PrivacySignal
Breach

GoodRx & Criteo Revised $32 Million Data Privacy Settlement Gets First Approval

HIPAA Journal · · US Federal · Data Breaches

A federal court has granted preliminary approval to a revised $32 million settlement in a class action lawsuit over data privacy claims against GoodRx and advertising technology company Criteo. The case centers on alleged improper sharing of users' personal health and medication data.

Why this matters: GoodRx is a health app. People use it to find cheaper prescriptions, which means it knows what drugs they take and why. That is sensitive medical information. The allegation here is that this data was handed off to an ad tech company. People did not sign up for their health details to fuel advertising. Thirty-two million dollars sounds like accountability, but in class action settlements most affected users see a small check while the companies move on. The more important question is whether the data-sharing actually stopped.

Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals · General readers · Policy

This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.

Analysis

All analysis →

Weekly Editorial Analysis from Experts and Editors

Logged Is Not Authorized

Georgia law restricts police use of license plate data to law enforcement purposes. A new lawsuit alleges deputies searched a man's vehicle five times while he was suing their sheriff. Two recorded reasons were "info" and "37." The system accepted both.

· 6 min read Read →
Deep Signal · Part I of III

The Algorithm Said So

Federal rulemakers are deciding what to do when artificial intelligence produces the kind of conclusion that once required an expert. They disagree about how to regulate it. They also disagree about whether the problem has arrived.

· 10 min read Read →

Related stories

Breach
HIPAA Journal · · US Federal

Hospital Ransomware Attacker Receives 70 Month Jail Term

A Ukrainian national who participated in the Nefilim and Hive ransomware operations, targeting hospitals, government agencies, and businesses over roughly three years, has been sentenced to 70 months in federal prison. The case represents one of the more concrete criminal accountability outcomes tied to ransomware groups that specifically hit healthcare infrastructure.

Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance

#breach#healthcare#security Read original →
Breach
Nextgov/FCW · · US Federal

DHS personnel leak exposes contact details and sensitive job information

A group calling itself the Department of Peace claims to have obtained records on more than 41,000 Department of Homeland Security employees and contractors, including contact details and sensitive job information. The group says it acted in opposition to immigration enforcement.

Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance

#breach#enforcement Read original →