The FTC sued Flo Health—a once-popular women’s health app used for tracking reproductive health information such as menstrual cycles and pregnancies—for lying to users about its privacy policies and claiming to keep health information private while actually selling the information to third parties. Flo Health misrepresented its compliance with international privacy laws that require notice, consent, and protection of personal information transferred to third parties and Flo agreed to settle these charges in 2021. Flo was required to obtain consent prior to sharing a consumer’s health information with a third party, undergo a compliance review conducted by a third party expert, notify users of the app that Flo shared information about their periods and pregnancies with third parties in violation of its privacy policies, and post a similar notice on its website.

Amazon had to pay $25 million dollars for improperly collecting children’s voice recordings and  geolocation information through its Alexa devices, misleading parents about privacy protections, and failing to honor deletion requests. The DOJ and FTC took action against Amazon for violating the Children’s Online Privacy Protection Act. In addition to the monetary settlement, Amazon must also delete inactive child accounts, stop using certain sensitive information to train its algorithms, stop misrepresenting its privacy policies, and notify its users about the FTC-DOJ action.