The DOJ announced a stipulated order in the matter of GoodRx that DOJ and the FTC collaborated on.

"The stipulated order entered by the Court on Feb. 17 requires GoodRx to pay a civil penalty of $1.5 million and to take corrective action to prevent future unauthorized disclosure of users’ sensitive health information and to ensure compliance with the FTC Act and rules. The order requires that GoodRx notify users that their information was disclosed, bans the company from disclosing health information for advertising purposes, prohibits further misrepresentations and the disclosure of health information without affirmative consent and notice, and requires that users be notified in the event of a future breach. The order also imposes ongoing recordkeeping, certification, monitoring, and compliance obligations."

The order and other documents in the case can be found linked from the FTC's site at https://www.ftc.gov/legal-library/browse/cases-proceedings/2023090-goodrx-holdings-inc

#GoodRx #FTC #DOJ #enforcement #HealthBreachNotificationRule #Privacy #Advertising #Breach