GoodRx Paying $1.5 Million for Consumer Data Breach
The Federal Trade Commission (FTC) says it has taken its first enforcement action under its Health Breach Notification Rule against the telehealth and prescription drug discount provider GoodRx court for failing to notify consumers and others of its unauthorized disclosure of consumers’ personal health information to Facebook, Google, and other companies. An FTC news release says a proposed order filed by the Department of Justice would prohibit GoodRx from sharing user health data with applicable third parties for advertising purposes. The company has agreed to pay a $1.5 million civil penalty for violating the rule. A California federal must approve the proposed rule before it can be effective.