Lawsuitsby GlyphUnited States v. GoodRx (Health Breach Notification Rule) privacy case
Brought by
United States of America
v.
Defendants
First FTC action under the Health Breach Notification Rule, alleging GoodRx shared users' health information with Facebook, Google and others without notice.
The case
- Court
- US District Court, Northern District of California
- Docket
- 4:23-cv-00460
- Filed
- Feb 1, 2023
- Status
- Settled
- Outcome
- GoodRx agreed to a USD 1.5 million civil penalty and a ban on sharing health data for advertising.
- Amount
- $1.5 million
History
3 dated entriesORDER re 16 Plaintiff Jane Doe's Motion to Relate Cases: These cases are NOT RELATED and no reassignments shall occur: 4:23-cv-00460-DMR United States of America vSource
COMPLAINT FOR PERMANENT INJUNCTION, CIVIL PENALTIES, AND OTHER RELIEF against GoodRx Holdings, Inc., (Filing Fee: Waived)Source
Complaint filed: United States v. GoodRx Holdings, Inc.Source
Related cases
United States sued v. 
Cerebral (health data for ads)The FTC alleged the telehealth firm shared sensitive health data with third parties for advertising, failed to secure it and made cancellation difficult.$7 millionJury trialS.D. Fla.filed Apr 2024
Irish Data Protection Commission: GoogleThe Irish Data Protection Commission fines Google 403 000 000 EUR following Inquiry into Google’s processing of location dataIrish DPCIsbell sued v. 
SunoRecording artists including Jason Isbell and David Lowery allege Suno's generator reproduces their voices, names and likenesses without consent, pleading BIPA and state right-of-publicity claims.D. Mass.
Dutch DPA fine: Uber, automated driver deactivationThe Dutch DPA, working with the CNIL on a French drivers' complaint, found Uber used fully automated decisions to temporarily or permanently deactivate drivers over suspected fraud or low ratings and did not properly inform them.EUR 824,990,000Dutch Data Protection Authority (Autoriteit Persoonsgegevens)Texas AG acted against v. 
Meta and WhatsApp: encryption claimsTexas sued Meta and WhatsApp alleging they misled users about end-to-end encryption and the privacy of WhatsApp messages.Texas Attorney GeneralFlowers sued v. 
MicrosoftAlleges Microsoft's Copilot and other voice products captured users' biometric voiceprints without BIPA consent.N.D. Ill.Amer sued v. 
ElevenLabsIllinois plaintiffs allege ElevenLabs captured biometric voiceprints from real voices to build its voice AI without BIPA consent.N.D. Ill.
Dutch DPA fine: Yango (MLU B.V.), transfers to RussiaJoint investigation with the Norwegian and Finnish authorities found the company behind the European Yango taxi app transferred driver and customer data to Russia without adequate protection.EUR 100 millionDutch Data Protection Authority (Autoriteit Persoonsgegevens)