CVS agreed to pay $20.5 million to settle a class action lawsuit regarding data privacy allegations. Summary from source