The Federal Trade Commission on Wednesday announced that GoodRx, a drug discount app, has agreed to pay a $1.5 million civil penalty for allegedly failing to report unauthorized disclosure of consumer health data to Facebook, Google, and other third-party digital companies such as Criteo, Branch, and Twilio. It was the first such enforcement action taken under the FTC's Health Breach Notification Rule.

As part of the settlement, the telehealth and prescription drug provider also will be prohibited from sharing user health data with applicable third parties for advertising purposes. That  proposed order, filed by the Department of Justice on the FTC's behalf, must be approved by the federal court before it takes effect.

Recommended For You

Complete your profile to continue reading and get FREE access to BenefitsPRO, part of your ALM digital membership.

Your access to unlimited BenefitsPRO content isn’t changing.
Once you are an ALM digital member, you’ll receive:

  • Breaking benefits news and analysis, on-site and via our newsletters and custom alerts
  • Educational webcasts, white papers, and ebooks from industry thought leaders
  • Critical converage of the property casualty insurance and financial advisory markets on our other ALM sites, PropertyCasualty360 and ThinkAdvisor
NOT FOR REPRINT

© 2025 ALM Global, LLC, All Rights Reserved. Request academic re-use from www.copyright.com. All other uses, submit a request to [email protected]. For more information visit Asset & Logo Licensing.