AP

FTC fines GoodRx for unauthorized sharing of health data

Feb 1, 2023, 2:06 PM | Updated: Feb 2, 2023, 3:05 pm

In a first-of-its-kind enforcement, the Federal Trade Commission has imposed a $1.5 million penalty on telehealth and prescription drug discount provider GoodRx Holdings Inc. for sharing users’ personal health data with Facebook, Google and other third parties without their consent.

Under a settlement, California-based GoodRx also accepted that it will be prohibited going forward from sharing user health data with third parties for advertising purposes, the FTC said. GoodRx admitted no wrongdoing and said in a blog post that it settled “to avoid the time and expense of protracted litigation.” The agreement is pending federal court approval.

Consumer protection advocates hailed Wednesday’s announcement as a potential game-changer that could seriously curtail a little-known phenomenon: The trafficking in sensitive health data by businesses not strictly classified as health care providers.

“Digital health companies and mobile apps should not cash in on consumers’ extremely sensitive and personally identifiable health information,” Samuel Levine, head of the FTC’s Bureau of Consumer Protection, said in a statement. “The FTC is serving notice that it will use all of its legal authority to protect American consumers’ sensitive data from misuse and illegal exploitation.”

The enforcement is the first under a 2009 law, the Health Breach Notification Rule, which applies to personal health record vendors and related providers not covered by HIPAA, the federal privacy rules that govern the health care industry,

It comes three years after Consumer Reports discovered that GoodRx was sharing people’s personal health information with more than 20 companies. “People told us they’d never expected that their sensitive information was being shared with the likes of Google and Facebook,” Marta Tellado, president and CEO of Consumer Reports, said in a statement Wednesday. “This is a win for consumers, and it could have a profound effect on how our health information is kept private moving forward.”

In a legal complaint filed on the FTC’s behalf, Justice Department lawyers said GoodRx’s actions had “unjustly enriched” the company at the expense of users — many sufferers of chronic health conditions — who could face “stigma, embarrassment or emotional distress” as well as discrimination if facts it shared were disclosed.

GoodRx said the focus of the FTC’s concerns was “proactively addressed” nearly three years ago, before the FTC inquiry began.

Justin Brookman, the director of technology policy at Consumer Reports, said he believed the FTC inquiry began after his organization’s Feb. 25, 2020 report. Prior to that, the government said, “GoodRx had no sufficient formal, written, or standard privacy or data-sharing policies or compliance programs in place. And, even after GoodRx’s practices came to light, it failed to notify users that their health information had been disclosed without their authorization.”

Company spokeswoman Lauren Casparis said via email that GoodRx “used vendor technologies to advertise in a way that we believe was compliant with all applicable regulations and that remains common practice among many websites.”

Those technologies included embedded web beacons known as “pixels” and other tracking and data-collection tools from companies including Google and Facebook, the government said.

“They put pixels on their site,” Brookman of Consumer Reports said by telephone. “They don’t have to do that.”

In a statement, Brookman said “health apps and websites have been giving away our personal data for years without consequence. This case should be a turning point — now companies have to understand that sharing customer data without clear permission will lead to investigations and fines.”

On its website, GoodRx says it has helped consumers save more than $45 billion since 2011.

The FTC said more than 55 million consumers have visited GoodRx’s website or mobile apps since January 2017. It said the company collects personal and health information from its users and from pharmacy benefit managers — the companies that manage prescription drug benefits — that confirm when one of its coupons has been used in a purchase.

The FTC said in a news release that GoodRx “deceptively promised its users that it would never share personal health information with advertisers or other third parties” while sharing information on their prescriptions and health conditions with third-party advertising companies and platforms including Facebook, Google and Criteo. That process helped GoodRx target personalized ads on Facebook and Instagram and other platforms, the FTC said.

Other provisions of proposed federal court order oblige GoodRx to direct third parties with whom it shared consumer health data to delete it and inform consumers.

GoodRX spokeswoman Casparis said the company believes “the requirements detailed in the settlement will have no material impact on our business or on our current or future operations.”

Copyright © The Associated Press. All rights reserved. This material may not be published, broadcast, rewritten or redistributed.

AP

American Airlines put an unspecified number of employees on leave for their involvement in an incid...

Associated Press

American Airlines CEO calls removal of Black passengers from Phoenix flight ‘unacceptable’

American Airlines put an unspecified number of employees on leave for their involvement in an incident in which several Black passengers were removed from a flight in Phoenix.

5 days ago

FILE - Crystal Baziel holds the Pan-African flag Monday, June 19, 2023, during Reedy Chapel A.M.E C...

Associated Press

The beginner’s guide to celebrating Juneteenth

For more than one-and-a-half centuries, the Juneteenth holiday has been sacred to many Black communities. It marks the day in 1865 enslaved people in Galveston, Texas found out they had been freed — after the end of the Civil War, and two years after President Abraham Lincoln’s Emancipation Proclamation. Since it was designated a federal […]

6 days ago

A Boeing 737 Max suffered damage to parts of the plane's structure after it went into a “Dutch ro...

Associated Press

Plane that did ‘Dutch roll’ on flight from Phoenix suffered structural damage, investigators say

A Boeing 737 Max suffered damage to parts of the plane's structure after it went into a “Dutch roll” during a flight from Phoenix last month.

11 days ago

This photo provided by Randy Shannon shows Mooney Falls on the Havasupai reservation outside the vi...

Associated Press

Dozens report illness after trips to waterfalls near Grand Canyon

Dozens of hikers say they fell ill during trips to a popular Arizona tourist destination that features towering blue-green waterfalls deep in a gorge neighboring Grand Canyon National Park.

12 days ago

Mugshot of Rudy Giuliani, who was processed Monday, June 10, 2024, in the Arizona fake electors cas...

Associated Press

Rudy Giuliani posts $10K cash bond after being processed in Arizona fake electors case

Rudy Giuliani, a former New York City mayor and Donald Trump attorney, was processed Monday in the Arizona fake electors case.

14 days ago

FILE - White House former chief of staff Mark Meadows speaks with reporters at the White House, Wed...

Associated Press

Former Trump chief of staff Mark Meadows pleads not guilty in Arizona fake elector case

Former Donald Trump presidential chief of staff Mark Meadows and Trump 2020 Election Day operations director Michael Roman pleaded not guilty Friday in Phoenix to nine felony charges for their roles in an effort to overturn Trump's Arizona election loss to Joe Biden.

18 days ago

Sponsored Articles

...

Sanderson Ford

3 new rides for 3 new road trips in Arizona

It's time for the Sanderson Ford Memorial Day sale with the Mighty Fine 69 Anniversary, as Sanderson Ford turned 69 years old in May.

...

DESERT INSTITUTE FOR SPINE CARE

Desert Institute for Spine Care is the place for weekend warriors to fix their back pain

Spring has sprung and nothing is better than March in Arizona. The temperatures are perfect and with the beautiful weather, Arizona has become a hotbed for hikers, runners, golfers, pickleball players and all types of weekend warriors.

...

COLLINS COMFORT MASTERS

Here are 5 things Arizona residents need to know about their HVAC system

It's warming back up in the Valley, which means it's time to think about your air conditioning system's preparedness for summer.

FTC fines GoodRx for unauthorized sharing of health data