Answers · Updated 2026-10-07

Can a medical practice use the Meta pixel or Google Analytics on its website?

The June 2024 ruling vacated HHS bulletins about IP addresses on public webpages. A booking page, a consult request, and a portal login are a different set of facts. On those pages, keep the Meta pixel and Google Analytics off unless that vendor has signed a business associate agreement. Meta and Google do not sign one for those tools.

American Hospital Association v. Becerra, No. 4:23-cv-01110-P (N.D. Tex. June 20, 2024). The American Hospital Association reported that day that the court vacated the bulletins, and on August 29, 2024 that HHS would not appeal. A name plus a reason for a visit is still protected health information under 45 CFR Parts 160 and 164.

Answered by George Stoff, Founder and Lead Engineer