The Federal Trade Commission and the Justice Department alleged that the company violated the Health Breach Notification Rule for “failing to notify consumers and others of its unauthorized disclosures of consumers’ personal health information,” according to a Feb. 22 release from the Justice Department.
GoodRx will pay a $1.5 million civil penalty to resolve the allegations, as well as notify users that their information was improperly disclosed.
The company is also banned from disclosing health information for advertising purposes in the future.
