TBA Law Blog


Posted by: Julia Wilburn on Jul 7, 2026

Two major data privacy class actions are unfolding in Middle Tennessee courts, according to the Nashville Banner. In Davidson County, three anonymous plaintiffs sued CareNow (owned by HCA Healthcare) on June 11, alleging the urgent care chain secretly shared patients' scheduling and health data with Google and marketing firms via tracking cookies, allegedly forcing patients through repeated CAPTCHAs until they accepted cookies enabling the data sharing. HCA says it will "defend aggressively" against the claims. Separately, 12 lawsuits filed throughout June in federal court target Franklin-based XSolis, an AI health care analytics company, after a January hack exposed patients’ personally identifiable information (PII) and protected health information (PHI) — including Social Security numbers — for roughly 1.4 million patients nationwide. Plaintiffs allege the company failed to properly encrypt sensitive data.