FTC sues Hims & Hers for allegedly sharing patients’ medical data with advertisers Meta and Snap

The Federal Trade Commission has filed a lawsuit against Hims & Hers, a health and wellness company, for allegedly sharing patients' medical data with advertisers Meta and Snap, in a shocking move that has left many questioning the safety of online health services. This lawsuit comes after an investigation found that Hims & Hers used website trackers to share customers' information with advertisers, a clear violation of federal law. The company, which prescribes medication for sexual wellness and mental health conditions, has been accused of prioritizing profits over patient privacy. The Impact on Consumers The sharing of medical data without consent is a serious concern for consumers, as it can lead to targeted advertising and potential discrimination. For example, a study by the Pew Research Center found that 72% of adults in the US are concerned about the way their personal data is being used by companies. This concern is not unfounded, as the sharing of medical data can have serious consequences, such as higher insurance premiums or employment discrimination. Background and Precedent Hims & Hers is not the first company to be accused of sharing medical data without consent. In 2020, the FTC fined a health app company $1.5 million for sharing user data with third-party companies. This precedent suggests that the FTC is taking a strong stance on protecting consumer data, and companies that violate federal law will be held accountable. The Health Insurance Portability and Accountability Act, also known as HIPAA, is a federal law that protects the privacy of medical information, and companies that handle medical data must comply with this law. What to Expect Next The lawsuit against Hims & Hers is likely to have significant implications for the health and wellness industry, as companies will be forced to re-examine their data sharing practices. The FTC has stated that it will continue to monitor companies that handle medical data, and those that violate federal law will face serious consequences. For example, the FTC has the authority to impose fines of up to $43,280 per violation, and companies that repeatedly violate federal law can face even harsher penalties. Conclusion and Takeaway The lawsuit against Hims & Hers serves as a clear reminder that companies that handle medical data must prioritize patient privacy, and the sharing of medical data without consent will not be tolerated. The takeaway from this lawsuit is that consumers must be vigilant when sharing medical information online, and companies that handle medical data must comply with federal law, or face serious consequences. Regulatory Environment The regulatory environment surrounding medical data is complex, and companies must navigate a web of federal and state laws to ensure compliance. For example, the California Consumer Privacy Act gives consumers the right to opt-out of the sale of their personal data, and companies that handle medical data must comply with this law. Consequences of Non-Compliance The consequences of non-compliance with federal law can be severe, and companies that violate HIPAA can face significant fines and penalties. For example, in 2020, a hospital was fined $2.4 million for violating HIPAA, and the company was required to implement a corrective action plan to ensure compliance with federal law. Data Protection and Security The protection of medical data requires robust security measures, and companies that handle medical data must implement safeguards to prevent unauthorized access. For example, the use of encryption and secure servers can help protect medical data from hackers and other malicious actors. Final Thoughts The lawsuit against Hims & Hers is a significant development in the ongoing effort to protect consumer data, and companies that handle medical data must take note of the FTC's strong stance on this issue. The sharing of medical data without consent is a serious concern, and companies that prioritize profits over patient privacy will face serious consequences.