Tag:personal health records
The FTC’s Enforcement Action: GoodRx’s Failure to Protect Its Customers’ Personal Health Information
On February 1, 2023, the Federal Trade Commission (FTC) brought an enforcement action against GoodRx, a provider of telehealth and prescription drug services at discounted rates. In a first-of-its-kind action, the FTC alleged that GoodRx violated the Health Breach Notification Rule (HBNR) by sharing their consumers’ confidential health information with several advertising companies. While GoodRx is already facing a $1.5 million penalty for the violation, the FTC has also proposed an order that will require GoodRx to remedy the situation and make several changes to protect confidential health information in the future.