In a first-of-its-kind enforcement, the FTC has imposed a $1.5 million fine on telehealth and prescription drug discounter GoodRx for sharing users’ health data with Facebook, Google and others despite claiming otherwise.
Conversation
But more important than the fine, is also prohibiting GoodRx from sharing user health data with third parties for advertising purposes. That could augur an end to widespread trafficking in consumer health data that happens outside HIPAA-governed entities.
Quote Tweet
The @FTC's order against @GoodRx includes a flat-out ban against selling user health data to 3rd parties in the future. This is the kind of conduct-changing remedy that has been hard to obtain in past cases (and why unfairness can be such a powerful tool). twitter.com/benrossen/stat…
Show this thread
1
1
4
In a legal complaint, lawyers for FTC said GoodRx’s unauthorized actions “unjustly enriched” the company while potentially exposing users — many sufferers of chronic health conditions — to “stigma, embarrassment or emotional distress” as well as multiple types of discrimination.
2
6
Quote Tweet
As of last night, @ToddFeathers and @varlogsimon confirmed that GoodRx was still sending health data to a Google-owned advertising platform.
The screenshot below shows a medication’s name, dosage, and the quantity ordered being sent to Google Ads. 
Show this thread
read image description
ALT
1
5
8
It’s been on top of this with
Quote Tweet
NEW with @statnews: Major telehealth companies specializing in mental health, addiction, and more are collecting sensitive patient data and sending it to the world’s largest advertising platforms. themarkup.org/privacy/2022/1
Show this thread