Overview

• Covered California's website sent sensitive health information, including pregnancy and domestic abuse data, to LinkedIn via the Insight Tag during an advertising campaign that began in February 2024.
• The data transmission was discovered by forensic audits conducted by CalMatters and The Markup in early 2025, leading to the removal of trackers and third-party cookies by April 21, 2025.
• Covered California has launched an internal review of its website's privacy and security protocols to prevent future unauthorized data sharing.
• LinkedIn stated that its policies prohibit the use of the Insight Tag on pages containing sensitive data, but privacy experts have criticized the incident as invasive and a failure of regulatory safeguards.
• The incident highlights broader concerns over government reliance on third-party analytics and the need for stronger legal protections for consumer health data.