{"id":3614,"date":"2023-02-02T13:30:07","date_gmt":"2023-02-02T13:30:07","guid":{"rendered":"https:\/\/regtechafrica.com\/healthcare\/?p=3614"},"modified":"2023-02-02T13:30:07","modified_gmt":"2023-02-02T13:30:07","slug":"global-ftc-and-goodrx-settle-complaint-around-health-breach-notification-rule","status":"publish","type":"post","link":"https:\/\/regtechafrica.com\/healthcare\/global-ftc-and-goodrx-settle-complaint-around-health-breach-notification-rule\/","title":{"rendered":"Global: FTC and GoodRX Settle Complaint Around Health Breach Notification Rule"},"content":{"rendered":"

The Federal Trade Commission<\/a> (FTC) has taken the first enforcement action under its Health Breach Notification Rule<\/a>.<\/p>\n

The proposed order<\/a> bars digital health platform GoodRX<\/a> from sharing consumers\u2019 health information for advertising and fines the firm $1.5 million for not reporting its unauthorized disclosure of the data to Facebook<\/a>, Google<\/a> and other companies, the FTC said in a Wednesday (Feb. 1) press release.<\/p>\n

\u201cDigital health companies and mobile apps should not cash in on consumers\u2019 extremely sensitive and personally identifiable health information,\u201d FTC Bureau of Consumer Protection Director Samuel Levine<\/a> said in the release. \u201cThe FTC is serving notice that it will use all of its legal authority to protect American consumers\u2019 sensitive data from misuse and illegal exploitation.\u201d<\/p>\n

The Health Breach Notification Rule requires vendors of personal health records and other entities to notify customers, the FTC and occasionally the media when data is acquired without customer permission.<\/p>\n

GoodRX said in a Wednesday(February 1, 2023) blog post<\/a> that it does not agree with the allegations, admits no wrongdoing and entered into the settlement to avoid protracted litigation.<\/p>\n

The company said in the post it addressed the issue in 2020, before the FTC inquiry began, by removing Facebook Javascript tracking pixels and adding new ways for consumers to protect their privacy.<\/p>\n

It also said in the post that Facebook tracking pixels are widely used, that no medical records were shared and that the settlement with the FTC will not require any significant changes to its current practices or products.<\/p>\n

\u201cWhile we had used vendor technologies to advertise in a way that we believe was compliant with all applicable regulations and that remains common practice among many health, consumer and government websites, we are proud that we took action to be an industry leader on privacy practices,\u201d GoodRX said in the post. \u201cWe are glad to put this matter behind us so we can continue focusing on being a trusted source for Americans to find affordable and convenient healthcare.\u201d<\/p>\n

The FTC\u2019s proposed order, which must be approved by a federal court, prohibits GoodRX from sharing health data with third parties for advertising purposes and requires it to obtain users\u2019 consent before sharing data for any other purpose. It also requires the company to direct third parties to delete the data that was shared with them, limit its retention of data and implement a privacy policy, according to the press release.<\/p>\n","protected":false},"excerpt":{"rendered":"

The Federal Trade Commission (FTC) has taken the first enforcement action under its Health Breach Notification Rule. The proposed order bars digital health platform GoodRX from sharing consumers\u2019 health information…<\/p>\n","protected":false},"author":1,"featured_media":3616,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[73,80],"tags":[],"class_list":["post-3614","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-global","category-news"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"https:\/\/i0.wp.com\/regtechafrica.com\/healthcare\/wp-content\/uploads\/2023\/02\/8C5ABBDB-98BA-4442-A4AF-264B819D6CE9.jpeg?fit=679%2C452&ssl=1","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/regtechafrica.com\/healthcare\/wp-json\/wp\/v2\/posts\/3614","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/regtechafrica.com\/healthcare\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/regtechafrica.com\/healthcare\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/regtechafrica.com\/healthcare\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/regtechafrica.com\/healthcare\/wp-json\/wp\/v2\/comments?post=3614"}],"version-history":[{"count":1,"href":"https:\/\/regtechafrica.com\/healthcare\/wp-json\/wp\/v2\/posts\/3614\/revisions"}],"predecessor-version":[{"id":3615,"href":"https:\/\/regtechafrica.com\/healthcare\/wp-json\/wp\/v2\/posts\/3614\/revisions\/3615"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/regtechafrica.com\/healthcare\/wp-json\/wp\/v2\/media\/3616"}],"wp:attachment":[{"href":"https:\/\/regtechafrica.com\/healthcare\/wp-json\/wp\/v2\/media?parent=3614"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/regtechafrica.com\/healthcare\/wp-json\/wp\/v2\/categories?post=3614"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/regtechafrica.com\/healthcare\/wp-json\/wp\/v2\/tags?post=3614"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}