"A new federal class action complaint filed in Miami accuses Curaleaf, one of the nation's largest cannabis retailers, of secretly allowing ad-tech firms to monitor what medical marijuana patients searched, clicked, and bought on its website. According to the complaint (attached at the bottom of this story), filed on November 8 in the Southern District of Florida, Curaleaf allegedly embedded a tracking code on its website that allowed outside vendors to "eavesdrop" on patients' browsing activity and personal information in real-time as they shopped."
"The anonymous plaintiff, identified as John Doe, says he used Curaleaf's site on June 5, 2025, to browse and buy medical marijuana, the complaint states. As he viewed products, added items to his cart, and entered his name, phone number, email, home address, and billing information at checkout, Curaleaf's code enabled four third-party vendors: Google, SD Technologies (Sweed), InRadio (AdPredictive), and StackAdapt, to intercept his actions and personal details, the suit alleges."
"The complaint states that embedded scripts transmitted full URLs, showing exactly which products Doe viewed, what he added to his cart, every button click related to purchases, and identifying contact information. Taken together, the lawsuit argues, that stream of data reveals protected health information about a patient's marijuana use and ties it directly to their identity, in violation of federal and state privacy laws."
Curaleaf embedded tracking code on its website that transmitted customers' browsing activity and personal details to four third-party vendors in real time. An anonymous plaintiff used the site to browse and purchase medical marijuana while entering name, phone, email, address, and billing information at checkout. Embedded scripts reportedly sent full URLs, product views, cart additions, and every purchase-related click to Google, SD Technologies (Sweed), InRadio (AdPredictive), and StackAdapt. The combined data allegedly ties protected health information about marijuana use directly to patient identities. Curaleaf operates as a licensed Florida medical marijuana treatment center with HIPAA and state privacy obligations. The suit alleges privacy-law violations motivated by enhancing marketing and sales.
Read at Miami New Times
Unable to calculate read time
Collection
[
|
...
]