Going forward BetterHelp is not permitted to share sensitive health information and PI without obtaining affirmative consent from the patients and customers. BetterHelp is also required to overhaul its privacy program and request that any outside parties that received the consumers' sensitive data delete such information. This enforcement comes only a month after the FTC announced a $1.5 settlement against prescription drug discount provider GoodRx Holdings Inc. ("GoodRx") for allegedly failing to notify consumers and others of its unauthorized disclosures of consumers' Protected Health Information (PHI) to third parties for targeted advertising purposes (a notable settlement as it was the FTC's first enforcement action in almost 15 years under its little-used Health Breach Notification Rule, which requires vendors of personal health records and related entities to notify consumers following a breach involving unsecured information).