Home > Legal Updates > The FTC Enforces its First Fine Under the Health Breach Notification Rule

The FTC Enforces its First Fine Under the Health Breach Notification Rule

In a first-of-its-kind enforcement, the FTC has brought an action against GoodRx for allegedly violating its Health Breach Notification Rule. The FTC alleges that GoodRx violated federal consumer protections law and a rule governing the unauthorized disclosure of personal health information by sharing consumers’ sensitive health information with third parties. Those parties, including Meta Platform Inc.’s Facebook and Alphabet Inc.’s Google, then allegedly targeted GoodRx consumers with related advertisements.

GoodRx is a digital health platform that offers prescription drug discounts, telehealth visits and other health services. More than 55 million consumers have used GoodRx since it launched in 2017. Read more…