09
Feb
On February 1, 2023, the Federal Trade Commission (FTC) announced a complaint against and proposed settlement agreement (the “proposed order”) with GoodRx, a digital health company, over its data sharing practices that allegedly resulted in the disclosure of sensitive health information to third-parties. This is the first enforcement action the FTC has ever brought under the Health Breach Notification Rule (HBNR).1 The commissioners unanimously voted to approve the proposed order, which must be published for public comment before the...