Federal Trade Commission Announces First Penalties for Enforcement Action Against Good Rx

On February 1, 2023, the U.S. Federal Trade Commission (FTC) took enforcement action for the first time under its Health Breach Notification Rule against the telehealth and prescription drug discount provider GoodRx Holdings Inc. The settlement announced the fine was for failure to notify consumers and others of its unauthorized disclosures of consumers’ personal health information to Facebook, Google, and other advertising platforms.

In the agreement, filed by the Department of Justice on behalf of the FTC, GoodRx will be prohibited from sharing user health data with applicable third parties for advertising purposes. They agreed to pay a $1.5 million civil penalty for violating the rule.

To read the FTC’s complaint against GoodRx, see here: Click Here