[{"description":"Practice Fusion case suggests 6 health privacy pointers lfair June 8, 2016 | 9:01AM Practice Fusion case suggests 6 health privacy pointers By Lesley Fair Combine two of the most talked-about consumer protection topics – health privacy and consumer-generated online content – and what do you get? A proposed FTC settlement with Practice Fusion, the largest cloud-based electronic health records company in the country, and six compliance tips for others in the industry. One of San Francisco-based Practice Fusion’s primary products is an electronic records system for outpatient providers. In 2009, the company launched “Patient Fusion,” an online portal where patients whose providers were already using Practice Fusion could view or download their health information or transmit it to another provider. Patient Fusion also let patients send and receive secure messages from their providers. Fast forward several years and the company decided to expand Patient Fusion to include a public directory where current and prospective enrollees could search for doctors geographically or by specialty, read patient reviews of providers, and request appointments. But Practice Fusion had to ask itself a question familiar to many online companies: How do we get the content – in this case, patient reviews? That’s the focus of the FTC’s lawsuit. According to the complaint , Practice Fusion solicited data in a misleading way that led some patients to believe they were sending follow-up messages directly to their doctors about their diagnosis, medical treatment, prescriptions, etc. – and not contributing content to a public website. Practice Fusion, however, populated its new site with the information those people provided, some of which was highly sensitive. Here’s what happened. After appointments with their doctors, patients received emails titled “How was your visit?” The message continued, “To help improve your service in the future, please let us know how your visit went” and included a link with rating stars. The message ended this way: Thank you, Dr. [Name] In a footer, the message said “This email was sent to you by Patient Fusion®, a tool Doctor [Name] uses to deliver the highest quality of care to patients.” Below that in smaller print it said “Sent on behalf of Doctor [Name]’s office by: Practice Fusion.” If patients clicked the link, they were taken to a page that asked for feedback about things like how long they had to wait for their appointment, the doctor’s bedside manner, and whether their medical concern was addressed. There also was a text box where patients were invited to “leave a review for your provider.” Below that was a pre-checked box with the phrase “Keep this review anonymous.” What did some people put in that box? Highly sensitive information directly addressed to their doctors, not evaluations meant to be shared publicly. Here are just a few examples: “Dr [name], My Xanax prescription that I received on Monday was for 1 tablet a day but usually it’s for 2 tablets a day. I have not taken it to the pharmacy yet. Can I pick up a new one, or can I get a prescription called into a pharmacy? Thanks, [patient’s full name] “I called today and left a message regarding my daughter and no one has returned my call. I think she is depressed and has stated several times this week that she wishes she was dead. Could someone please call me [phone number]?” “The cefuroxime axetil does not seem to be doing anything for me. I did a little research and I think I have a yeast infection called candida. Not sure what to do about it yet. I guess I will first try to change my diet. Medication? [patient’s full name] “I would like to make an appointment for my back pain and possible shingles. Can you please call me @ [phone number]? Thank you! [patient's full name]” “I HAVE NO INFECTION [healthcare provider name].  EVERYTHING WENT","id":3194910,"source":"FTC USA Business Blog Posts","titre":"Practice Fusion case suggests 6 health privacy pointers","url":"https://www.ftc.gov/business-guidance/blog/2016/06/practice-fusion-case-suggests-6-health-privacy-pointers","pubDate":"Sat, 03 Oct 2026 08:09:37 +0200"},{"source":"Federal Trade Commission - Protecting America's Consumers","id":2562491,"description":"The Federal Trade Commission is sending payments totaling more than $27.6 million to consumers who were enrolled, without their knowledge, in plans where they were shipped and charged repeatedly for products marketed to promote weight loss, clear skin, and other healthcare benefits. According to  the FTC’s July 2024 complaint , defendants Legion Media, LLC, KP Commerce, LLC, Pinnacle Payments, LLC, Sloan Health Products, LLC, and their principals, operated two types of unauthorized billing scams. In the first, the FTC alleged that the defendants defrauded consumers who bought CBD and Keto-related products by charging them more than the advertised price and enrolling them in continuity plans without their consent in which they are charged for products they never intended or agreed to buy. Several defendants participated in a second scheme where consumers paid a small shipping fee for a supposedly free “gift.” However, after consumers used their credit and debit cards to pay the fee, they incurred recurring unauthorized charges on their cards. In September 2024,  the Commission announced settlements requiring the defendants to forfeit tens of millions of dollars in assets and permanently banning them from the alleged illegal conduct. The settlement orders also banned them from marketing or selling any product or service using a negative option feature. The FTC is sending checks and PayPal payments to 1,215,337 affected consumers between now and December 18, 2025. Most consumers will receive a check in the mail. Check recipients should cash their checks within 90 days, as indicated on the check. PayPal recipients should redeem their PayPal payments within 30 days. Consumers who have questions about their payment should contact the refund administrator, Rust Consulting, at 866-914-9330, or visit the FTC website to  view frequently asked questions  about the refund process. The Commission never requires people to pay money or provide account information to get a refund. The Commission’s  interactive dashboards for refund data  provide a state-by-state breakdown of refunds in FTC cases. In 2024, FTC actions led to more than $339 million in refunds to consumers across the","pubDate":"Wed, 10 Dec 2025 09:52:09 +0100","url":"https://www.ftc.gov/news-events/news/press-releases/2025/12/ftc-sends-more-276-million-consumers-harmed-unauthorized-billing-schemes","titre":"FTC Sends More Than $27.6 Million to Consumers Harmed by Unauthorized Billing Schemes"}]