PrivacySignal
Enforcement

New FTC lawsuit claims Hims & Hers misled customers, sold their data to Meta

Mashable · · International · Enforcement

The Federal Trade Commission has filed a lawsuit against telehealth company Hims & Hers, alleging the company misled customers about how their personal data would be used and shared it with Meta without adequate disclosure. The case centers on health-related data collected from people seeking medical services through the platform.

Why this matters: People using a telehealth service are not signing up to have their health data handed to an advertising platform. They are trying to get medical help. That context matters. Health information is among the most sensitive data anyone shares, and sharing it with Meta — without telling customers — is a serious breach of the trust that makes telehealth work at all. The FTC is making the case that misleading patients about data practices is not a fine-print problem. It is a law enforcement problem. If this lawsuit holds up, it puts every direct-to-consumer health company on notice that how they talk about data sharing will be scrutinized.

Who should care: Lawyers · Privacy officers · Compliance

This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.

Related stories

Enforcement
IAPP · · International

Notes from the IAPP Europe: DSA and DMA enforcement, return of CSAM detection

At the IAPP Europe conference, discussions centered on enforcement of the Digital Services Act and Digital Markets Act, along with renewed debate over proposals to scan private messages for child sexual abuse material. The sessions reflected ongoing tension between platform accountability, market regulation, and the limits of digital privacy in Europe.

Who should care: Lawyers · Privacy officers · Compliance

#enforcement Read original →
Enforcement
W WSB-TV · · International

Wellstar to settle lawsuit over data privacy, will pay $4.25 million if judge approves plan

Wellstar Health System has agreed to a $4.25 million settlement to resolve a data privacy lawsuit, pending judicial approval. The agreement would compensate individuals affected by the underlying privacy dispute involving the Georgia-based healthcare network.

Who should care: Lawyers · Privacy officers · Compliance · General readers · Policy

#enforcement#privacy Read original →
Enforcement
DataBreaches.net · · International

Family says woman violated HIPAA, ‘weaponized’ info

A civil lawsuit filed in West Virginia alleges that a medical administrator named Sarah Gross repeatedly accessed a family's private health records without authorization over several years, then used that information against them in a personal family dispute. The plaintiffs, unnamed in the complaint, are suing Gross and West Virginia University Medical Corporation.

Who should care: Lawyers · Privacy officers · Compliance · Healthcare professionals

#enforcement#healthcare Read original →
Enforcement
M Malwarebytes · · International

Hims & Hers sued over alleged health data privacy failures

Hims & Hers, the telehealth and wellness company, is facing a lawsuit over allegations that it mishandled users' personal health data. The suit centers on claims that the company failed to adequately protect sensitive medical information shared by its customers.

Who should care: Lawyers · Privacy officers · Compliance · Healthcare professionals · General readers · Policy

#enforcement#healthcare#privacy Read original →
Enforcement
HIPAA Journal · · US Federal

OSF Healthcare System Pays $552,250 to Settle OCR HIPAA Investigation

OSF Healthcare System has agreed to pay $552,250 to settle a HIPAA investigation by the HHS Office for Civil Rights. The settlement resolves findings related to OSF Healthcare and its affiliated covered entities, though the specific violations were not detailed in the available excerpt.

Who should care: Lawyers · Privacy officers · Compliance · Healthcare professionals

#enforcement#healthcare Read original →
Enforcement
T Tech Policy Press · · International

Brussels Gains New AI Act Enforcement Powers as Autonomous AI Tests Regulators

The European Union's AI Act enforcement framework is gaining new teeth in Brussels as regulators begin confronting the practical challenges posed by autonomous AI systems. The development marks a shift from the law's drafting phase toward active oversight of real-world AI deployment.

Who should care: Lawyers · Privacy officers · Compliance · AI governance · Administrators · General readers · Policy

#enforcement#ai-governance#regulation#ai Read original →