CEREBRAL · TELEHEALTH · FTC

The FTC alleged that a mental-health telehealth company disclosed sensitive health data to third parties for advertising.

Telehealth relationship → sensitive data → advertising disclosure allegations → federal settlement

In 2024, the FTC and Department of Justice announced a proposed settlement with online mental-health provider Cerebral. The government alleged that Cerebral disclosed sensitive personal health information and other sensitive consumer data to third parties for advertising purposes and failed to adequately secure consumer information.

The settlement restricted Cerebral's use and disclosure of sensitive data, imposed privacy and security requirements and required monetary relief. The FTC later distributed more than $5 million in refunds connected to the broader settlement.

Why it matters: Telehealth can collapse the boundary between clinical care and ordinary consumer software unless strong rules and technical controls separate health information from advertising infrastructure.

Primary sources: FTC — Cerebral settlement announcement · FTC case record

WHY THIS LIBRARY EXISTS

This page preserves the anecdote and its caveats separately from the shorter Why Privacy Matters explainer. The goal is to keep the argument readable without hiding the receipts.