In early February, the U.S. Federal Trade Commission published a proposed order that fines telehealth and discount prescription provider GoodRX $1.5 milllion. Though part of the case involves deception — one of two prongs under the FTC Act — the case also raises the first-of-its-kind use of the Health Breach Notification Rule. To help better understand the novel and complex issues embedded in the case, IAPP Editorial Director Jedidiah Bracy, CIPP, caught up with WilmerHale Partner Kirk Nahra, CIPP/US, to discuss some of the takeaways privacy pros in any industry vertical should consider.
Listen Here
10 Feb. 2023
Top takeaways from the FTC-GoodRx case: A chat with Kirk Nahra
Related stories
Notes from the Asia-Pacific region: Looking back on an exceptional 2025 and the year to come
Notes from the IAPP Europe: Another piece of the EU Digital Package puzzle — the Data Union Strategy
Gaps in website opt-out functionality under the microscope in privacy enforcement
The case for differential privacy in the age of agentic AI
Santa Fe 4.0: la reforma constitucional que redefine derechos, tecnología y ciudadanía digital en Argentina
This article is eligible for Continuing Professional Education credits. Please self-submit according to CPE policy guidelines.
