GoodRx Holdings, Inc.
The FTC took its first-ever enforcement action under the Health Breach Notification Rule against GoodRx Holdings, Inc., a telehealth and prescription drug discount provider. GoodRx failed to notify consumers, the FTC, and media of its unauthorized disclosures of consumers' personal health information to third parties including Facebook and Google. This action marks a landmark use of the Health Breach Notification Rule in the telehealth space. The enforcement resulted in a consent order requiring GoodRx to remediate its data-sharing practices and pay civil penalties.
Flagged claims (1)
failing to notify consumers and others of its unauthorized disclosures of consumers' personal health information to Facebook, Google, and other companies
Required actions (2)
The Federal Trade Commission has taken enforcement action for the first time under its Health Breach Notification Rule against the telehealth and prescription drug discount provider GoodRx Holdings Inc., for failing to notify consumers and others of its unauthorized disclosures of consumers' personal health information to Facebook, Google, and other companies.
The Federal Trade Commission has taken enforcement action for the first time under its Health Breach Notification Rule against the telehealth and prescription drug discount provider GoodRx Holdings Inc., for failing to notify consumers and others of its unauthorized disclosures of consumers' personal health information to Facebook, Google, and other companies.
Does your site contain similar claims?
The free site audit scans your whole site against every entry in this Atlas. Most telehealth psych sites match 3-6 patterns.
Run my free site auditWorried about one specific page, ad, or email? Paste it into the free Claim Checker and see what the FDA and FTC would flag, with the precedent next to each one. No email required.
Check specific copy in the Claim Checker