Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
The Policy authorizes third parties to use cookies and tracking technologies on UnitedHealthcare's Online Services to collect browsing activity and track users across third-party websites for the purpose of delivering targeted advertisements, with the company stating it does not control these third-party technologies.
This analysis describes what UnitedHealthcare's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision authorizes cross-site behavioral tracking and targeted advertising on digital properties through which users may also access health plan information, benefit details, and medical records. The intersection of behavioral advertising data collection with a health insurance platform context may require evaluation under HIPAA, FTC guidance on health data, and state consumer privacy laws depending on the categories of data accessible to or inferred by third-party trackers.
Under this clause, third-party advertising networks may collect browsing behavior data on UnitedHealthcare's Online Services and use it to deliver targeted advertisements across the web. Users can opt out of participating advertising networks through optout.aboutads.info and optout.networkadvertising.org, though the Policy states opt-outs may not eliminate all advertisements, only tailored ones.
Cross-platform context
See how other platforms handle Third-Party Behavioral Advertising Data Sharing and similar clauses.
Compare across platforms →Monitoring
UnitedHealthcare has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"We may also allow third-parties to use cookies and other technologies to collect Activity Information and to track browsing activity over time and across third-party websites such as web browsers used to read our Online Services, which websites are referring traffic or linking to our Online Services, and to deliver targeted advertisements to you. We do not control these third-party technologies, and their use of such technologies is governed by their own privacy policies.Excerpt from UnitedHealthcare's Privacy Policy
1. REGULATORY LANDSCAPE: This provision engages FTC Act Section 5 authority over health data and behavioral advertising practices, as well as HIPAA where tracking technologies may collect or infer Protected Health Information. The FTC has issued guidance specifically addressing the use of tracking pixels and third-party analytics on health-related websites and platforms. California Consumer Privacy Act requirements regarding disclosure of and opt-out rights for sharing of personal information for cross-context behavioral advertising are directly relevant to this provision for California residents. 2. GOVERNANCE EXPOSURE: High. The authorization of third-party behavioral tracking on a platform that also hosts health plan benefit information, medical records access, and prescription data creates an elevated data governance exposure. HHS OCR has issued guidance regarding the use of tracking technologies on HIPAA-covered entities' websites and patient portals that may apply to portions of UnitedHealthcare's Online Services where authenticated users access PHI. 3. JURISDICTION FLAGS: California residents have specific rights regarding opt-out of sharing for cross-context behavioral advertising under CCPA, which this provision does not enumerate. Connecticut, Colorado, Virginia, and other states with comprehensive privacy statutes similarly address targeted advertising opt-out rights. Illinois BIPA may be implicated if any tracking technologies collect biometric identifiers. HHS OCR guidance on tracking technologies applies federally to HIPAA-covered portions of the platform. 4. CONTRACT AND VENDOR IMPLICATIONS: The statement that third-party tracking technology use is governed by the third parties' own privacy policies does not eliminate UnitedHealthcare's compliance obligations regarding PHI accessible through authenticated portions of its Online Services. Business Associate Agreement obligations may extend to third-party analytics and advertising vendors with access to authenticated pages where PHI is viewable. Procurement teams should assess whether existing vendor agreements address tracking technology restrictions in PHI-accessible environments. 5. COMPLIANCE CONSIDERATIONS: Compliance teams should conduct a data mapping review to identify which third-party tracking technologies are deployed on authenticated versus unauthenticated portions of the Online Services, and assess whether any tracking in authenticated PHI-accessible environments satisfies HIPAA Security Rule and minimum necessary standards. The CCPA opt-out for sharing for behavioral advertising should be evaluated for California users given the scope of tracking described.
Full institutional analysis
Regulatory citations, enforcement risk, and due diligence action items.
Monitor: same-day alerts on the platforms you choose. Analyst: full institutional analysis.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This provision authorizes cross-site behavioral tracking and targeted advertising on digital properties through which users may also access health plan information, benefit details, and medical records. The intersection of behavioral advertising data collection with a health insurance platform context may require evaluation under HIPAA, FTC guidance on health data, and state consumer privacy laws depending on the categories of data …
Under this clause, third-party advertising networks may collect browsing behavior data on UnitedHealthcare's Online Services and use it to deliver targeted advertisements across the web. Users can opt out of participating advertising networks through optout.aboutads.info and optout.networkadvertising.org, though the Policy states opt-outs may not eliminate all advertisements, only tailored ones.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by UnitedHealthcare.