On February 22, 2023, the DOJ and the FTC formally announced their settlement with GoodRx Holdings, Inc., previously reported in the February 17, 2023 edition of HLBytes. The government’s complaint specifically alleged that GoodRx shared information with third parties such as Facebook and Google, which then used the data for targeted marketing. Furthermore, the complaint alleged that GoodRx misrepresented its compliance with the HIPAA Privacy Rule and failed to sufficiently safeguard protected l health information. In addition to paying a civil penalty of $1.5 million, GoodRx is required to create a plan to prevent future unauthorized disclosure, to notify users that their information was disclosed, not to share health information for advertisements, and to comply with obligations for ongoing recordkeeping and monitoring.