Because No One is Immune to the Law
February 08, 2023 - Privacy + Data Security, Pharma, Healthcare, United States, Digital Health

FTC Brings First Enforcement Action of the Health Breach Notification Rule

New York Enacts Employee Monitoring Notification Law

The Federal Trade Commission (FTC) has enforced its Health Breach Notification Rule (the “HBNR”) for the first time since it was enacted in 2009. On February 1, the FTC announced a first-of-its-kind proposed order (the “Order”) with digital health platform GoodRx Holdings Inc. (“GoodRx”), a telehealth and drug discount provider. The FTC alleged that GoodRx shared users’ information with third-party advertising companies and advertising platforms contrary to its privacy promises, notably scrutinizing GoodRx’s ad targeting and use of third-party tracking technologies.

Read the full client alert.