\"><path d=\"M3.5 8.5l3 3 6-7\" stroke=\"currentColor\" stroke-width=\"1.8\" stroke-linecap=\"round\" stroke-linejoin=\"round\"\/><\/svg>REST API, plus Slack and Jira alerts<\/li><\/ul> <div class=\"tcta-act\"><a class=\"tcta-btn\" href=\"https:\/\/datatrue.com\/en\/start-free-trial\/\">Start a free 30-day trial <svg viewBox=\"0 0 16 16\" fill=\"none\" aria-hidden=\"true\"><path d=\"M3 8h10M9 4l4 4-4 4\" stroke=\"currentColor\" stroke-width=\"1.6\" stroke-linecap=\"round\" stroke-linejoin=\"round\"\/><\/svg><\/a><span class=\"tcta-g2\"><span class=\"stars\">\u2605\u2605\u2605\u2605\u2605<\/span> <strong>4.6\/5<\/strong> on G2<\/span><\/div> <p class=\"tcta-fine\">The full platform, every feature, free for 30 days.<\/p><\/div> <div class=\"tcta-shot\"><div style=\"width:100%\"><div class=\"tcta-frame\"><div class=\"bar\"><i><\/i><i><\/i><i><\/i><\/div><img decoding=\"async\" src=\"\/wp-content\/uploads\/2026\/09\/coverage-scan-result.png\" alt=\"DataTrue scan overview showing scan details and page status for a scheduled daily coverage scan\" width=\"1402\" height=\"876\" loading=\"lazy\"><\/div><div class=\"tcta-cap\">A scheduled daily coverage scan in DataTrue<\/div><\/div><\/div> <\/div><\/div><\/section> <\/main><\/div><script type=\"application\/ld+json\">{\"@context\":\"https:\/\/schema.org\",\"@type\":\"FAQPage\",\"mainEntity\":[{\"@type\":\"Question\",\"name\":\"Who found these breaches?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"The OAIC, the Office of the Australian Information Commissioner. It found that Medmate and Monash IVF breached the Privacy Act. These are formal breach findings with remediation orders, and they carry no monetary fine.\"}},{\"@type\":\"Question\",\"name\":\"What did the pixels do?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"On Medmate's site, Meta and TikTok pixels collected health data and fed targeted advertising. On Monash IVF's site, seven different pixels were used at various times (five were active in December 2024), and a custom Meta pixel tracked visits to fertility pages and form submissions. Monash also uploaded Custom Audience lists to Meta containing names, email addresses, phone numbers and states.\"}},{\"@type\":\"Question\",\"name\":\"Why is this sensitive data?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"When a site is about telehealth or fertility, what a visitor looked at reveals a health matter. Australia's Privacy Act protects that through the Australian Privacy Principles, which require consent to collect sensitive information.\"}}]}<\/script>\n","protected":false},"excerpt":{"rendered":"<p>Home Resources Enforcement Watch OAIC health pixels Australia&#8217;s OAIC finds tracking pixels breached privacy law: Medmate and Monash IVF (2026) Regulator: OAIC (Australia)Last updated September 22, 2026 At a glance Brought by Regulator: OAIC (Australia)Regulator Company Medmate and Monash IVF Sector Telehealth and fertility Law Australian Privacy Act (APPs) Amount Breach findings, no fine Date [&hellip;]<\/p>\n","protected":false},"author":14,"featured_media":0,"parent":227511,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_et_pb_use_builder":"off","_et_pb_old_content":"","_et_gb_content_width":"","footnotes":""},"class_list":["post-227538","page","type-page","status-publish","hentry"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.6 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>OAIC: Health Pixels Breached Australia&#039;s Privacy Law<\/title>\n<meta name=\"description\" content=\"Australia&#039;s OAIC found Medmate and Monash IVF breached the Privacy Act by sending sensitive health data to advertisers through tracking pixels (2026).\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/datatrue.com\/en\/resources\/enforcement-watch\/oaic-health-pixel-breach-2026\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"OAIC: Health Pixels Breached Australia&#039;s Privacy Law\" \/>\n<meta property=\"og:description\" content=\"Australia&#039;s OAIC found Medmate and Monash IVF breached the Privacy Act by sending sensitive health data to advertisers through tracking pixels (2026).\" \/>\n<meta property=\"og:url\" content=\"https:\/\/datatrue.com\/en\/resources\/enforcement-watch\/oaic-health-pixel-breach-2026\/\" \/>\n<meta property=\"og:site_name\" content=\"DataTrue\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/datatruedigital\/\" \/>\n<meta property=\"og:image\" content=\"https:\/\/datatrue.com\/wp-content\/uploads\/2022\/04\/New-DT-Logo.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1328\" \/>\n\t<meta property=\"og:image:height\" content=\"208\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:site\" content=\"@data_true\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"NewsArticle\",\"@id\":\"https:\\\/\\\/datatrue.com\\\/en\\\/resources\\\/enforcement-watch\\\/oaic-health-pixel-breach-2026\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/datatrue.com\\\/en\\\/resources\\\/enforcement-watch\\\/oaic-health-pixel-breach-2026\\\/\"},\"author\":{\"name\":\"Sayf Sharif\",\"@id\":\"https:\\\/\\\/datatrue.com\\\/en\\\/#\\\/schema\\\/person\\\/a7cf71063d56c5134850c2ed33ccf026\"},\"headline\":\"OAIC health pixels\",\"datePublished\":\"2026-10-06T15:39:49+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/datatrue.com\\\/en\\\/resources\\\/enforcement-watch\\\/oaic-health-pixel-breach-2026\\\/\"},\"wordCount\":700,\"publisher\":{\"@id\":\"https:\\\/\\\/datatrue.com\\\/en\\\/#organization\"},\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/datatrue.com\\\/en\\\/resources\\\/enforcement-watch\\\/oaic-health-pixel-breach-2026\\\/\",\"url\":\"https:\\\/\\\/datatrue.com\\\/en\\\/resources\\\/enforcement-watch\\\/oaic-health-pixel-breach-2026\\\/\",\"name\":\"OAIC: Health Pixels Breached Australia's Privacy Law\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/datatrue.com\\\/en\\\/#website\"},\"datePublished\":\"2026-10-06T15:39:49+00:00\",\"description\":\"Australia's OAIC found Medmate and Monash IVF breached the Privacy Act by sending sensitive health data to advertisers through tracking pixels (2026).\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/datatrue.com\\\/en\\\/resources\\\/enforcement-watch\\\/oaic-health-pixel-breach-2026\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/datatrue.com\\\/en\\\/resources\\\/enforcement-watch\\\/oaic-health-pixel-breach-2026\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/datatrue.com\\\/en\\\/resources\\\/enforcement-watch\\\/oaic-health-pixel-breach-2026\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/datatrue.com\\\/en\\\/datatrue-home-2026\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Resources\",\"item\":\"https:\\\/\\\/datatrue.com\\\/en\\\/resources\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Enforcement Watch\",\"item\":\"https:\\\/\\\/datatrue.com\\\/en\\\/resources\\\/enforcement-watch\\\/\"},{\"@type\":\"ListItem\",\"position\":4,\"name\":\"OAIC health pixels\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/datatrue.com\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/datatrue.com\\\/en\\\/\",\"name\":\"DataTrue\",\"description\":\"Web Analytics Quality Assurance\",\"publisher\":{\"@id\":\"https:\\\/\\\/datatrue.com\\\/en\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/datatrue.com\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/datatrue.com\\\/en\\\/#organization\",\"name\":\"DataTrue\",\"url\":\"https:\\\/\\\/datatrue.com\\\/en\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/datatrue.com\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/datatrue.com\\\/wp-content\\\/uploads\\\/2022\\\/04\\\/New-DT-Logo.png\",\"contentUrl\":\"https:\\\/\\\/datatrue.com\\\/wp-content\\\/uploads\\\/2022\\\/04\\\/New-DT-Logo.png\",\"width\":1328,\"height\":208,\"caption\":\"DataTrue\"},\"image\":{\"@id\":\"https:\\\/\\\/datatrue.com\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/datatruedigital\\\/\",\"https:\\\/\\\/x.com\\\/data_true\",\"https:\\\/\\\/www.youtube.com\\\/c\\\/Datatrue\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/datatrue.com\\\/en\\\/#\\\/schema\\\/person\\\/a7cf71063d56c5134850c2ed33ccf026\",\"name\":\"Sayf Sharif\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"OAIC: Health Pixels Breached Australia's Privacy Law","description":"Australia's OAIC found Medmate and Monash IVF breached the Privacy Act by sending sensitive health data to advertisers through tracking pixels (2026).","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/datatrue.com\/en\/resources\/enforcement-watch\/oaic-health-pixel-breach-2026\/","og_locale":"en_US","og_type":"article","og_title":"OAIC: Health Pixels Breached Australia's Privacy Law","og_description":"Australia's OAIC found Medmate and Monash IVF breached the Privacy Act by sending sensitive health data to advertisers through tracking pixels (2026).","og_url":"https:\/\/datatrue.com\/en\/resources\/enforcement-watch\/oaic-health-pixel-breach-2026\/","og_site_name":"DataTrue","article_publisher":"https:\/\/www.facebook.com\/datatruedigital\/","og_image":[{"width":1328,"height":208,"url":"https:\/\/datatrue.com\/wp-content\/uploads\/2022\/04\/New-DT-Logo.png","type":"image\/png"}],"twitter_card":"summary_large_image","twitter_site":"@data_true","twitter_misc":{"Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"NewsArticle","@id":"https:\/\/datatrue.com\/en\/resources\/enforcement-watch\/oaic-health-pixel-breach-2026\/#article","isPartOf":{"@id":"https:\/\/datatrue.com\/en\/resources\/enforcement-watch\/oaic-health-pixel-breach-2026\/"},"author":{"name":"Sayf Sharif","@id":"https:\/\/datatrue.com\/en\/#\/schema\/person\/a7cf71063d56c5134850c2ed33ccf026"},"headline":"OAIC health pixels","datePublished":"2026-10-06T15:39:49+00:00","mainEntityOfPage":{"@id":"https:\/\/datatrue.com\/en\/resources\/enforcement-watch\/oaic-health-pixel-breach-2026\/"},"wordCount":700,"publisher":{"@id":"https:\/\/datatrue.com\/en\/#organization"},"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/datatrue.com\/en\/resources\/enforcement-watch\/oaic-health-pixel-breach-2026\/","url":"https:\/\/datatrue.com\/en\/resources\/enforcement-watch\/oaic-health-pixel-breach-2026\/","name":"OAIC: Health Pixels Breached Australia's Privacy Law","isPartOf":{"@id":"https:\/\/datatrue.com\/en\/#website"},"datePublished":"2026-10-06T15:39:49+00:00","description":"Australia's OAIC found Medmate and Monash IVF breached the Privacy Act by sending sensitive health data to advertisers through tracking pixels (2026).","breadcrumb":{"@id":"https:\/\/datatrue.com\/en\/resources\/enforcement-watch\/oaic-health-pixel-breach-2026\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/datatrue.com\/en\/resources\/enforcement-watch\/oaic-health-pixel-breach-2026\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/datatrue.com\/en\/resources\/enforcement-watch\/oaic-health-pixel-breach-2026\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/datatrue.com\/en\/datatrue-home-2026\/"},{"@type":"ListItem","position":2,"name":"Resources","item":"https:\/\/datatrue.com\/en\/resources\/"},{"@type":"ListItem","position":3,"name":"Enforcement Watch","item":"https:\/\/datatrue.com\/en\/resources\/enforcement-watch\/"},{"@type":"ListItem","position":4,"name":"OAIC health pixels"}]},{"@type":"WebSite","@id":"https:\/\/datatrue.com\/en\/#website","url":"https:\/\/datatrue.com\/en\/","name":"DataTrue","description":"Web Analytics Quality Assurance","publisher":{"@id":"https:\/\/datatrue.com\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/datatrue.com\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/datatrue.com\/en\/#organization","name":"DataTrue","url":"https:\/\/datatrue.com\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/datatrue.com\/en\/#\/schema\/logo\/image\/","url":"https:\/\/datatrue.com\/wp-content\/uploads\/2022\/04\/New-DT-Logo.png","contentUrl":"https:\/\/datatrue.com\/wp-content\/uploads\/2022\/04\/New-DT-Logo.png","width":1328,"height":208,"caption":"DataTrue"},"image":{"@id":"https:\/\/datatrue.com\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/datatruedigital\/","https:\/\/x.com\/data_true","https:\/\/www.youtube.com\/c\/Datatrue"]},{"@type":"Person","@id":"https:\/\/datatrue.com\/en\/#\/schema\/person\/a7cf71063d56c5134850c2ed33ccf026","name":"Sayf Sharif"}]}},"_links":{"self":[{"href":"https:\/\/datatrue.com\/en\/wp-json\/wp\/v2\/pages\/227538","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/datatrue.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/datatrue.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/datatrue.com\/en\/wp-json\/wp\/v2\/users\/14"}],"replies":[{"embeddable":true,"href":"https:\/\/datatrue.com\/en\/wp-json\/wp\/v2\/comments?post=227538"}],"version-history":[{"count":3,"href":"https:\/\/datatrue.com\/en\/wp-json\/wp\/v2\/pages\/227538\/revisions"}],"predecessor-version":[{"id":227811,"href":"https:\/\/datatrue.com\/en\/wp-json\/wp\/v2\/pages\/227538\/revisions\/227811"}],"up":[{"embeddable":true,"href":"https:\/\/datatrue.com\/en\/wp-json\/wp\/v2\/pages\/227511"}],"wp:attachment":[{"href":"https:\/\/datatrue.com\/en\/wp-json\/wp\/v2\/media?parent=227538"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}