Health data reuse Settled privacy allegations
GoodRx: a health service’s data crossed into advertising
- Incident
- Period not specified in the linked announcement
- Source report
What was reported
The Justice Department reported a consent order resolving allegations that GoodRx disclosed millions of users’ personal health information without their authorization, consent or knowledge. The alleged disclosures included medication and health-condition details. The February 17, 2023 order imposed a $1.5 million civil penalty and banned health-information disclosure for advertising.
Our perspective
Our reading: Consent to one purpose should not silently become permission for another. Vivendur’s approach to task-specific context starts with asking what information the receiving tool needs and why.
Try Vivendur in actionLimits of this connection
This was a settlement of allegations, not a trial verdict or an external hacking incident. Technical permissions also require organizational enforcement and clear consent.