chevron-down Created with Sketch Beta.
March 03, 2023

DOJ and FTC Reach Settlement with GoodRx After Unauthorized Disclosure of Personal Health Information

On February 22, 2023, the DOJ and the FTC formally announced their settlement with GoodRx Holdings, Inc., previously reported in the February 17, 2023 edition of HLBytes.  The government’s complaint specifically alleged that GoodRx shared information with third parties such as Facebook and Google, which then used the data for targeted marketing. Furthermore, the complaint alleged that GoodRx misrepresented its compliance with the HIPAA Privacy Rule  and failed to sufficiently safeguard protected l health information. In addition to paying a civil penalty of $1.5 million, GoodRx is required to create a plan to prevent future unauthorized disclosure, to notify users that their information was disclosed, not to share health information for advertisements, and to comply with obligations for ongoing recordkeeping and monitoring.

The material in all ABA publications is copyrighted and may be reprinted by permission only. Request reprint permission here.