Court Rules
All enforcement actions
SettlementHigh Risk

FTC Penalizes GoodRx $1.5M for Sharing Health Data for Ads

GoodRx Holdings Inc.February 1, 2023Federal Trade Commission

Penalty Amount

$1,500,000

Consumers Affected

55,000,000

Summary

The FTC settled with GoodRx for sharing consumers' sensitive prescription and health information with Facebook, Google, and other third parties for advertising without consent, and for failing to report these unauthorized disclosures as required by the Health Breach Notification Rule. GoodRx will pay a $1.5 million civil penalty and is permanently barred from sharing user health data for advertising.

Remedy

GoodRx must pay a $1.5 million penalty. It is permanently prohibited from sharing user health information with third parties for advertising. For any other sharing, it must obtain users' affirmative express consent. The company must direct third parties to delete the shared health data, inform consumers about the breaches, implement a comprehensive privacy program, limit data retention, and publicly post its data retention schedule.

Monetary PenaltyInjunctionConsent DecreeData DeletionCompliance ProgramCorrective Notice

Contract Impact

In-house legal teams should review all agreements involving the handling of consumer health data, including vendor contracts with advertising platforms (e.g., Facebook, Google), customer terms of service, and data processing agreements. Specific clauses to scrutinize are those governing data sharing, consent mechanisms for advertising, breach notification procedures, and restrictions on the use of sensitive health information. Changes may be required to explicitly prohibit sharing user health data for advertising without prior opt-in consent, mandate prompt breach reporting under the Health Breach Notification Rule, and ensure all third-party data transfers comply with health privacy regulations.

Contract Search Terms

health data advertising consentunauthorized disclosure clausebreach reporting requirementHealth Breach Notification Rule compliancethird-party data sharingsensitive health information protectionprescription data use restrictionconsumer health datadata processing addendumadvertising use restriction

Laws Cited

FTC ActHealth Breach Notification Rule

Violation Types

Entity Details

Entity

GoodRx Holdings Inc.

Also known as: GoodRx

Industry

Healthcare

Official Sources

Source Evidence

Entity Name
"GoodRx Holdings Inc."
Fine Amount
"pay a $1.5 million civil penalty"
Violation Types
"sharing sensitive personal health information—including its users’ prescription medications and personal health conditions—with third party advertising companies and advertising platforms like Facebook, Google, and Criteo"
Violation Types
"failed to notify consumers, the FTC, and the media about the company’s unauthorized disclosure of individually identifiable health information"
Violation Types
"prohibits the company from using manipulative designs, known as dark patterns, to obtain users’ consent"
Laws Cited
"violating the Health Breach Notification Rule"

Related Enforcement Actions

FTC

Lens.com Inc.

The FTC, Utah, and Nevada sued Lens.com Inc., alleging that it advertised artificially low contact lens prices while hiding mandatory checkout charges and misleading consumers about its AutoRefill subscription. The complaint seeks to stop the alleged practices; the court has not yet decided the case, and no penalty or remedy has been imposed.

FTC

Online platforms

The FTC issued an advance notice of proposed rulemaking seeking public comment on whether ad-optimization tools offered by online platforms may help scammers impersonate businesses and government agencies. This is a proposed regulatory inquiry, not an enforcement action against a named company; no penalty or remedy was imposed.

FTC

Amazon.com, Inc.

$2.5B

A federal court approved a revised order in the FTC's Amazon Prime case under which Amazon will accelerate and expand redress payments under the September 2025 $2.5 billion settlement, which resolved allegations that Amazon enrolled millions of consumers in Prime subscriptions without their consent and knowingly made cancellation difficult. More consumers now qualify for refunds, the maximum payment cap rises from $51 to $200, and all future payments will be distributed automatically starting October 1, 2026, with potential supplemental $149 payments by April 2027. Amazon has already issued more than $845 million in redress payments as of September 2026.

FTC

Amway Corp.

$225.0M

The FTC and the state of Washington filed a joint complaint and proposed stipulated order requiring Amway Corp. and two affiliates—World Wide Group, L.L.C. (WWG) and Leadership Team Development Inc. (LTD)—to pay a $225 million judgment, the largest monetary recovery ever obtained from an MLM in an FTC action, over allegations that they used deceptive earnings claims and unfair tactics to recruit Independent Business Owners. The complaint alleges the companies falsely promised substantial income and recruitment success, pressured IBOs to buy products they could not resell, and instructed IBOs to falsely report sales. Nearly all of the judgment will be used as redress for IBOs who lost money, and the proposed order imposes structural reforms including a 70% resale requirement, independent audits of sales records, and a ban on approved providers charging new IBOs for first-year training.

FTC

FleetCor Technologies Inc. (now Corpay Inc.)

$100.0M

FleetCor Technologies Inc. (now Corpay Inc.) and its CEO Ronald Clarke agreed to pay $100 million to settle an FTC administrative action alleging the company charged small business customers hidden and unauthorized fees for fuel cards and misrepresented gas savings, fraud-control features, and fees. A federal district court granted the FTC summary judgment on all counts in 2023, and a federal appeals court upheld that judgment and the permanent injunction in 2026. The settlement funds will be used to provide redress to harmed business customers.

FTC

Automobile industry (auto dealers) - no named respondent; industry-wide guidance publication

FTC staff published FAQs on price transparency to help the automobile industry comply with the FTC Act, reiterating that an advertised vehicle price must be the actual price any consumer can pay, excluding only government-required charges. The guidance follows warning letters the FTC sent to 97 auto dealership groups earlier in 2026 and signals continued litigation against dealers that advertise one price but charge more through undisclosed fees. No specific entity was charged and no penalty was imposed.