Court Rules
All enforcement actions
Consent DecreeMedium RiskMultistate

FTC Fines Easy Healthcare $100K for Illegally Sharing Health Data

Easy Healthcare CorporationMay 17, 2023Federal Trade Commission

Penalty Amount

$100,000

Summary

The FTC charged Easy Healthcare Corporation, operator of the Premom fertility app, with deceiving users by sharing their sensitive health data with third parties for advertising without consent and failing to notify breaches as required by the Health Breach Notification Rule. Under a proposed consent decree, the company will pay a $100,000 civil penalty, be barred from sharing health data for advertising, and must implement privacy and security measures.

Remedy

Easy Healthcare must pay a $100,000 civil penalty, is permanently prohibited from sharing user personal health data with third parties for advertising, must obtain user consent before sharing for other purposes, retain data only as necessary, seek deletion of shared data, send consumer notices, and implement comprehensive security and privacy programs.

Monetary PenaltyBanData DeletionCorrective NoticeCompliance Program

Laws Cited

Health Breach Notification Rule

Violation Types

Entity Details

Entity

Easy Healthcare Corporation

Also known as: Easy Healthcare

Industry

Healthcare

Multistate Coalition

Official Sources

Related Enforcement Actions

CT

Easy Healthcare Corporation

$100K

Connecticut, Oregon, and the District of Columbia reached a $100,000 settlement with Easy Healthcare Corporation, the operator of the Premom ovulation tracking app, for sharing sensitive user health and location data with third parties without appropriate disclosures or user consent. The settlement requires the company to implement comprehensive privacy and security programs, obtain consent before sharing health or location data, and provide users with a method to delete their personal information.

FTC

Air AI

$18.0M

Consumer fraud enforcement action where the FTC settled with Air AI for misleading entrepreneurs with false earnings and refund guarantees. The company will be banned from marketing business opportunities and pay a suspended $18 million judgment with $50,000 for consumer relief. Violations included failure to provide required disclosures and false claims under the Telemarketing Sales Rule and Business Opportunity Rule.

FTC

Xponential Fitness

$17.0M

Consumer fraud enforcement action where the FTC settled with Xponential Fitness for violating the Franchise Rule by misrepresenting key information to franchisees, including time to open and costs. The settlement includes a $17 million monetary judgment for redress and prohibits future misrepresentations.

FTC

97 Auto Dealership Groups

Consumer fraud and advertising enforcement action where the FTC sent warning letters to 97 auto dealership groups for deceptive pricing practices, such as advertising prices that exclude mandatory fees, misleading consumers about total costs. The letters stress the need for truthful and transparent pricing in the automotive industry.

FTC

Walmart, Inc.

$100.0M

The FTC and 11 states settled with Walmart for $100 million over deceptive earnings claims in its Spark Driver gig worker app, where drivers were misled about base pay, tips, and incentives. The settlement also addressed GLBA violations for failing to provide proper notice regarding the handling of drivers' financial information. Walmart must implement an earnings verification program and is banned from misrepresenting driver earnings.

FTC

Website and Online Service Operators

The FTC issued a policy statement announcing it will not enforce COPPA against operators that collect age verification data under specific conditions. The policy aims to encourage the use of age verification technologies to protect children online. Operators must limit data use, ensure security, provide notice, and use accurate verification methods.