The FTC on Wednesday filed a court order against GoodRx for failing to notify users that it shared their personal, identifiable health data with Facebook and Google and said it would permanently ban the company from sharing such information for ads, should the court order be federally approved.
Why it matters: The court order is the firstFTC action under the Health Breach Notification Rule, which requires companies to notify users when their health data is infringed upon, and includes several safeguards aimed at protecting consumer data.
“We’re making clear that apps violating this rule need to come clean with consumers when they share sensitive data improperly,” an FTC official said during a press briefing about the order.
The order must be approved by the federal court to go into effect.
Zoom in: The health data GoodRx shared with tech companies includes individually identifiable data on users’ prescription medications and health conditions. Per the complaint:
In August 2019, GoodRx compiled lists of users who’d purchased medications for heart disease and high blood pressure and uploaded their email addresses, phone numbers and mobile advertising IDs to Facebook so it could identify their profiles.
GoodRx then used that information to target users with relevant ads.
Details: The court order, filed by the Department of Justice on behalf of the FTC in California’s Northern District, found GoodRx shared data with companies including Facebook, Google, Criteo, Branch and Twilio. The order found GoodRx:
Monetized users’ personal health data to target them with health- and medication-specific ads on Facebook and Instagram.
Let third parties it shared data with use the information for research, development or advertising purposes without getting consent.
Misrepresented its HIPAA compliance, displaying a seal at the bottom of its telehealth site falsely suggesting it complied with the law.
Failed to maintain sufficient policies or procedures to protect its users’ personal health information.
State of play: GoodRx, which offers prescription discount coupons and telehealth services, lets users track their personal health data to save, track and get alerts about prescriptions, refills, pricing and medication purchase history.
Per the complaint, the company collects data from users themselves and from pharmacy benefit managers (PBMs) that confirm when someone buys a prescription drug using one of its coupons.
Since January 2017, more than 55 million consumers have visited or used GoodRx’s website or mobile apps, the complaint says.
What they’re saying: A spokesperson for GoodRx told Axios the company does not agree with the allegations, saying the order “focuses on an old issue that was proactively addressed almost three years ago.”
“We admit no wrongdoing,” the spokesperson said. “Entering into the settlement allows us to avoid the time and expense of protracted litigation.”
“Health data today isn’t just what your doctor keeps in a file behind a desk,” an FTC official said during the briefing. “And the way we’re enforcing this reflects that new reality.”
“We expect this to have a significant impact on the marketplace,” the official added.
Flashback: The FTC in 2021 issued a warning to health apps and others that collect or use consumers’ health information that they must comply with the Health Breach rule.
“We are now showing the market that we meant business when we issued that policy statement,” the FTC official said.
What’s next: In addition to charging GoodRx with a $1.5 million civil penalty and banning it from disclosing user health information for ads, the order requires that the company:
Direct third parties to delete the consumer health data shared with them and inform users about the breaches and the FTC’s enforcement action.
Get users’ consent before sharing health data with third parties for purposes other than ads and detail the types of health information it will disclose to those parties.
Limit how long it can retain personal health information.
Create a privacy program that includes safeguards to protect such data.
Of note: While the order only binds GoodRx, companies including Facebook who received the data “are on notice that they were in receipt of data that was illegally collected,” another FTC official said.
Lloyds Bank this weekend fired a salvo at Facebook-owner Meta, slamming it for failing to stop a ‘Wild West’ surge in online shopping scams. Britain’s biggest retail bank – which has 26 million customers – blasted the social media giant for enabling so-called ‘purchase’ frauds.
The banking group claimed two-thirds of the scams start on Meta-owned platforms, which also includes Instagram.
Banks and insurance groups have been frustrated for years that social media companies are not made to pay their fair share of compensation to victims for frauds hosted on their platforms.
But it is highly unusual for a lender like Lloyds to take aim at an individual tech firm like Meta.
The intervention puts Lloyds Banking Group boss Charlie Nunn at loggerheads with Facebook tycoon Mark Zuckerberg.
Face-off: Lloyds Banking Group boss Charlie Nunn and Meta executive chairman Mark Zuckerberg
British banks have previously urged ministers to tackle online financial scams amid concerns that criminals are using Facebook and Google to place fraudulent advertisements with impunity.
The failure of internet giants to check the authenticity of digital ads has led to a surge of scams, they claim. These include ‘brand cloning’, where criminals impersonate legitimate businesses to dupe victims into handing over their savings. Purchase fraud tends to target younger consumers who are tricked into paying for sought-after items that don’t actually exist.
Victims are lured by the offer of a cheap deal – often advertised on social media – and then asked to send money from their own secure online bank account direct to the seller via a transfer system known as faster payments.
However, this provides very little protection when things go wrong.
The scam is a small but growing part of online fraud, which now accounts for 40 per cent of all crime and costs £7 billion a year, according to latest government figures.
The number of purchase frauds has soared by 40 per cent since the start of the pandemic to over 117,000 cases in 2022, according to the UK Finance trade body. It coincided with a boom in online shopping, more time spent on social media and shortages of certain goods caused by supply chain issues.
Lloyds, whose brands include Hailfax and Bank of Scotland, estimates that someone falls victim to the scam on a Meta-owned platform every seven minutes, costing consumers £27 million this year alone.
The average amount lost by the victims of purchase scams is around £570. Clothes, trainers, gaming consoles and mobile phones are among the most common goods being falsely advertised for sale.
Lloyds said it reimburses ‘the majority’ of victims and has invested ‘hundreds of millions of pounds’ in security systems to beat the scammers.
But refunds don’t address the emotional trauma of being a victim of fraud or stop the flow of money to organised crime, it added.
‘Social media has become the Wild West of online shopping in recent years, with very few checks in place to verify who is selling what,’ said Liz Ziegler, fraud prevention director at Lloyds Banking Group.
The Government’s new national fraud strategy allows banks more time to slow down suspicious payments. But Ziegler said banks couldn’t fight the ‘epidemic of scams’ alone.
‘It’s high time tech companies stepped up to share responsibility for protecting their own customers,’ she said.
‘This means stopping scams at source and contributing to refunds when their platforms are used to defraud innocent victims.’
An amendment to the long-delayed Online Safety Bill requires social media firms to prevent paid-for fraudulent adverts, regardless of whether the ads are controlled by the platforms or an intermediary. It followed pressure from consumer groups, charities and the banking industry who claimed the Government’s approach to tackling online fraud was ‘flawed’.
But critics say the proposals still don’t go far enough. ‘Fraudsters don’t just pay for adverts or create fraudulent content that fits within the scope of the Bill,’ said a banking industry source. ‘The exclusion of online marketplaces like Facebook’s is therefore a significant loophole.’
Campaigners say only the threat of fines will force the social media companies to act.
‘Without penalties there’s nothing in it for them to stop the scams from happening,’ said consumer champion Baroness Altmann. She fears the Government is ‘absolutely terrified of upsetting the tech companies’ and of being seen to clamp down on the free market.
James Daley, founder of consumer campaign group Fairer Finance, said social media sites had become ‘a gateway for fraudsters’.
‘Firms like Meta have a clear responsibility to step up and protect their users,’ he said. ‘But if past experience is anything to go by, it’s unlikely these firms will do much if they don’t have to.
‘The Government announced plans to introduce new protections last year, but these have now been kicked into the long grass again.’
Meta said purchase fraud was ‘an industry-wide issue’ with scammers using ‘increasingly sophisticated methods’ to defraud people ‘in a range of ways, including email, text and offline’.
A spokesman said: ‘We don’t want anyone to fall victim to these criminals which is why our platforms have systems to block scams. Financial services advertisers now have to be authorised by the Financial Conduct Authority.’
The Department for Science, Innovation and Technology was approached for comment.
Some links in this article may be affiliate links. If you click on them we may earn a small commission. That helps us fund This Is Money, and keep it free to use. We do not write articles to promote products. We do not allow any commercial relationship to affect our editorial independence.
NHS trusts are sharing intimate details about patients’ medical conditions, appointments and treatments with Facebook without consent and despite promising never to do so.
An Observer investigation has uncovered a covert tracking tool in the websites of 20 NHS trusts which has for years collected browsing information and shared it with the tech giant in a major breach of privacy.
The data includes granular details of pages viewed, buttons clicked and keywords searched. It is matched to the user’s IP address – an identifier linked to an individual or household – and in many cases details of their Facebook account.
Information extracted by Meta Pixel can be used by Facebook’s parent company, Meta, for its own business purposes – including improving its targeted advertising services.
Records of information sent to the firm by NHS websites reveal it includes data which – when linked to an individual – could reveal personal medical details.
It was collected from patients who visited hundreds of NHS webpages about HIV, self-harm, gender identity services, sexual health, cancer, children’s treatment and more.
It also includes details of when web users clicked buttons to book an appointment, order a repeat prescription, request a referral or to complete an online counselling course. Millions of patients are potentially affected.
This weekend, 17 of the 20 NHS trusts that were using Meta Pixel confirmed they had pulled the tracking tool from their websites.
Eight issued apologies to patients. Multiple trusts said they had originally installed the tracking pixels to monitor recruitment or charity campaigns and were not aware that they were sending patient data to Facebook. The Information Commissioner’s Office (ICO) is investigating.
Der Observer can reveal:
In one case, Buckinghamshire Healthcare NHS trust shared when a user viewed a patient handbook for HIV medication. The name of the drug and the NHS trust were sent to the company along with the user’s IP address and details of their Facebook user ID.
Alder Hey Children’s trust in Liverpool, sent Facebook details when users visited webpages for sexual development problems, crisis mental health services and eating disorders. It also shared data when users clicked to order repeat prescriptions.
The Tavistock and Portman NHS foundation trust in London shared data with Facebook when users clicked the information page for its gender identity service, which specialises in working with children who have gender dysphoria. Data was also shared when users viewed the webpage for the Portman Clinic, which “offers specialist help with disturbing sexual behaviours”, and clicked for details on how to be referred to the service.
Surrey and Borders Partnership NHS trust shared data with Facebook when a patient clicked buttons indicating they were under 18, lived in Brighton and wanted to access mental health services.
Other NHS trusts sent detailed receipts to Facebook when users accessed pages for appointment bookings or completed online self-help courses. Barts Health NHS trust, which serves a population of 2.5 million in London, shared data with Facebook when a user clicked to “cancel or change an appointment” or added a visit to a particular hospital to their itinerary.
The Royal Marsden, a specialist cancer centre, sent data on patients requesting referrals, viewing information about private care and browsing pages for particular cancer types.
A page about sexual development disorders on Alder Hey Children’s Hospital’s website, which shared details of the browsing with Facebook via the Meta Pixel.
Information sent to the company is likely to include special category health data, which has extra protection in law and is defined as information “about an individual’s past, current or future health status”, including medical conditions, tests and treatment and “any related data which reveals anything about the state of someone’s health”. Using or sharing it without explicit consent or another lawful basis is illegal.
Once the data reaches Facebook’s servers, it is not possible to track exactly how it is used. The company says it prohibits organisations from sending it sensitive health information and has filters to weed such data out when it is received by mistake.
Professor David Leslie, director of ethics at the Alan Turing Institute, said the transfer of data to third parties by the NHS risked damaging the “delicate relationship of trust” with patients. “Our reasonable expectation when we’re accessing an NHS website is that our data won’t be extracted and shared with third-party commercial entities that could [use it] for targeting ads or linking our personal identities to health conditions,” he said.
He accused Meta of doing too little to monitor what information it was being sent. “Meta says we don’t permit certain types of data being sent to us but they haven’t spent enough on resources to audit this,” Christl said.
In most cases, the information sent to Facebook during a test by the Observer was transferred automatically upon loading a website – before the user had selected to “accept” or “decline” cookies – and without explicit consent. Only three of the 20 trusts mentioned Facebook or Meta in their privacy policies at all. Several of the trusts had previously promised patients that their information would not be shared or used for marketing.
Collectively, the 20 NHS trusts found using the tracking tool serve a population of more than 22 million people in England, stretching from Devon to the Pennines. Some had been using it for several years.
Surrey and Borders partnership trust shared data with Facebook when a patient clicked buttons indicating they were under 18, lived in Brighton and wanted to access mental health services.
One of the trusts that pulled the tracking tool this weekend, Buckinghamshire Healthcare NHS trust, had previously said in its privacy policy that “confidential personal information about your health and care … would never be used for marketing purposes without your explicit consent”.
In a statement, the trust apologised to patients and said the Meta Pixel had been active on its website in error. “It was installed in relation to a recruitment campaign, and we were not aware that Meta was using this information for marketing purposes,” a spokesperson said. “Immediate action has been taken to remove it.”
Alder Hey said it asked visitors to its website for permission to use cookies and said patients’ names and addresses had not been shared. It has removed the tracking tool.
The Royal Marsden said it regularly reviewed its privacy policies but did not say whether it planned to remove the pixel. Barts said it was removing trackers from its website “following the disclosure that they were being used to extract personal information beyond the purpose for which they were originally installed, which was to measure responses to recruitment advertising campaigns.”
Several said they were unaware of how data would be used and apologised to patients for failing to get consent. Aside from the 17 who pulled or are pulling the tool, Hertfordshire Partnership trust and Royal Marsden said they were investigating the issues internally and only the Tavistock and Portman did not respond to requests for comment.
The ICO said it had “noted the findings” and was considering the matter. “People have the right to expect that organisations will handle their information securely and that it will only be used for the purpose they are told,” a spokesperson said.
Revelations about the NHS use of Meta Pixel come after regulators in the US issued warnings over the use of tracking tools there. Last summer, tech website The Markup exposed their use on the websites of healthcare providers. In December, the Biden administration warned that using tracking pixels to collect patient data without consent was a potential federal law violation.
Several leading US hospitals are currently being sued by their patients over their use of the pixels, which are tiny pieces of code that are invisible during normal browsing.
Meta is also facing legal action over accusations of knowingly receiving sensitive health information – including from pages within patient portals – and not taking steps to stop it. The plaintiffs claim Meta violated their medical privacy by intercepting “individually identifiable health information” from its partner websites and “monetising” it.
Jeffrey Koncius, a partner at Kiesel Law in California and one of the attorneys leading the action, said the data transfer by the NHS websites appeared similar to what was happening in the US. “Imagine if a hospital sent a letter to Mark Zuckerberg and said, ‘We want you to know that Jeff Koncius is our patient,’” he said. “That’s exactly what’s happening here. It’s just happening electronically.”
The Liberal Democrat health spokesperson Daisy Cooper described the findings as a “shocking discovery” that raised serious questions about the protection of patient information. “The NHS must investigate how this happened and how widespread this alleged data breach is,” she said.
NHS England said individual trusts were responsible for ensuring they followed data protection laws. “The NHS is looking into this issue and will take further action if necessary,” a spokesperson said.
Meta said it had contacted the trusts to remind them of its policies, which prohibited organisations from sending it health data. “We educate advertisers on properly setting up business tools to prevent this from occurring,” the spokesperson said. They added it was website owner’s responsibility to ensure it complied with data protection laws and had obtained consent before sending data.
The company did not answer questions about the effectiveness of its filters designed to weed out “potentially sensitive data”, or which types of information they would block from hospital websites – or say why it permitted NHS trusts to send it data at all, given the high risk it could reveal details about the web user’s health.
“Like any technology, our filters won’t be able to catch everything all of the time. However, we are constantly improving our mechanisms to make sure we catch as much as we can,” a spokesperson said.
The company offers its business tools to advertisers, saying they can help them use health-based advertising to “grow your business”. In one guide, it says data collected through its business tools can improve users’ Facebook experience by showing them ads they “might be interested in”. “You may see ads for hotel deals if you visit travel websites,” it explains.
Sam Smith, at medConfidential, a data privacy campaign group, said it was never appropriate for the tools to be used to collect health information. “There’s no benefit to NHS trusts in giving this information away. It’s like asking a tobacco company to sponsor a cancer ward,” he said. “NHS England is tacitly approving this by not enforcing anything better.”
To watch your ETV all channels programmes anywhere any time Download ETV Win App for both Android & IOS: https://f66tr.app.goo.gl/apps
Visit Website : http://etv.co.in
Like us on Facebook : https://www.facebook.com/etvwin Follow us on Instagram : https://www.instagram.com/etvwin/ Follow us on Twitter : https://twitter.com/etvwin Visit Website : https://www.etvwin.com/ Pin us on Pinterest: https://in.pinterest.com/etv_win/
ETV Telugu(Youtube) – http://bit.ly/2QR0yu9 ETV Jabardasth(Youtube) – http://bit.ly/35xdqtu ETV Dhee(Youtube) – http://bit.ly/2Ok8zWF ETV Plus India(Youtube) – http://bit.ly/2OlEAOg ETV Abhiruchi(Youtube) – http://bit.ly/2OkEtTb ETV Life(Youtube) – http://bit.ly/2OiKAY6 ETV Telangana(Youtube) – http://bit.ly/33nRaAK ETV Andhra Pradesh(Youtube) – http://bit.ly/2OKARZz ETV Annadata(Youtube) – https://bit.ly/3BeZXXS
ETV Telugu Facebook – http://bit.ly/2L2GYYh ETV Plus India Facebook – http://bit.ly/2DudC0t ETV Abhiruchi Facebook – http://bit.ly/2OSrIhv ETV Life Facebook – http://bit.ly/34tiqzk ETV Telangana Facebook – http://bit.ly/37GkVQF ETV Andhra Pradesh Facebook – http://bit.ly/2R0vs3k ETV Annadata Facebook – https://bit.ly/3kGnkEb
An Indo-American News website. It covers Gossips, Politics, Movies, Technolgy, and Sports News and Photo Galleries and Live Coverage of Events via Youtube.
The website is established in 2015 and is owned by AGK FIRE INC.
So was:
WieWird geladen…
Zusammenfassung
Title
Sri Prasanna Venkateswara Swamy Temple (Video)
Beschreibung
#Teerthayatra #Devotionalshow #ETVWin
To watch your ETV all channels programmes anywhere any time Download ETV Win App for both Android & IOS: https://f66tr.app.goo.gl/apps
Visit Website : http://etv.co.in
Like us on Facebook : https://www.facebook.com/etvwin
Follow us on Instagram : https://www.instagram.com/etvwin/
Follow us on Twitter : https://twitter.com/etvwin
Visit Website : https://www.etvwin.com/
Pin us on Pinterest: https://in.pinterest.com/etv_win/
ETV Telugu(Youtube) – http://bit.ly/2QR0yu9
ETV Jabardasth(Youtube) – http://bit.ly/35xdqtu
ETV Dhee(Youtube) – http://bit.ly/2Ok8zWF
ETV Plus India(Youtube) – http://bit.ly/2OlEAOg
ETV Abhiruchi(Youtube) – http://bit.ly/2OkEtTb
ETV Life(Youtube) – http://bit.ly/2OiKAY6
ETV Telangana(Youtube) – http://bit.ly/33nRaAK
ETV Andhra Pradesh(Youtube) – http://bit.ly/2OKARZz
ETV Annadata(Youtube) – https://bit.ly/3BeZXXS
ETV Telugu Facebook – http://bit.ly/2L2GYYh
ETV Plus India Facebook – http://bit.ly/2DudC0t
ETV Abhiruchi Facebook – http://bit.ly/2OSrIhv
ETV Life Facebook – http://bit.ly/34tiqzk
ETV Telangana Facebook – http://bit.ly/37GkVQF
ETV Andhra Pradesh Facebook – http://bit.ly/2R0vs3k
ETV Annadata Facebook – https://bit.ly/3kGnkEb
![55 Social-Media-Post-Vorlagen zur Inspiration Ihrer Online-Marketing-Strategie [Infografik]](https://articles.entireweb.com/wp-content/uploads/2023/05/1684763142_55-Social-Media-Post-Templates-to-Inspire-Your-Online-Marketing-80x80.png "55 Social-Media-Post-Vorlagen zur Inspiration Ihrer Online-Marketing-Strategie [Infografik]")
![12 Tipps, wie Sie ein Influencer werden [+Daten]](https://articles.entireweb.com/wp-content/uploads/2023/05/12-Tips-on-How-to-Become-an-Influencer-Data.pngkeepProtocol-80x80.png "12 Tipps, wie Sie ein Influencer werden [+Daten]")
Deutsch (Sie) 
English 
Svenska