Court Rules
All enforcement actions
Enforcement ActionLow RiskMultistate

FTC and States Act Against Hims & Hers for Deceptive and Unlawful Privacy Practices

Hims & HersJuly 29, 2026Federal Trade Commission

Summary

The FTC, along with Utah and California, filed a complaint against Hims & Hers alleging the telehealth provider shared consumers' sensitive health information with third-party advertising platforms without consent, and deceived consumers about billing and cancellation practices. The complaint alleges violations of the FTC Act and the Restore Online Shoppers' Confidence Act.

Contract Impact

In-house legal teams should review vendor agreements with advertising platforms and data processors to ensure they include explicit consent mechanisms for sharing sensitive health information. They should also audit privacy policies and disclosures to ensure they accurately reflect data sharing practices. Additionally, subscription and cancellation clauses should be reviewed to ensure they are not deceptive and comply with ROSCA, including clear disclosure of charges and easy cancellation processes.

Contract Search Terms

health information sharingthird-party advertisingtracking pixelcustomer list sharingconsent for data sharingprivacy policycancellation policysubscription termsbilling practicesROSCA compliance

Laws Cited

FTC ActRestore Online Shoppers' Confidence ActUtah Consumer Sales Practices ActCalifornia False Advertising LawCalifornia Unfair Competition Law

Violation Types

Entity Details

Entity

Hims & Hers

Industry

Healthcare

Multistate Coalition

Official Sources

Source Evidence

Entity Name
"the FTC and its state and local partners allege that Hims & Hers (Hims) fails to clearly disclose"
Laws Cited
"The FTC alleges these practices have violated the FTC Act and the Restore Online Shoppers’ Confidence Act"
Laws Cited
"Utah alleges violations of the Utah Consumer Sales Practices Act"
Laws Cited
"California alleges violations of California’s False Advertising and Unfair Competition Laws"
Violation Types
"shared consumers’ sensitive health information with third-party advertising platforms such as Meta and Snap despite promising to protect patient privacy"
Violation Types
"The FTC also alleges that the company makes it extremely difficult to cancel its subscriptions."

Related Enforcement Actions

FTC

Riverside Payments Inc.

$600K

The FTC and Washington alleged that Riverside Payments and affiliates misrepresented savings and cancellation terms, concealed fees and auto-renewing contracts, and obtained consumers’ financial information using false or fraudulent statements. The proposed stipulated order requires a $600,000 payment, customer notice and a period to rescind agreements without penalty, and prohibits deceptive claims while requiring clear disclosures, informed consent for negative-option billing, and a simple cancellation method.

FTC

25 companies that market or generate sales leads for healthcare plans (recipients not named)

FTC staff announced warning letters to 25 healthcare plan marketers and lead generators about deceptive or unfair claims concerning plan benefits, coverage, costs, and enrollment incentives. The letters do not allege wrongdoing by their recipients or impose penalties; they encourage companies to review their advertisements for compliance.

FTC

Multiple impersonation-scam operators

The FTC summarized enforcement actions and other efforts targeting businesses and individuals allegedly impersonating government agencies or legitimate businesses. The release reports more than $80 million in consumer redress across prior actions and takedowns of 19 websites, but it does not announce a new settlement or impose a specific penalty.

FTC

Toast Inc.

The FTC and state and local co-plaintiffs filed a lawsuit alleging Toast imposed hidden and unauthorized fees, enrolled restaurants in add-ons without consent, obstructed subscription cancellations, and misrepresented customer support availability. The complaint is pending in federal court; the press release announces no monetary penalty or imposed remedy.

FTC

Delta, United, JetBlue, Lyft, Uber, DoorDash, Instacart, Target, and Walmart

The FTC issued information orders to nine companies to examine whether they use personal data and other factors to set individualized consumer prices or gig-worker compensation. This is a study and information-gathering inquiry, not a finding that the companies violated the law; recipients must respond within 45 days of receiving the orders.

FTC

Dollar General Corporation

The FTC and 20 states sued Dollar General, alleging that it repeatedly charged customers more at checkout than advertised prices and failed to correct the problem despite consumer complaints and corporate knowledge. The complaint alleges violations of federal and state laws; the case is pending, and the press release does not report a penalty or final remedy.