February 22, 2023
Posted February 22, 2023
In the FTC and DOJ’s first enforcement action under the Health Breach Notification Rule, online prescription drug discount provider GoodRx Holdings Inc.—which does business as GoodRx Gold, GoodRx Care, and Hey Doctor—has been ordered to pay $1.5 million in civil penalties and take corrective action, after it was found to have disclosed the personal health information of millions of its users without their knowledge or consent, despite assuring users it would not. The disclosure involved personally identifying information, including health conditions and medications used, which were shared with Facebook, Google, and other third parties for advertising purposes. FTC, DOJ
Tagged in: Misrepresentations,