The Federal Trade Commission and the states of Utah and California filed suit against Hims & Hers Health, Inc., alleging violations of federal privacy law and deceptive business practices. The FTC claims the telehealth company improperly disclosed consumers' health information without authorization and misrepresented key terms governing customer relationships.
The complaint targets three distinct areas of misconduct. First, the agencies assert that Hims & Hers shared sensitive health data with third parties, including pharmacy benefit managers and data brokers, in violation of the Health Insurance Portability and Accountability Act (HIPAA) and the FTC Act. Second, the company allegedly made false and misleading statements about subscription terms, making cancellation difficult and confusing for consumers. Third, the agencies charge that Hims & Hers misled customers regarding billing practices and the true cost of ongoing service.
This lawsuit represents the latest regulatory challenge for the rapidly expanding telehealth sector. Hims & Hers operates as a direct-to-consumer platform offering prescription medications, primarily for conditions including erectile dysfunction, hair loss, and weight management. The company has faced previous scrutiny regarding marketing claims and operational practices.
The FTC enforcement action carries significant consequences for Hims & Hers and the broader digital health industry. A settlement could require the company to implement enhanced privacy safeguards, obtain explicit consumer consent before sharing health information, and revise billing and cancellation disclosures. The inclusion of state attorneys general from Utah and California signals coordinated enforcement and potentially broader state-level regulatory pressure.
For consumers, the lawsuit addresses practical concerns about telehealth platforms handling sensitive personal data and subscription management. Health information sharing with commercial entities raises legitimate privacy issues. Subscription cancellation practices have emerged as a recurring problem across digital health and wellness companies.
The case underscores the regulatory gap facing telehealth companies operating at the