{
  "topic": "health-breach-notification",
  "generated_at": "2026-03-27T00:38:02.843Z",
  "total_provisions": 106,
  "provisions": [
    {
      "provision_number": "I",
      "title": "Prohibition on Disclosure of Health Information for Advertising Purposes",
      "category": "prohibition",
      "summary": "Defendant and its officers, agents, employees, and attorneys are permanently restrained from disclosing Health Information to Third Parties for Advertising Purposes.",
      "verbatim_text": "(cid:0)((cid:0) IJ(cid:0) KLM(cid:0)EM(cid:0)GINOPEN;FH(cid:0)EQ(cid:0)RHLPSR(cid:0)IMQEFTLSIEM(cid:0)QEF(cid:0)LGUHFSINIMV(cid:0) (cid:0))(cid:0) W;FWENHN(cid:0) (cid:0)& (cid:0) (cid:0) (cid:4)(cid:3)(cid:0)(cid:4)(cid:2)(cid:0)(cid:11)(cid:12)(cid:10)(cid:9)(cid:12)(cid:9)(cid:10)(cid:0).D(cid:19).(cid:25)(cid:0) (cid:0)&&(cid:0) (cid:8)(cid:23)(cid:0) (cid:10)(cid:21)+(cid:21)*-(cid:19)*.(cid:18)(cid:0)(cid:10)(cid:21)+(cid:21)*-(cid:19)*./(cid:20)(cid:0)(cid:22)++3(cid:28)(cid:21),(cid:20)(cid:18)(cid:0)(cid:19)6(cid:21)*.(cid:20)(cid:18)(cid:0)(cid:21)058(cid:22)7(cid:21)(cid:21)(cid:20)(cid:18)(cid:0)(cid:19)*-(cid:0)(cid:19)..(cid:22),*(cid:21)7(cid:20)(cid:0)XD(cid:22)(cid:0),(cid:21)(cid:28)(cid:21)3(cid:29)(cid:21)(cid:0) (cid:0)&(cid:26)(cid:0) (cid:19)(cid:28).1(cid:19)8(cid:0)*(cid:22).3(cid:28)(cid:21)(cid:0)(cid:22)+(cid:0).D3(cid:20)(cid:0)(cid:11),-(cid:21),(cid:18)(cid:0)XD(cid:21).D(cid:21),(cid:0)(cid:19)(cid:28).3*6(cid:0)-3,(cid:21)(cid:28).87(cid:0)(cid:22),(cid:0)3*-3,(cid:21)(cid:28).87(cid:18)(cid:0)(cid:19),(cid:21)(cid:0)5(cid:21),0(cid:19)*(cid:21)*.87(cid:0),(cid:21)(cid:20).,(cid:19)3*(cid:21)-(cid:0)(cid:19)*-(cid:0) (cid:0)&(cid:24)(cid:0) (cid:21)*Y(cid:22)3*(cid:21)-(cid:0)+,(cid:22)0(cid:0)-3(cid:20)(cid:28)8(cid:22)(cid:20)3*6(cid:0)$(cid:21)(cid:19)8.D(cid:0)(cid:4)*+(cid:22),0(cid:19).3(cid:22)*(cid:0).(cid:22)(cid:0)(cid:3)D3,-(cid:0)(cid:5)(cid:19),.3(cid:21)(cid:20)(cid:0)+(cid:22),(cid:0)(cid:8)-(cid:29)(cid:21),.3(cid:20)3*6(cid:0)(cid:5)1,5(cid:22)(cid:20)(cid:21)(cid:20)(cid:23)(cid:0)\n\n(cid:0)&(cid:30)(cid:0) Z(cid:23)(cid:0) (cid:13)(cid:22),(cid:0)51,5(cid:22)(cid:20)(cid:21)(cid:20)(cid:0)(cid:22)+(cid:0).D3(cid:20)(cid:0)(cid:2)(cid:21)(cid:28).3(cid:22)*(cid:18)(cid:0):(cid:8)-(cid:29)(cid:21),.3(cid:20)3*6(cid:0)(cid:5)1,5(cid:22)(cid:20)(cid:21)(cid:20)C(cid:0)0(cid:21)(cid:19)*(cid:20)(cid:0)(cid:19)-(cid:29)(cid:21),.3(cid:20)3*6(cid:18)(cid:0) (cid:0)&’(cid:0) 0(cid:19),[(cid:21).3*6(cid:18)(cid:0)5,(cid:22)0(cid:22).3*6(cid:18)(cid:0)(cid:22)++(cid:21),3*6(cid:18)(cid:0)(cid:22)++(cid:21),3*6(cid:0)+(cid:22),(cid:0)(cid:20)(cid:19)8(cid:21)(cid:18)(cid:0)(cid:22),(cid:0)(cid:20)(cid:21)883*6(cid:0)(cid:19)*7(cid:0)5,(cid:22)-1(cid:28).(cid:20)(cid:0)(cid:22),(cid:0)(cid:20)(cid:21),(cid:29)3(cid:28)(cid:21)(cid:20)(cid:0)(cid:22)*(cid:18)(cid:0)(cid:22),(cid:0) (cid:0)&(cid:31)(cid:0) .D,(cid:22)16D(cid:0)(cid:3)D3,-(cid:0)(cid:5)(cid:19),.7(cid:0)X(cid:21)9(cid:20)3.(cid:21)(cid:20)(cid:18)(cid:0)0(cid:22)938(cid:21)(cid:0)(cid:19)5583(cid:28)(cid:19).3(cid:22)*(cid:20)(cid:18)(cid:0)(cid:22),(cid:0)(cid:20)(cid:21),(cid:29)3(cid:28)(cid:21)(cid:20)(cid:23)(cid:0)(cid:0)(cid:8)-(cid:29)(cid:21),.3(cid:20)3*6(cid:0)(cid:5)1,5(cid:22)(cid:20)(cid:21)(cid:0)(cid:20)D(cid:19)88(cid:0)*(cid:22).(cid:0) (cid:0)&%(cid:0) 3*(cid:28)81-(cid:21)(cid:25)(cid:0)234(cid:0),(cid:21)5(cid:22),.3*6(cid:0)(cid:19)*-(cid:0)(cid:19)*(cid:19)87.3(cid:28)(cid:20)(cid:0),(cid:21)8(cid:19).(cid:21)-(cid:0).(cid:22)(cid:0)1*-(cid:21),(cid:20).(cid:19)*-3*6(cid:0)(cid:19)-(cid:29)(cid:21),.3(cid:20)3*6(cid:0)(cid:19)*-(cid:0)(cid:19)-(cid:29)(cid:21),.3(cid:20)3*6(cid:0) (cid:0)&((cid:0) (cid:21)++(cid:21)(cid:28).3(cid:29)(cid:21)*(cid:21)(cid:20)(cid:20)(cid:18)(cid:0)(cid:20)1(cid:28)D(cid:0)(cid:19)(cid:20)(cid:0)(cid:20).(cid:19).3(cid:20).3(cid:28)(cid:19)8(cid:0),(cid:21)5(cid:22),.3*6(cid:18)(cid:0).,(cid:19)++3(cid:28)(cid:0)(cid:19)*(cid:19)87(cid:20)3(cid:20)(cid:18)(cid:0)1*-(cid:21),(cid:20).(cid:19)*-3*6(cid:0).D(cid:21)(cid:0)*109(cid:21),(cid:0)(cid:22)+(cid:0)(cid:19)*-(cid:0).75(cid:21)(cid:0) (cid:0)&)(cid:0) (cid:22)+(cid:0)(cid:19)-(cid:20)(cid:0)(cid:20)(cid:21),(cid:29)(cid:21)-(cid:18)(cid:0)(cid:22),(cid:0)(cid:28)(cid:22)*(cid:29)(cid:21),(cid:20)3(cid:22)*(cid:0)0(cid:21)(cid:19)(cid:20)1,(cid:21)0(cid:21)*.\\(cid:0)(cid:22),(cid:0)2334(cid:0)(cid:28)(cid:22)001*3(cid:28)(cid:19).3(cid:22)*(cid:20)(cid:18)(cid:0)(cid:20)(cid:21),(cid:29)3(cid:28)(cid:21)(cid:20)(cid:18)(cid:0)(cid:22),(cid:0)5,(cid:22)-1(cid:28).(cid:20)(cid:0) (cid:0)(cid:26) (cid:0) ,(cid:21)]1(cid:21)(cid:20).(cid:21)-(cid:0)97(cid:0)(cid:19)(cid:0)(cid:28)(cid:22)*(cid:20)10(cid:21),(cid:0).D(cid:19).(cid:0)(cid:19),(cid:21)(cid:0)(cid:20)(cid:21)*.(cid:0)(cid:22),(cid:0)5,(cid:22)(cid:29)3-(cid:21)-(cid:0).(cid:22)(cid:0).D(cid:21)(cid:0)(cid:28)(cid:22)*(cid:20)10(cid:21),\\(cid:0)(cid:22),(cid:0)23334(cid:0)(cid:28)(cid:22)*.(cid:21)^.1(cid:19)8(cid:0)(cid:19)-(cid:29)(cid:21),.3(cid:20)3*6(cid:18)(cid:0) (cid:0)(cid:26)&(cid:0) 0(cid:21)(cid:19)*3*6(cid:0)*(cid:22)*_5(cid:21),(cid:20)(cid:22)*(cid:19)83‘(cid:21)-(cid:0)(cid:19)-(cid:29)(cid:21),.3(cid:20)3*6(cid:0)(cid:20)D(cid:22)X*(cid:0)(cid:19)(cid:20)(cid:0)5(cid:19),.(cid:0)(cid:22)+(cid:0)(cid:19)(cid:0)(cid:28)(cid:22)*(cid:20)10(cid:21),/(cid:20)(cid:0)(cid:28)1,,(cid:21)*.(cid:0)3*.(cid:21),(cid:19)(cid:28).3(cid:22)*(cid:0)X3.D(cid:0) (cid:0)(cid:26)(cid:26)(cid:0) (cid:10)(cid:21)+(cid:21)*-(cid:19)*./(cid:20)(cid:0)X(cid:21)9(cid:20)3.(cid:21)(cid:20)(cid:0)(cid:22),(cid:0)0(cid:22)938(cid:21)(cid:0)(cid:19)5583(cid:28)(cid:19).3(cid:22)*(cid:20)(cid:18)(cid:0)5,(cid:22)(cid:29)3-(cid:21)-(cid:0).D(cid:19).(cid:0).D(cid:21)(cid:0)(cid:28)(cid:22)*(cid:20)10(cid:21),/(cid:20)(cid:0)(cid:17)(cid:22)(cid:29)(cid:21),(cid:21)-(cid:0)(cid:4)*+(cid:22),0(cid:19).3(cid:22)*(cid:0) (cid:0)(cid:26)(cid:24)(cid:0) 3(cid:20)(cid:0)*(cid:22).(cid:0)-3(cid:20)(cid:28)8(cid:22)(cid:20)(cid:21)-(cid:0).(cid:22)(cid:0)(cid:19)*(cid:22).D(cid:21),(cid:0)(cid:3)D3,-(cid:0)(cid:5)(cid:19),.7(cid:0)(cid:19)*-(cid:0)3(cid:20)(cid:0)*(cid:22).(cid:0)1(cid:20)(cid:21)-(cid:0).(cid:22)(cid:0)9138-(cid:0)(cid:19)(cid:0)5,(cid:22)+38(cid:21)(cid:0)(cid:19)9(cid:22)1.(cid:0).D(cid:21)(cid:0)(cid:28)(cid:22)*(cid:20)10(cid:21),(cid:0)(cid:22),(cid:0) (cid:0)(cid:26)(cid:30)(cid:0) (cid:22).D(cid:21),X3(cid:20)(cid:21)(cid:0)(cid:19)8.(cid:21),(cid:0).D(cid:21)(cid:0)(cid:28)(cid:22)*(cid:20)10(cid:21),/(cid:20)(cid:0)(cid:21)^5(cid:21),3(cid:21)*(cid:28)(cid:21)(cid:0)(cid:22)1.(cid:20)3-(cid:21)(cid:0).D(cid:21)(cid:0)(cid:28)1,,(cid:21)*.(cid:0)3*.(cid:21),(cid:19)(cid:28).3(cid:22)*(cid:0)X3.D(cid:0)(cid:10)(cid:21)+(cid:21)*-(cid:19)*./(cid:20)(cid:0) (cid:0)(cid:26)’(cid:0) X(cid:21)9(cid:20)3.(cid:21)(cid:20)(cid:0)(cid:22),(cid:0)0(cid:22)938(cid:21)(cid:0)(cid:19)5583(cid:28)(cid:19).3(cid:22)*(cid:23)(cid:0)(cid:0)\n\n(cid:0)(cid:26)(cid:31)(cid:0) (cid:17)(cid:23)(cid:0) (cid:13)(cid:22),(cid:0)51,5(cid:22)(cid:20)(cid:21)(cid:20)(cid:0)(cid:22)+(cid:0).D3(cid:20)(cid:0)(cid:2)(cid:21)(cid:28).3(cid:22)*(cid:18)(cid:0)$(cid:21)(cid:19)8.D(cid:0)(cid:4)*+(cid:22),0(cid:19).3(cid:22)*(cid:0)(cid:20)D(cid:19)88(cid:0)*(cid:22).(cid:0)3*(cid:28)81-(cid:21)(cid:0)2(cid:19)4(cid:0)(cid:19)(cid:0)5D(cid:19),0(cid:19)(cid:28)7(cid:0) (cid:0)(cid:26)%(cid:0) *(cid:19)0(cid:21)(cid:0)2(cid:21)^(cid:28)(cid:21)5.(cid:0)+(cid:22),(cid:0)(cid:19)*7(cid:0)(cid:20)5(cid:21)(cid:28)3(cid:19)8.7(cid:0)(cid:22),(cid:0)(cid:22).D(cid:21),(cid:0)5D(cid:19),0(cid:19)(cid:28)3(cid:21)(cid:20)(cid:0).D(cid:19).(cid:0)5,(cid:22)(cid:29)3-(cid:21)(cid:0)0(cid:21)-3(cid:28)(cid:19).3(cid:22)*(cid:20)(cid:0)(cid:22),(cid:0)(cid:20)(cid:21),(cid:29)3(cid:28)(cid:21)(cid:20)(cid:0).D(cid:19).(cid:0)(cid:19),(cid:21)(cid:0) (cid:0)(cid:26)((cid:0) 83(cid:3)0(cid:4)(cid:5)3.(cid:6)(cid:21)(cid:7)-(cid:8)(cid:0).(cid:22)(cid:3)(cid:9)(cid:0).(cid:10),(cid:21)(cid:0)(cid:19).(cid:12)3*(cid:10)6(cid:9)(cid:0)(cid:12)(cid:19)(cid:0)(cid:0)(cid:20)(cid:13)5(cid:11)(cid:21)(cid:12)(cid:28)(cid:0)3+(cid:9)3(cid:28)(cid:12)(cid:0)(cid:14)D(cid:21)(cid:8)(cid:19)(cid:15)8.(cid:9)D(cid:15)(cid:0)(cid:28)(cid:3)(cid:22)(cid:0)*(cid:15)-(cid:16)3(cid:6).3(cid:15)(cid:22)(cid:17)*(cid:3)4\\(cid:4)(cid:0)(cid:11)(cid:22)(cid:15),(cid:0)294(cid:0)(cid:0)(cid:0)6(cid:0)(cid:0)(cid:0)(cid:21)(cid:0)*(cid:21),(cid:19)8(cid:0)(cid:21)*6(cid:19)6(cid:21)(cid:0)0(cid:21)*.(cid:0)X3.D(cid:0)(cid:22),(cid:0)1(cid:20)(cid:21)(cid:0)(cid:22)+(cid:0) (cid:4)!(cid:4)(cid:7)(cid:0)(cid:9)(cid:15)(cid:8)(cid:7)(cid:3)\"(cid:0)(cid:6)(cid:10)#(cid:14)(cid:9)(cid:15)(cid:3)(cid:0)(cid:8)(cid:15)(cid:10)(cid:0)(cid:3)$(cid:9)(cid:12)(cid:0)(cid:9)(cid:7)(cid:4)(cid:9)(cid:13) (cid:2) (cid:11) (cid:5) (cid:4) (cid:18)(cid:0) (cid:0) (cid:0) (cid:17)(cid:19)(cid:20)(cid:21)(cid:0)(cid:15)(cid:22)(cid:23)(cid:0)(cid:24)(cid:25)(cid:26)(cid:24)(cid:27)(cid:28)(cid:29)(cid:27)(cid:30)(cid:31) (cid:0) (cid:17) (cid:5) (cid:16) (cid:18) (cid:11) (cid:12) (cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0) %(cid:0) (cid:0) (cid:0) QRST(cid:0)UVWXYZ[Y\\\\U]\\Y^_‘(cid:0)(cid:0)(cid:0)^aZbcTde(cid:0)fg(cid:0)(cid:0)(cid:0)hijTk(cid:0)\\WlfmlWX(cid:0)(cid:0)(cid:0)nRoT(cid:0)p(cid:0)aq(cid:0)XX (cid:0) (cid:0)&(cid:0) (cid:10)(cid:21)*(cid:21)+,(cid:19)+-.(cid:20)(cid:0)(cid:20)(cid:21)/(cid:29)0(cid:28)(cid:21)(cid:20)(cid:0)(cid:22)/(cid:0)(cid:28)(cid:22)+-(cid:21)+-(cid:18)(cid:0)(cid:20)1(cid:28)2(cid:0)(cid:19)(cid:20)(cid:0)(cid:19)(cid:28)(cid:28)(cid:21)(cid:20)(cid:20)0+3(cid:0)3(cid:21)+(cid:21)/(cid:19)4(cid:0)5/0(cid:28)0+3(cid:0)0+*(cid:22)/6(cid:19)-0(cid:22)+(cid:18)(cid:0)5/(cid:22)(cid:29)0,(cid:21),(cid:0)-2(cid:19)-(cid:0)",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Prohibition"
      ],
      "case_id": "02.23_goodrx_holdings",
      "company_name": "GoodRx Holdings, Inc.",
      "date_issued": "2023-02-15",
      "year": 2023,
      "administration": "Biden",
      "legal_authority": "Sections 5(a)(1), 5(m)(1)(A), 13(b), 16(a)(1), and 19 of the Federal Trade Commission Act, 15 U.S.C. §§ 45(a)(1), 45(m)(1)(A), 53(b), 56(a)(1), 57b, and the Health Breach Notification Rule, 16 C.F.R. § 318",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/2023090-goodrx-holdings-inc",
      "docket_number": "23-cv-460"
    },
    {
      "provision_number": "II",
      "title": "Prohibition Against Misrepresentations",
      "category": "prohibition",
      "summary": "Defendant must not misrepresent its privacy and data practices, including representations about whether it shares health information with third parties, its compliance with the Digital Advertising Alliance principles, and whether consumers' health information is protected under HIPAA.",
      "verbatim_text": "(cid:0)%(cid:0) >>?(cid:0) @ABC>D>E>BF(cid:0)GHG>FIE(cid:0)J>IAK@AKIKFEGE>BFI(cid:0) (cid:0))(cid:0) (cid:0) (cid:4)(cid:3)(cid:0)(cid:4)(cid:2)(cid:0)(cid:13)(cid:6)(cid:12)(cid:3)$(cid:9)(cid:12)(cid:0)(cid:11)(cid:12)(cid:10)(cid:9)(cid:12)(cid:9)(cid:10)(cid:0)-2(cid:19)-(cid:0)(cid:10)(cid:21)*(cid:21)+,(cid:19)+-(cid:18)(cid:0)(cid:10)(cid:21)*(cid:21)+,(cid:19)+-.(cid:20)(cid:0)(cid:22)**0(cid:28)(cid:21)/(cid:20)(cid:18)(cid:0)(cid:19)3(cid:21)+-(cid:20)(cid:18)(cid:0)(cid:21)654(cid:22)<(cid:21)(cid:21)(cid:20)(cid:18)(cid:0) (cid:0)& (cid:0) (cid:19)+,(cid:0)(cid:19)--(cid:22)/+(cid:21)<(cid:20)(cid:18)(cid:0)(cid:19)+,(cid:0)(cid:19)44(cid:0)(cid:22)-2(cid:21)/(cid:0)5(cid:21)/(cid:20)(cid:22)+(cid:20)(cid:0)0+(cid:0)(cid:19)(cid:28)-0(cid:29)(cid:21)(cid:0)(cid:28)(cid:22)+(cid:28)(cid:21)/-(cid:0)(cid:22)/(cid:0)5(cid:19)/-0(cid:28)05(cid:19)-0(cid:22)+(cid:0)80-2(cid:0)(cid:19)+<(cid:0)(cid:22)*(cid:0)-2(cid:21)6(cid:18)(cid:0)82(cid:22)(cid:0) (cid:0)&&(cid:0) /(cid:21)(cid:28)(cid:21)0(cid:29)(cid:21)(cid:0)(cid:19)(cid:28)-1(cid:19)4(cid:0)+(cid:22)-0(cid:28)(cid:21)(cid:0)(cid:22)*(cid:0)-20(cid:20)(cid:0)(cid:11)/,(cid:21)/(cid:18)(cid:0)82(cid:21)-2(cid:21)/(cid:0)(cid:19)(cid:28)-0+3(cid:0),0/(cid:21)(cid:28)-4<(cid:0)(cid:22)/(cid:0)0+,0/(cid:21)(cid:28)-4<(cid:18)(cid:0)0+(cid:0)(cid:28)(cid:22)++(cid:21)(cid:28)-0(cid:22)+(cid:0)80-2(cid:0) (cid:0)&(cid:26)(cid:0) 5/(cid:22)6(cid:22)-0+3(cid:0)(cid:22)/(cid:0)(cid:22)**(cid:21)/0+3(cid:0)*(cid:22)/(cid:0)(cid:20)(cid:19)4(cid:21)(cid:0)(cid:19)+<(cid:0)5/(cid:22),1(cid:28)-(cid:0)(cid:22)/(cid:0)(cid:20)(cid:21)/(cid:29)0(cid:28)(cid:21)(cid:0)(cid:19)/(cid:21)(cid:0)5(cid:21)/6(cid:19)+(cid:21)+-4<(cid:0)/(cid:21)(cid:20)-/(cid:19)0+(cid:21),(cid:0)(cid:19)+,(cid:0)(cid:21)+L(cid:22)0+(cid:21),(cid:0) (cid:0)&(cid:24)(cid:0) */(cid:22)6(cid:0)60(cid:20)/(cid:21)5/(cid:21)(cid:20)(cid:21)+-0+3(cid:0)(cid:22)/(cid:0)(cid:19)(cid:20)(cid:20)0(cid:20)-0+3(cid:0)(cid:22)-2(cid:21)/(cid:20)(cid:0)0+(cid:0)60(cid:20)/(cid:21)5/(cid:21)(cid:20)(cid:21)+-0+3(cid:18)(cid:0)(cid:21)M5/(cid:21)(cid:20)(cid:20)4<(cid:0)(cid:22)/(cid:0)7<(cid:0)06540(cid:28)(cid:19)-0(cid:22)+(cid:25)(cid:0)(cid:0) (cid:0)&(cid:30)(cid:0) (cid:8)(cid:23)(cid:0) -2(cid:21)(cid:0)51/5(cid:22)(cid:20)(cid:21)(cid:20)(cid:0)*(cid:22)/(cid:0)820(cid:28)2(cid:0)(cid:10)(cid:21)*(cid:21)+,(cid:19)+-(cid:0)(cid:22)/(cid:0)(cid:19)+<(cid:0)(cid:21)+-0-<(cid:0)-(cid:22)(cid:0)82(cid:22)6(cid:0)0-(cid:0),0(cid:20)(cid:28)4(cid:22)(cid:20)(cid:21)(cid:20)(cid:0)(cid:17)(cid:22)(cid:29)(cid:21)/(cid:21),(cid:0) (cid:0)&’(cid:0) (cid:4)+*(cid:22)/6(cid:19)-0(cid:22)+(cid:0)(cid:28)(cid:22)44(cid:21)(cid:28)-(cid:20)(cid:18)(cid:0)6(cid:19)0+-(cid:19)0+(cid:20)(cid:18)(cid:0)1(cid:20)(cid:21)(cid:20)(cid:18)(cid:0)(cid:22)/(cid:0),0(cid:20)(cid:28)4(cid:22)(cid:20)(cid:21)(cid:20)(cid:0)(cid:17)(cid:22)(cid:29)(cid:21)/(cid:21),(cid:0)(cid:4)+*(cid:22)/6(cid:19)-0(cid:22)+N(cid:0)(cid:0) (cid:0)&(cid:31)(cid:0) O(cid:23)(cid:0) -2(cid:21)(cid:0)(cid:21)M-(cid:21)+-(cid:0)-(cid:22)(cid:0)820(cid:28)2(cid:0)(cid:28)(cid:22)+(cid:20)16(cid:21)/(cid:20)(cid:0)6(cid:19)<(cid:0)(cid:21)M(cid:21)/(cid:28)0(cid:20)(cid:21)(cid:0)(cid:28)(cid:22)+-/(cid:22)4(cid:0)(cid:22)(cid:29)(cid:21)/(cid:0)(cid:10)(cid:21)*(cid:21)+,(cid:19)+-.(cid:20)(cid:0)(cid:28)(cid:22)44(cid:21)(cid:28)-0(cid:22)+(cid:18)(cid:0) (cid:0)&((cid:0) 6(cid:19)0+-(cid:21)+(cid:19)+(cid:28)(cid:21)(cid:18)(cid:0)1(cid:20)(cid:21)(cid:18)(cid:0),0(cid:20)(cid:28)4(cid:22)(cid:20)1/(cid:21)(cid:18)(cid:0)(cid:22)/(cid:0)(cid:10)(cid:21)4(cid:21)-0(cid:22)+(cid:0)(cid:22)*(cid:0)(cid:17)(cid:22)(cid:29)(cid:21)/(cid:21),(cid:0)(cid:4)+*(cid:22)/6(cid:19)-0(cid:22)+(cid:18)(cid:0)(cid:19)+,(cid:0)-2(cid:21)(cid:0)(cid:20)-(cid:21)5(cid:20)(cid:0)(cid:19)(cid:0)(cid:28)(cid:22)+(cid:20)16(cid:21)/(cid:0)61(cid:20)-(cid:0) (cid:0)&%(cid:0) -(cid:19);(cid:21)(cid:0)-(cid:22)(cid:0)0654(cid:21)6(cid:21)+-(cid:0)(cid:20)1(cid:28)2(cid:0)(cid:28)(cid:22)+-/(cid:22)4(cid:20)N(cid:0)(cid:0) (cid:0)&)(cid:0) (cid:17)(cid:23)(cid:0) -2(cid:21)(cid:0)(cid:21)M-(cid:21)+-(cid:0)-(cid:22)(cid:0)820(cid:28)2(cid:0)(cid:10)(cid:21)*(cid:21)+,(cid:19)+-(cid:0)0(cid:20)(cid:0)(cid:19)(cid:0)6(cid:21)67(cid:21)/(cid:0)(cid:22)*(cid:18)(cid:0)(cid:19),2(cid:21)/(cid:21)(cid:20)(cid:0)-(cid:22)(cid:18)(cid:0)(cid:28)(cid:22)6540(cid:21)(cid:20)(cid:0)80-2(cid:18)(cid:0)0(cid:20)(cid:0) (cid:0)(cid:26) (cid:0) (cid:28)(cid:21)/-0*0(cid:21),(cid:0)7<(cid:18)(cid:0)0(cid:20)(cid:0)(cid:21)+,(cid:22)/(cid:20)(cid:21),(cid:0)7<(cid:18)(cid:0)(cid:22)/(cid:0)(cid:22)-2(cid:21)/80(cid:20)(cid:21)(cid:0)5(cid:19)/-0(cid:28)05(cid:19)-(cid:21)(cid:20)(cid:0)0+(cid:0)(cid:19)+<(cid:0)5/0(cid:29)(cid:19)(cid:28)<(cid:18)(cid:0)(cid:20)(cid:21)(cid:28)1/0-<(cid:18)(cid:0)(cid:22)/(cid:0)(cid:19)+<(cid:0)(cid:22)-2(cid:21)/(cid:0) (cid:0)(cid:26)&(cid:0) (cid:28)(cid:22)6540(cid:19)+(cid:28)(cid:21)(cid:0)5/(cid:22)3/(cid:19)6(cid:0)(cid:20)5(cid:22)+(cid:20)(cid:22)/(cid:21),(cid:0)7<(cid:0)(cid:19)(cid:0)3(cid:22)(cid:29)(cid:21)/+6(cid:21)+-(cid:0)(cid:22)/(cid:0)(cid:19)+<(cid:0)(cid:20)(cid:21)4*(cid:27)/(cid:21)314(cid:19)-(cid:22)/<(cid:0)(cid:22)/(cid:0)(cid:20)-(cid:19)+,(cid:19)/,(cid:27)(cid:20)(cid:21)--0+3(cid:0) (cid:0)(cid:26)(cid:26)(cid:0) (cid:22)/3(cid:19)+0P(cid:19)-0(cid:22)+(cid:18)(cid:0)0+(cid:28)41,0+3(cid:0)-2(cid:21)(cid:0)(cid:10)030-(cid:19)4(cid:0)(cid:8),(cid:29)(cid:21)/-0(cid:20)0+3(cid:0)(cid:8)440(cid:19)+(cid:28)(cid:21)(cid:18)(cid:0)-2(cid:21)(cid:0)(cid:10)030-(cid:19)4(cid:0)(cid:8),(cid:29)(cid:21)/-0(cid:20)0+3(cid:0)(cid:8)(cid:28)(cid:28)(cid:22)1+-(cid:19)7040-<(cid:0) (cid:0)(cid:26)(cid:24)(cid:0) (cid:5)/(cid:22)3/(cid:19)6(cid:18)(cid:0)(cid:22)/(cid:0)(cid:19)+<(cid:0)(cid:21)+-0-<(cid:0)-2(cid:19)-(cid:0)(cid:28)(cid:21)/-0*0(cid:21)(cid:20)(cid:0)(cid:28)(cid:22)6540(cid:19)+(cid:28)(cid:21)(cid:0)80-2(cid:0)$(cid:4)(cid:5)(cid:8)(cid:8)N(cid:0)(cid:0) (cid:0)(cid:26)(cid:30)(cid:0) (cid:10)(cid:23)(cid:0) -2(cid:21)(cid:0)(cid:21)M-(cid:21)+-(cid:0)-(cid:22)(cid:0)820(cid:28)2(cid:0)(cid:10)(cid:21)*(cid:21)+,(cid:19)+-(cid:0)0(cid:20)(cid:0)(cid:19)(cid:0)$(cid:4)(cid:5)(cid:8)(cid:8)(cid:27)(cid:28)(cid:22)(cid:29)(cid:21)/(cid:21),(cid:0)(cid:21)+-0-<(cid:18)(cid:0)(cid:19)+,(cid:0)-2(cid:21)(cid:0)(cid:21)M-(cid:21)+-(cid:0)-2(cid:19)-(cid:0) (cid:0)(cid:26)’(cid:0) (cid:10)(cid:21)*(cid:21)+,(cid:19)+-.(cid:20)(cid:0)5/0(cid:29)(cid:19)(cid:28)<(cid:0)(cid:19)+,(cid:0)0+*(cid:22)/6(cid:19)-0(cid:22)+(cid:0)5/(cid:19)(cid:28)-0(cid:28)(cid:21)(cid:20)(cid:0)(cid:19)/(cid:21)(cid:0)0+(cid:0)(cid:28)(cid:22)6540(cid:19)+(cid:28)(cid:21)(cid:0)80-2(cid:0)$(cid:4)(cid:5)(cid:8)(cid:8)(cid:0)/(cid:21)=10/(cid:21)6(cid:21)+-(cid:20)N(cid:0)(cid:19)+,(cid:0)(cid:0) (cid:0)(cid:26)(cid:31)(cid:0) (cid:9)(cid:23)(cid:0) -2(cid:21)(cid:0)(cid:21)M-(cid:21)+-(cid:0)-(cid:22)(cid:0)820(cid:28)2(cid:0)(cid:10)(cid:21)*(cid:21)+,(cid:19)+-(cid:0)(cid:28)(cid:22)44(cid:21)(cid:28)-(cid:20)(cid:18)(cid:0)6(cid:19)0+-(cid:19)0+(cid:20)(cid:18)(cid:0)1(cid:20)(cid:21)(cid:20)(cid:18)(cid:0),0(cid:20)(cid:28)4(cid:22)(cid:20)(cid:21)(cid:20)(cid:18)(cid:0)(cid:10)(cid:21)4(cid:21)-(cid:21)(cid:20)(cid:18)(cid:0)(cid:22)/(cid:0) (cid:0)(cid:26)((cid:0) 5(cid:21)/60-(cid:20)(cid:0)(cid:22)/(cid:0),(cid:21)+0(cid:21)(cid:20)(cid:0)(cid:19)(cid:28)(cid:28)(cid:21)(cid:20)(cid:20)(cid:0)-(cid:22)(cid:0)(cid:19)+<(cid:0)(cid:17)(cid:22)(cid:29)(cid:21)/(cid:21),(cid:0)(cid:4)+*(cid:22)/6(cid:19)-0(cid:22)+(cid:18)(cid:0)(cid:22)/(cid:0)-2(cid:21)(cid:0)(cid:21)M-(cid:21)+-(cid:0)-(cid:22)(cid:0)820(cid:28)2(cid:0)(cid:10)(cid:21)*(cid:21)+,(cid:19)+-(cid:0)5/(cid:22)-(cid:21)(cid:28)-(cid:20)(cid:0) (cid:0)(cid:26)%(cid:0) -2(cid:3)(cid:21)(cid:4)(cid:0)(cid:5)(cid:19)(cid:6)(cid:29)(cid:7)(cid:19)(cid:8)04(cid:3)(cid:19)(cid:9)7(cid:10)04(cid:0)0-<(cid:12)(cid:18)(cid:0)(cid:10)(cid:28)(cid:9)(cid:22)(cid:12)+*(cid:0)(cid:13)0,(cid:11)(cid:21)(cid:12)+(cid:0)-0(cid:9)(cid:19)(cid:12)40(cid:14)-<(cid:8)(cid:18)(cid:0)(cid:15)(cid:22)(cid:9)/(cid:0)(cid:15)0+(cid:3)-(cid:0)(cid:21)(cid:15)3/(cid:16)0(cid:6)-<(cid:15)(cid:0)(cid:17)(cid:22)(cid:3)*(cid:0)(cid:4)(cid:19)(cid:11)+(cid:15)<(cid:0)(cid:17)(cid:22)(cid:0)(cid:0)(cid:0)(cid:29)(cid:0)(cid:0)(cid:21)(cid:0)/(cid:21),(cid:0)(cid:4)+*(cid:22)/6(cid:19)(cid:0)-0(cid:22)+(cid:23)(cid:0) (cid:4)!(cid:4)(cid:7)(cid:0)(cid:9)(cid:15)(cid:8)(cid:7)(cid:3)\"(cid:0)(cid:6)(cid:10)#(cid:14)(cid:9)(cid:15)(cid:3)(cid:0)(cid:8)(cid:15)(cid:10)(cid:0)(cid:3)$(cid:9)(cid:12)(cid:0)(cid:9)(cid:7)(cid:4)(cid:9)(cid:13) (cid:2) (cid:11) (cid:5) (cid:4) (cid:18)(cid:0) (cid:0) (cid:0) (cid:17)(cid:19)(cid:20)(cid:21)(cid:0)(cid:15)(cid:22)(cid:23)(cid:0)(cid:24)(cid:25)(cid:26)(cid:24)(cid:27)(cid:28)(cid:29)(cid:27)(cid:30)(cid:31) (cid:0) (cid:17) (cid:5) (cid:16) (cid:18) (cid:11) (cid:12) (cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Prohibition"
      ],
      "case_id": "02.23_goodrx_holdings",
      "company_name": "GoodRx Holdings, Inc.",
      "date_issued": "2023-02-15",
      "year": 2023,
      "administration": "Biden",
      "legal_authority": "Sections 5(a)(1), 5(m)(1)(A), 13(b), 16(a)(1), and 19 of the Federal Trade Commission Act, 15 U.S.C. §§ 45(a)(1), 45(m)(1)(A), 53(b), 56(a)(1), 57b, and the Health Breach Notification Rule, 16 C.F.R. § 318",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/2023090-goodrx-holdings-inc",
      "docket_number": "23-cv-460"
    },
    {
      "provision_number": "III",
      "title": "Prohibition on Disclosures Without Affirmative Express Consent",
      "category": "prohibition",
      "summary": "Defendant must not disclose Health Information or PHR Identifiable Health Information to Third Parties for Non-Advertising Purposes without first obtaining Affirmative Express Consent.",
      "verbatim_text": "%(cid:0) (cid:0) (cid:0) Z[\\](cid:0)^_‘abcdbee^febghi(cid:0)(cid:0)(cid:0)gjckl]mn(cid:0)op(cid:0)(cid:0)(cid:0)qrs]t(cid:0)e‘uovu‘a(cid:0)(cid:0)(cid:0)w[x](cid:0)y(cid:0)jz(cid:0)aa (cid:0) (cid:0)&(cid:0) ***+(cid:0) ,-./*0*1*.2(cid:0)343*251(cid:0)6*578.59-:(cid:0).;(cid:0)/:381/(cid:0)*2;.-<31*.2(cid:0) (cid:0)(cid:26)(cid:0) =*1/.91(cid:0)3;;*-<31*>:(cid:0):?,-:55(cid:0)7.25:21(cid:0)326(cid:0)2.1*7:(cid:0) (cid:0)(cid:24)(cid:0) (cid:0) (cid:4)(cid:3)(cid:0)(cid:4)(cid:2)(cid:0)(cid:13)(cid:6)(cid:12)(cid:3)$(cid:9)(cid:12)(cid:0)(cid:11)(cid:12)(cid:10)(cid:9)(cid:12)(cid:9)(cid:10)(cid:0)@A(cid:19)@(cid:25)(cid:0) (cid:0)(cid:30)(cid:0) (cid:8)(cid:23)(cid:0) (cid:10)(cid:21)B(cid:21)CD(cid:19)C@(cid:18)(cid:0)(cid:10)(cid:21)B(cid:21)CD(cid:19)C@E(cid:20)(cid:0)(cid:22)BBF(cid:28)(cid:21)G(cid:20)(cid:18)(cid:0)(cid:19)H(cid:21)C@(cid:20)(cid:18)(cid:0)(cid:21)IJK(cid:22)L(cid:21)(cid:21)(cid:20)(cid:18)(cid:0)(cid:19)CD(cid:0)(cid:19)@@(cid:22)GC(cid:21)L(cid:20)(cid:18)(cid:0)(cid:19)CD(cid:0)(cid:19)KK(cid:0)(cid:22)@A(cid:21)G(cid:0) (cid:0)’(cid:0) J(cid:21)G(cid:20)(cid:22)C(cid:20)(cid:0)FC(cid:0)(cid:19)(cid:28)@F(cid:29)(cid:21)(cid:0)(cid:28)(cid:22)C(cid:28)(cid:21)G@(cid:0)(cid:22)G(cid:0)J(cid:19)G@F(cid:28)FJ(cid:19)@F(cid:22)C(cid:0)MF@A(cid:0)(cid:19)CL(cid:0)(cid:22)B(cid:0)@A(cid:21)I(cid:0)MA(cid:22)(cid:0)G(cid:21)(cid:28)(cid:21)F(cid:29)(cid:21)(cid:0)(cid:19)(cid:28)@N(cid:19)K(cid:0)C(cid:22)@F(cid:28)(cid:21)(cid:0)(cid:22)B(cid:0)@AF(cid:20)(cid:0) (cid:0)(cid:31)(cid:0) (cid:11)GD(cid:21)G(cid:18)(cid:0)MA(cid:21)@A(cid:21)G(cid:0)(cid:19)(cid:28)@FCH(cid:0)DFG(cid:21)(cid:28)@KL(cid:0)(cid:22)G(cid:0)FCDFG(cid:21)(cid:28)@KL(cid:18)(cid:0)FC(cid:0)(cid:28)(cid:22)CC(cid:21)(cid:28)@F(cid:22)C(cid:0)MF@A(cid:0)@A(cid:21)(cid:0)(cid:20)(cid:19)K(cid:21)(cid:0)(cid:22)B(cid:0)(cid:19)CL(cid:0)JG(cid:22)DN(cid:28)@(cid:0)(cid:22)G(cid:0)(cid:20)(cid:21)G(cid:29)F(cid:28)(cid:21)(cid:18)(cid:0) (cid:0)((cid:0) (cid:19)G(cid:21)(cid:0)J(cid:21)GI(cid:19)C(cid:21)C@KL(cid:0)G(cid:21)(cid:20)@G(cid:19)FC(cid:21)D(cid:0)(cid:19)CD(cid:0)(cid:21)CO(cid:22)FC(cid:21)D(cid:0)BG(cid:22)I(cid:0)DF(cid:20)(cid:28)K(cid:22)(cid:20)FCH(cid:0)$(cid:21)(cid:19)K@A(cid:0)(cid:4)CB(cid:22)GI(cid:19)@F(cid:22)C(cid:0)@(cid:22)(cid:0)(cid:3)AFGD(cid:0)(cid:5)(cid:19)G@F(cid:21)(cid:20)(cid:0)B(cid:22)G(cid:0) (cid:0))(cid:0) (cid:15)(cid:22)C(cid:27)(cid:8)D(cid:29)(cid:21)G@F(cid:20)FCH(cid:0)(cid:5)NGJ(cid:22)(cid:20)(cid:21)(cid:20)(cid:0)MF@A(cid:22)N@(cid:0)BFG(cid:20)@(cid:0)(cid:22)P@(cid:19)FCFCH(cid:0)(cid:8)BBFGI(cid:19)@F(cid:29)(cid:21)(cid:0)(cid:9)QJG(cid:21)(cid:20)(cid:20)(cid:0)(cid:17)(cid:22)C(cid:20)(cid:21)C@(cid:23)(cid:0)(cid:0)(cid:0) (cid:0)%(cid:0) R(cid:23)(cid:0) (cid:13)(cid:22)G(cid:0)JNGJ(cid:22)(cid:20)(cid:21)(cid:20)(cid:0)(cid:22)B(cid:0)@AF(cid:20)(cid:0)(cid:2)(cid:21)(cid:28)@F(cid:22)C(cid:18)(cid:0)(cid:15)(cid:22)C(cid:27)(cid:8)D(cid:29)(cid:21)G@F(cid:20)FCH(cid:0)(cid:5)NGJ(cid:22)(cid:20)(cid:21)(cid:20)(cid:0)I(cid:21)(cid:19)C(cid:20)(cid:0)(cid:19)KK(cid:0)JNGJ(cid:22)(cid:20)(cid:21)(cid:20)(cid:0)(cid:22)@A(cid:21)G(cid:0) (cid:0)& (cid:0) @A(cid:19)C(cid:25)(cid:0)SFT(cid:0)(cid:8)D(cid:29)(cid:21)G@F(cid:20)FCH(cid:0)(cid:5)NGJ(cid:22)(cid:20)(cid:21)(cid:20)(cid:0)(cid:19)(cid:20)(cid:0)D(cid:21)BFC(cid:21)D(cid:0)FC(cid:0)(cid:2)(cid:21)(cid:28)@F(cid:22)C(cid:0)(cid:4)(cid:0)(cid:22)B(cid:0)@AF(cid:20)(cid:0)(cid:11)GD(cid:21)GU(cid:0)SFFT(cid:0)(cid:28)(cid:22)IINCF(cid:28)(cid:19)@F(cid:22)C(cid:20)(cid:18)(cid:0) (cid:0)&&(cid:0) (cid:20)(cid:21)G(cid:29)F(cid:28)(cid:21)(cid:20)(cid:18)(cid:0)(cid:22)G(cid:0)JG(cid:22)DN(cid:28)@(cid:20)(cid:0)G(cid:21)VN(cid:21)(cid:20)@(cid:21)D(cid:0)PL(cid:0)(cid:19)(cid:0)(cid:28)(cid:22)C(cid:20)NI(cid:21)G(cid:0)@A(cid:19)@(cid:0)(cid:19)G(cid:21)(cid:0)(cid:20)(cid:21)C@(cid:0)(cid:22)G(cid:0)JG(cid:22)(cid:29)FD(cid:21)D(cid:0)PL(cid:0)(cid:10)(cid:21)B(cid:21)CD(cid:19)C@(cid:0)DFG(cid:21)(cid:28)@KL(cid:0)@(cid:22)(cid:0) (cid:0)&(cid:26)(cid:0) @A(cid:21)(cid:0)(cid:28)(cid:22)C(cid:20)NI(cid:21)G(cid:18)(cid:0)(cid:20)N(cid:28)A(cid:0)(cid:19)(cid:20)(cid:0)(cid:10)(cid:21)B(cid:21)CD(cid:19)C@(cid:0)@(cid:21)Q@FCH(cid:18)(cid:0)(cid:21)I(cid:19)FKFCH(cid:18)(cid:0)(cid:22)G(cid:0)I(cid:19)FKFCH(cid:0)(cid:19)(cid:0)(cid:28)(cid:22)C(cid:20)NI(cid:21)G(cid:18)(cid:0)(cid:22)G(cid:0)(cid:20)A(cid:22)MFCH(cid:0)(cid:28)(cid:22)C@(cid:21)C@(cid:0) (cid:0)&(cid:24)(cid:0) (cid:22)C(cid:0)(cid:10)(cid:21)B(cid:21)CD(cid:19)C@E(cid:20)(cid:0)(cid:22)MC(cid:0)JG(cid:22)J(cid:21)G@F(cid:21)(cid:20)(cid:0)@(cid:22)(cid:0)(cid:19)(cid:0)(cid:28)(cid:22)C(cid:20)NI(cid:21)GU(cid:0)(cid:19)CD(cid:0)SFFFT(cid:0)(cid:28)(cid:22)C@(cid:21)Q@N(cid:19)K(cid:0)(cid:19)D(cid:29)(cid:21)G@F(cid:20)FCH(cid:18)(cid:0)I(cid:21)(cid:19)CFCH(cid:0)C(cid:22)CW (cid:0)&(cid:30)(cid:0) J(cid:21)G(cid:20)(cid:22)C(cid:19)KFX(cid:21)D(cid:0)(cid:19)D(cid:29)(cid:21)G@F(cid:20)FCH(cid:0)(cid:20)A(cid:22)MC(cid:0)(cid:19)(cid:20)(cid:0)J(cid:19)G@(cid:0)(cid:22)B(cid:0)(cid:19)(cid:0)(cid:28)(cid:22)C(cid:20)NI(cid:21)GE(cid:20)(cid:0)(cid:28)NGG(cid:21)C@(cid:0)FC@(cid:21)G(cid:19)(cid:28)@F(cid:22)C(cid:0)MF@A(cid:0)(cid:10)(cid:21)B(cid:21)CD(cid:19)C@E(cid:20)(cid:0) (cid:0)&’(cid:0) M(cid:21)P(cid:20)F@(cid:21)(cid:20)(cid:0)(cid:22)G(cid:0)I(cid:22)PFK(cid:21)(cid:0)(cid:19)JJKF(cid:28)(cid:19)@F(cid:22)C(cid:20)(cid:18)(cid:0)FC(cid:28)KNDFCH(cid:0)(cid:19)(cid:20)(cid:20)(cid:22)(cid:28)F(cid:19)@(cid:21)D(cid:0)(cid:19)D(cid:0)(cid:20)(cid:21)G(cid:29)FCH(cid:0)(cid:19)CD(cid:0)G(cid:21)(cid:20)J(cid:22)C(cid:20)(cid:21)(cid:0)I(cid:21)(cid:28)A(cid:19)CF(cid:20)I(cid:20)(cid:18)(cid:0) (cid:0)&(cid:31)(cid:0) JG(cid:22)(cid:29)FD(cid:21)D(cid:0)@A(cid:19)@(cid:0)@A(cid:21)(cid:0)(cid:28)(cid:22)C(cid:20)NI(cid:21)GE(cid:20)(cid:0)(cid:17)(cid:22)(cid:29)(cid:21)G(cid:21)D(cid:0)(cid:4)CB(cid:22)GI(cid:19)@F(cid:22)C(cid:0)F(cid:20)(cid:0)C(cid:22)@(cid:0)DF(cid:20)(cid:28)K(cid:22)(cid:20)(cid:21)D(cid:0)@(cid:22)(cid:0)(cid:19)C(cid:22)@A(cid:21)G(cid:0)(cid:3)AFGD(cid:0)(cid:5)(cid:19)G@L(cid:0)(cid:19)CD(cid:0)F(cid:20)(cid:0) (cid:0)&((cid:0) C(cid:22)@(cid:0)N(cid:20)(cid:21)D(cid:0)@(cid:22)(cid:0)PNFKD(cid:0)(cid:19)(cid:0)JG(cid:22)BFK(cid:21)(cid:0)(cid:19)P(cid:22)N@(cid:0)@A(cid:21)(cid:0)(cid:28)(cid:22)C(cid:20)NI(cid:21)G(cid:0)(cid:22)G(cid:0)(cid:22)@A(cid:21)GMF(cid:20)(cid:21)(cid:0)(cid:19)K@(cid:21)G(cid:0)@A(cid:21)(cid:0)(cid:28)(cid:22)C(cid:20)NI(cid:21)GE(cid:20)(cid:0)(cid:21)QJ(cid:21)GF(cid:21)C(cid:28)(cid:21)(cid:0) (cid:0)&)(cid:0) (cid:22)N@(cid:20)FD(cid:21)(cid:0)@A(cid:21)(cid:0)(cid:28)NGG(cid:21)C@(cid:0)FC@(cid:21)G(cid:19)(cid:28)@F(cid:22)C(cid:0)MF@A(cid:0)(cid:10)(cid:21)B(cid:21)CD(cid:19)C@E(cid:20)(cid:0)M(cid:21)P(cid:20)F@(cid:21)(cid:20)(cid:0)(cid:22)G(cid:0)I(cid:22)PFK(cid:21)(cid:0)(cid:19)JJKF(cid:28)(cid:19)@F(cid:22)C(cid:20)(cid:23)(cid:0)(cid:0)(cid:0) (cid:0)&%(cid:0) (cid:17)(cid:23)(cid:0) (cid:13)(cid:22)G(cid:0)JNGJ(cid:22)(cid:20)(cid:21)(cid:20)(cid:0)(cid:22)B(cid:0)@AF(cid:20)(cid:0)(cid:2)(cid:21)(cid:28)@F(cid:22)C(cid:18)(cid:0)$(cid:21)(cid:19)K@A(cid:0)(cid:4)CB(cid:22)GI(cid:19)@F(cid:22)C(cid:0)(cid:20)A(cid:19)KK(cid:0)C(cid:22)@(cid:0)FC(cid:28)KND(cid:21)(cid:0)S(cid:19)T(cid:0)(cid:19)(cid:0)JA(cid:19)GI(cid:19)(cid:28)L(cid:0) (cid:0)(cid:26) (cid:0) C(cid:19)I(cid:21)(cid:0)S(cid:21)Q(cid:28)(cid:21)J@(cid:0)B(cid:22)G(cid:0)(cid:19)CL(cid:0)(cid:20)J(cid:21)(cid:28)F(cid:19)K@L(cid:0)(cid:22)G(cid:0)(cid:22)@A(cid:21)G(cid:0)JA(cid:19)GI(cid:19)(cid:28)F(cid:21)(cid:20)(cid:0)@A(cid:19)@(cid:0)JG(cid:22)(cid:29)FD(cid:21)(cid:0)I(cid:21)DF(cid:28)(cid:19)@F(cid:22)C(cid:20)(cid:0)(cid:22)G(cid:0)(cid:20)(cid:21)G(cid:29)F(cid:28)(cid:21)(cid:20)(cid:0)@A(cid:19)@(cid:0)(cid:19)G(cid:21)(cid:0) (cid:0)(cid:26)&(cid:0) KFIF@(cid:21)D(cid:0)@(cid:22)(cid:0)@G(cid:21)(cid:19)@FCH(cid:0)(cid:19)(cid:0)(cid:20)J(cid:21)(cid:28)FBF(cid:28)(cid:0)A(cid:21)(cid:19)K@A(cid:0)(cid:28)(cid:22)CDF@F(cid:22)CTU(cid:0)(cid:22)G(cid:0)SPT(cid:0)H(cid:21)C(cid:21)G(cid:19)K(cid:0)(cid:21)CH(cid:19)H(cid:21)I(cid:21)C@(cid:0)MF@A(cid:0)(cid:22)G(cid:0)N(cid:20)(cid:21)(cid:0)(cid:22)B(cid:0) (cid:0)(cid:26)(cid:26)(cid:0) (cid:10)(cid:21)B(cid:21)CD(cid:19)C@E(cid:20)(cid:0)(cid:20)(cid:21)G(cid:29)F(cid:28)(cid:21)(cid:20)(cid:0)(cid:22)G(cid:0)(cid:28)(cid:22)C@(cid:21)C@(cid:18)(cid:0)(cid:20)N(cid:28)A(cid:0)(cid:19)(cid:20)(cid:0)(cid:19)(cid:28)(cid:28)(cid:21)(cid:20)(cid:20)FCH(cid:0)H(cid:21)C(cid:21)G(cid:19)K(cid:0)JGF(cid:28)FCH(cid:0)FCB(cid:22)GI(cid:19)@F(cid:22)C(cid:18)(cid:0)JG(cid:22)(cid:29)FD(cid:21)D(cid:0)@A(cid:19)@(cid:0) (cid:0)(cid:26)(cid:24)(cid:0) (cid:20)N(cid:28)A(cid:0)(cid:21)CH(cid:19)H(cid:21)I(cid:21)C@(cid:0)(cid:22)G(cid:0)N(cid:20)(cid:21)(cid:0)D(cid:22)(cid:21)(cid:20)(cid:0)C(cid:22)@(cid:0)G(cid:21)(cid:29)(cid:21)(cid:19)K(cid:0)(cid:19)C(cid:0)FCDF(cid:29)FDN(cid:19)KE(cid:20)(cid:0)(cid:5)(cid:21)G(cid:20)(cid:22)C(cid:19)K(cid:0)(cid:4)CB(cid:22)GI(cid:19)@F(cid:22)C(cid:0)(cid:28)(cid:22)IPFC(cid:21)D(cid:0)MF@A(cid:0)SFT(cid:0) (cid:0)(cid:26)(cid:30)(cid:0) FCB(cid:22)GI(cid:19)@F(cid:22)C(cid:0)(cid:19)P(cid:22)N@(cid:0)(cid:19)(cid:0)I(cid:21)DF(cid:28)(cid:19)@F(cid:22)C(cid:0)(cid:22)G(cid:0)(cid:28)K(cid:19)(cid:20)(cid:20)(cid:0)(cid:22)B(cid:0)I(cid:21)DF(cid:28)(cid:19)@F(cid:22)CS(cid:20)T(cid:0)@A(cid:19)@(cid:0)(cid:19)C(cid:0)FCDF(cid:29)FDN(cid:19)K(cid:0)F(cid:20)(cid:0)JG(cid:21)(cid:20)(cid:28)GFP(cid:21)D(cid:18)(cid:0)A(cid:19)(cid:20)(cid:0) (cid:0)(cid:26)’(cid:0) JNG(cid:28)A(cid:19)(cid:20)(cid:21)D(cid:18)(cid:0)(cid:22)G(cid:0)F(cid:20)(cid:0)@(cid:19)YFCH(cid:0)(cid:20)@(cid:21)J(cid:20)(cid:0)@(cid:22)(cid:0)JNG(cid:28)A(cid:19)(cid:20)(cid:21)(cid:0)(cid:22)G(cid:0)(cid:22)P@(cid:19)FC(cid:0)PL(cid:0)(cid:19)(cid:28)(cid:28)(cid:21)(cid:20)(cid:20)FCH(cid:18)(cid:0)D(cid:22)MCK(cid:22)(cid:19)DFCH(cid:18)(cid:0)(cid:22)G(cid:0)G(cid:21)VN(cid:21)(cid:20)@FCH(cid:0)(cid:19)(cid:0) (cid:0)(cid:26)(cid:31)(cid:0) (cid:28)(cid:22)NJ(cid:22)C(cid:18)(cid:0)(cid:22)G(cid:0)@(cid:19)YFCH(cid:0)(cid:22)@A(cid:21)G(cid:0)(cid:20)@(cid:21)J(cid:20)(cid:0)@(cid:22)(cid:0)JNG(cid:28)A(cid:19)(cid:20)(cid:21)(cid:0)(cid:22)G(cid:0)(cid:22)P@(cid:19)FC(cid:0)(cid:20)N(cid:28)A(cid:0)I(cid:21)DF(cid:28)(cid:19)@F(cid:22)C(cid:0)(cid:22)G(cid:0)(cid:28)K(cid:19)(cid:20)(cid:20)(cid:0)(cid:22)B(cid:0)I(cid:21)DF(cid:28)(cid:19)@F(cid:22)CS(cid:20)T(cid:18)(cid:0)(cid:22)G(cid:0) (cid:0)(cid:26)((cid:0) SFFT(cid:0)FCB(cid:22)GI(cid:19)@F(cid:22)C(cid:0)@A(cid:19)@(cid:0)G(cid:21)(cid:29)(cid:21)(cid:19)K(cid:20)(cid:0)(cid:19)C(cid:0)FCDF(cid:29)FDN(cid:19)KE(cid:20)(cid:0)A(cid:21)(cid:19)K@A(cid:0)(cid:20)@(cid:19)@N(cid:20)(cid:18)(cid:0)(cid:22)G(cid:0)@A(cid:19)@(cid:0)(cid:19)C(cid:0)FCDF(cid:29)FDN(cid:19)K(cid:0)A(cid:19)(cid:20)(cid:0)(cid:22)G(cid:0)F(cid:20)(cid:0)(cid:20)(cid:21)(cid:21)YFCH(cid:0) (cid:0)(cid:26))(cid:0) @G(cid:3)(cid:21)(cid:4)(cid:19)(cid:5)@(cid:6)I(cid:7)(cid:21)(cid:8)C(cid:3)@(cid:0)(cid:9)B(cid:10)(cid:22)G(cid:0)(cid:0)(cid:19)(cid:12)(cid:0)(cid:20)(cid:10)J(cid:9)(cid:21)(cid:12)(cid:28)F(cid:0)(cid:13)BF(cid:11)(cid:28)(cid:12)(cid:0)A(cid:0)(cid:21)(cid:9)(cid:19)K(cid:12)@A(cid:14)(cid:0)(cid:8)(cid:28)(cid:22)(cid:15)C(cid:9)D(cid:15)F(cid:3)@F(cid:0)(cid:22)(cid:15)C(cid:16)(cid:0)(cid:22)(cid:6)G(cid:15)(cid:0)(cid:28)(cid:17)(cid:22)(cid:3)C(cid:4)(cid:11)D(cid:15)F@F(cid:22)C(cid:0)(cid:20)(cid:0)(cid:0)(cid:23)(cid:0)(cid:0)(cid:0)(cid:0) (cid:0) (cid:4)!(cid:4)(cid:7)(cid:0)(cid:9)(cid:15)(cid:8)(cid:7)(cid:3)\"(cid:0)(cid:6)(cid:10)#(cid:14)(cid:9)(cid:15)(cid:3)(cid:0)(cid:8)(cid:15)(cid:10)(cid:0)(cid:3)$(cid:9)(cid:12)(cid:0)(cid:9)(cid:7)(cid:4)(cid:9)(cid:13) (cid:2) (cid:11) (cid:5) (cid:4) (cid:18)(cid:0) (cid:0) (cid:0) (cid:17)(cid:19)(cid:20)(cid:21)(cid:0)(cid:15)(cid:22)(cid:23)(cid:0)(cid:24)(cid:25)(cid:26)(cid:24)(cid:27)(cid:28)(cid:29)(cid:27)(cid:30)(cid:31) (cid:0) (cid:17) (cid:5) (cid:16) (cid:18) (cid:11) (cid:12) (cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0) %(cid:0) (cid:0) (cid:0) UVWX(cid:0)YZ[\\]^_]‘‘Ya‘]bcd(cid:0)(cid:0)(cid:0)be^fgXhi(cid:0)jk(cid:0)(cid:0)(cid:0)lmnXo(cid:0)‘[pjqp[\\(cid:0)(cid:0)(cid:0)rVsX(cid:0)j‘(cid:0)et(cid:0)\\\\ (cid:0) (cid:0)%(cid:0) (cid:10)(cid:23)(cid:0) *+(cid:21),(cid:0)(cid:22)-.(cid:19)/,/,0(cid:0)(cid:8)11/23(cid:19)./(cid:29)(cid:21)(cid:0)(cid:9)452(cid:21)(cid:20)(cid:20)(cid:0)(cid:17)(cid:22),(cid:20)(cid:21),.(cid:0)2(cid:21)67/2(cid:21)8(cid:0)7,8(cid:21)2(cid:0).+/(cid:20)(cid:0)(cid:2)(cid:21)(cid:28)./(cid:22),(cid:18)(cid:0) (cid:0)(cid:26)(cid:0) (cid:10)(cid:21)1(cid:21),8(cid:19),.(cid:0)37(cid:20).(cid:0)52(cid:22)(cid:29)/8(cid:21)(cid:0),(cid:22)./(cid:28)(cid:21)(cid:0)(cid:17)9(cid:21)(cid:19)29:(cid:0)(cid:19),8(cid:0)(cid:17)(cid:22),(cid:20)5/(cid:28)7(cid:22)7(cid:20)9:(cid:0).+(cid:19).(cid:0)(cid:20).(cid:19).(cid:21)(cid:20)(cid:0).+(cid:21)(cid:0)(cid:28)(cid:19).(cid:21)0(cid:22)2/(cid:21)(cid:20)(cid:0)(cid:22)1(cid:0)$(cid:21)(cid:19)9.+(cid:0) (cid:0)(cid:24)(cid:0) (cid:4),1(cid:22)23(cid:19)./(cid:22),(cid:0).+(cid:19).(cid:0);/99(cid:0)-(cid:21)(cid:0)8/(cid:20)(cid:28)9(cid:22)(cid:20)(cid:21)8(cid:0).(cid:22)(cid:0)(cid:3)+/28(cid:0)(cid:5)(cid:19)2./(cid:21)(cid:20)(cid:18)(cid:0).+(cid:21)(cid:0)/8(cid:21),././(cid:21)(cid:20)(cid:0)(cid:0)(cid:22)1(cid:0)(cid:20)7(cid:28)+(cid:0)(cid:3)+/28(cid:0)(cid:5)(cid:19)2./(cid:21)(cid:20)(cid:0)<;+(cid:21)2(cid:21)(cid:0)(cid:19)(cid:0) (cid:0)(cid:30)(cid:0) (cid:28)(cid:22),(cid:20)73(cid:21)2(cid:0)/(cid:20)(cid:0)7(cid:20)/,0(cid:0)(cid:19)(cid:0)5+:(cid:20)/(cid:28)(cid:19)9(cid:18)(cid:0),(cid:22),(cid:27)(cid:21)9(cid:21)(cid:28).2(cid:22),/(cid:28)(cid:0)8/(cid:20)(cid:28)(cid:22)7,.(cid:0)(cid:28)(cid:19)28(cid:18)(cid:0)(cid:10)(cid:21)1(cid:21),8(cid:19),.(cid:0),(cid:21)(cid:21)8(cid:0)(cid:22),9:(cid:0)8/(cid:20)(cid:28)9(cid:22)(cid:20)(cid:21)(cid:0).+(cid:21)(cid:0) (cid:0)&(cid:0) (cid:28)(cid:19).(cid:21)0(cid:22)2:(cid:0)(cid:22)1(cid:0)(cid:20)7(cid:28)+(cid:0)(cid:3)+/28(cid:0)(cid:5)(cid:19)2./(cid:21)(cid:20)=(cid:18)(cid:0)(cid:19),8(cid:0)(cid:19)99(cid:0)5725(cid:22)(cid:20)(cid:21)(cid:20)(cid:0)1(cid:22)2(cid:0)(cid:10)(cid:21)1(cid:21),8(cid:19),.>(cid:20)(cid:0)8/(cid:20)(cid:28)9(cid:22)(cid:20)72(cid:21)(cid:0)(cid:22)1(cid:0)(cid:20)7(cid:28)+(cid:0)$(cid:21)(cid:19)9.+(cid:0) (cid:0)(cid:31)(cid:0) (cid:4),1(cid:22)23(cid:19)./(cid:22),(cid:18)(cid:0)/,(cid:28)978/,0(cid:0)+(cid:22);(cid:0)/.(cid:0)3(cid:19):(cid:0)-(cid:21)(cid:0)7(cid:20)(cid:21)8(cid:0)-:(cid:0)(cid:21)(cid:19)(cid:28)+(cid:0)(cid:3)+/28(cid:0)(cid:5)(cid:19)2.:(cid:23)(cid:0)(cid:0)(cid:0) (cid:0)’(cid:0) (cid:9)(cid:23)(cid:0) (cid:4).(cid:0)(cid:20)+(cid:19)99(cid:0),(cid:22).(cid:0)-(cid:21)(cid:0)(cid:19)(cid:0)(cid:29)/(cid:22)9(cid:19)./(cid:22),(cid:0)(cid:22)1(cid:0).+/(cid:20)(cid:0)(cid:2)(cid:21)(cid:28)./(cid:22),(cid:0)/1(cid:0)(cid:10)(cid:21)1(cid:21),8(cid:19),.(cid:0)8/(cid:20)(cid:28)9(cid:22)(cid:20)(cid:21)(cid:20)(cid:0)$(cid:21)(cid:19)9.+(cid:0) (cid:0)((cid:0) (cid:4),1(cid:22)23(cid:19)./(cid:22),(cid:0).(cid:22)(cid:0)(cid:3)+/28(cid:0)(cid:5)(cid:19)2./(cid:21)(cid:20)(cid:0)1(cid:22)2(cid:0)(cid:15)(cid:22),(cid:27)(cid:8)8(cid:29)(cid:21)2./(cid:20)/,0(cid:0)(cid:5)725(cid:22)(cid:20)(cid:21)(cid:20)(cid:0);/.+(cid:22)7.(cid:0)1/2(cid:20).(cid:0)(cid:22)-.(cid:19)/,/,0(cid:0)(cid:8)11/23(cid:19)./(cid:29)(cid:21)(cid:0) (cid:0))(cid:0) (cid:9)452(cid:21)(cid:20)(cid:20)(cid:0)(cid:17)(cid:22),(cid:20)(cid:21),.(cid:18)(cid:0)/1(cid:0)(cid:10)(cid:21)1(cid:21),8(cid:19),.(cid:0)52(cid:22)(cid:29)(cid:21)(cid:20)(cid:0).+(cid:19).(cid:25)(cid:0)<%=(cid:0).+(cid:21)(cid:0)/,1(cid:22)23(cid:19)./(cid:22),(cid:0)/(cid:20)(cid:0)?52(cid:22).(cid:21)(cid:28).(cid:21)8(cid:0)+(cid:21)(cid:19)9.+(cid:0)/,1(cid:22)23(cid:19)./(cid:22),(cid:18)@(cid:0) (cid:0)% (cid:0) 8(cid:21)1/,(cid:21)8(cid:0)7,8(cid:21)2(cid:0)(cid:30)&(cid:0)(cid:17)(cid:23)(cid:13)(cid:23)(cid:12)(cid:23)(cid:0)(cid:2)(cid:21)(cid:28)./(cid:22),(cid:0)%(cid:31) (cid:23)% (cid:24)(cid:18)(cid:0)(cid:19),8(cid:0)572(cid:20)7(cid:19),.(cid:0).(cid:22)(cid:0).+(cid:21)(cid:0)$(cid:21)(cid:19)9.+(cid:0)(cid:4),(cid:20)72(cid:19),(cid:28)(cid:21)(cid:0)(cid:5)(cid:22)2.(cid:19)-/9/.:(cid:0)(cid:19),8(cid:0) (cid:0)%%(cid:0) (cid:8)(cid:28)(cid:28)(cid:22)7,.(cid:19)-/9/.:(cid:0)(cid:8)(cid:28).(cid:0)(cid:22)1(cid:0)%))(cid:31)(cid:18)(cid:0)(cid:19)(cid:20)(cid:0)(cid:19)3(cid:21),8(cid:21)8(cid:18)(cid:0)/,(cid:28)978/,0(cid:0)-:(cid:0).+(cid:21)(cid:0)$(cid:21)(cid:19)9.+(cid:0)(cid:4),1(cid:22)23(cid:19)./(cid:22),(cid:0)(cid:3)(cid:21)(cid:28)+,(cid:22)9(cid:22)0:(cid:0)1(cid:22)2(cid:0) (cid:0)%(cid:26)(cid:0) (cid:9)(cid:28)(cid:22),(cid:22)3/(cid:28)(cid:0)(cid:19),8(cid:0)(cid:17)9/,/(cid:28)(cid:19)9(cid:0)$(cid:21)(cid:19)9.+(cid:0)(cid:8)(cid:28).(cid:0)<?$(cid:4)(cid:3)(cid:9)(cid:17)$@=(cid:0)<(cid:28)(cid:22)99(cid:21)(cid:28)./(cid:29)(cid:21)9:(cid:18)(cid:0)?$(cid:4)(cid:5)(cid:8)(cid:8)@=A(cid:0)<(cid:26)=(cid:0)(cid:10)(cid:21)1(cid:21),8(cid:19),.(cid:0)3(cid:19)8(cid:21)(cid:0) (cid:0)%(cid:24)(cid:0) (cid:20)7(cid:28)+(cid:0)8/(cid:20)(cid:28)9(cid:22)(cid:20)72(cid:21)(cid:0)/,(cid:0)/.(cid:20)(cid:0)(cid:28)(cid:19)5(cid:19)(cid:28)/.:(cid:0)(cid:19)(cid:20)(cid:0)(cid:19)(cid:0)(cid:28)(cid:22)(cid:29)(cid:21)2(cid:21)8(cid:0)(cid:21),./.:(cid:0)(cid:22)2(cid:0)-7(cid:20)/,(cid:21)(cid:20)(cid:20)(cid:0)(cid:19)(cid:20)(cid:20)(cid:22)(cid:28)/(cid:19).(cid:21)(cid:18)(cid:0)(cid:19)(cid:20)(cid:0)8(cid:21)1/,(cid:21)8(cid:0)7,8(cid:21)2(cid:0)(cid:30)&(cid:0) (cid:0)%(cid:30)(cid:0) (cid:17)(cid:23)(cid:13)(cid:23)(cid:12)(cid:23)(cid:0)(cid:2)(cid:21)(cid:28)./(cid:22),(cid:0)%(cid:31) (cid:23)% (cid:24)A(cid:0)(cid:19),8(cid:0)<(cid:24)=(cid:0)(cid:19),:(cid:0)(cid:20)7(cid:28)+(cid:0)8/(cid:20)(cid:28)9(cid:22)(cid:20)72(cid:21)(cid:0);(cid:19)(cid:20)(cid:0)(cid:21)/.+(cid:21)2(cid:0)2(cid:21)67/2(cid:21)8(cid:0)(cid:22)2(cid:0)5(cid:21)23/..(cid:21)8(cid:0)7,8(cid:21)2(cid:0)(cid:30)&(cid:0) (cid:0)%&(cid:0) (cid:17)(cid:23)(cid:13)(cid:23)(cid:12)(cid:23)(cid:0)(cid:5)(cid:19)2.(cid:0)%(cid:31) (cid:0)(cid:19),8(cid:0)(cid:5)(cid:19)2.(cid:0)%(cid:31)(cid:30)(cid:18)(cid:0)(cid:2)7-5(cid:19)2.(cid:20)(cid:0)(cid:8)(cid:0)(cid:19),8(cid:0)(cid:9)(cid:0)<.+(cid:21)(cid:0)?$(cid:4)(cid:5)(cid:8)(cid:8)(cid:0)(cid:5)2/(cid:29)(cid:19)(cid:28):(cid:0)(cid:12)79(cid:21)@=(cid:23)(cid:0)(cid:0) (cid:0)%(cid:31)(cid:0) BCD(cid:0) EFGHIE(cid:0)JKFGLE(cid:0)MNIBOBLGIBNMP(cid:0)(cid:0) (cid:0)%’(cid:0) (cid:0) (cid:4)(cid:3)(cid:0)(cid:4)(cid:2)(cid:0)(cid:13)(cid:6)(cid:12)(cid:3)$(cid:9)(cid:12)(cid:0)(cid:11)(cid:12)(cid:10)(cid:9)(cid:12)(cid:9)(cid:10)(cid:0).+(cid:19).(cid:25)(cid:0) (cid:0)%((cid:0) (cid:8)(cid:23)(cid:0) (cid:10)(cid:21)1(cid:21),8(cid:19),.(cid:18)(cid:0)1(cid:22)2(cid:0)(cid:19),:(cid:0)(cid:17)(cid:22)(cid:29)(cid:21)2(cid:21)8(cid:0)Q7(cid:20)/,(cid:21)(cid:20)(cid:20)(cid:18)(cid:0)1(cid:22)99(cid:22);/,0(cid:0).+(cid:21)(cid:0)8/(cid:20)(cid:28)(cid:22)(cid:29)(cid:21)2:(cid:0)(cid:22)1(cid:0)(cid:19)(cid:0)Q2(cid:21)(cid:19)(cid:28)+(cid:0)(cid:22)1(cid:0) (cid:0)%)(cid:0) (cid:2)(cid:21)(cid:28)72/.:(cid:0)(cid:22)1(cid:0)(cid:6),(cid:20)(cid:21)(cid:28)72(cid:21)8(cid:0)(cid:5)$(cid:12)(cid:0)(cid:4)8(cid:21),./1/(cid:19)-9(cid:21)(cid:0)$(cid:21)(cid:19)9.+(cid:0)(cid:4),1(cid:22)23(cid:19)./(cid:22),(cid:0).+(cid:19).(cid:0)/(cid:20)(cid:0)/,(cid:0)(cid:19)(cid:0)(cid:5)(cid:21)2(cid:20)(cid:22),(cid:19)9(cid:0)$(cid:21)(cid:19)9.+(cid:0)(cid:12)(cid:21)(cid:28)(cid:22)28(cid:0) (cid:0)(cid:26) (cid:0) 3(cid:19)/,.(cid:19)/,(cid:21)8(cid:0)(cid:22)2(cid:0)(cid:22)11(cid:21)2(cid:21)8(cid:0)-:(cid:0)(cid:10)(cid:21)1(cid:21),8(cid:19),.(cid:0)</,(cid:28)978/,0(cid:18)(cid:0)-7.(cid:0),(cid:22).(cid:0)9/3/.(cid:21)8(cid:0).(cid:22)(cid:18)(cid:0).+(cid:21)(cid:0)#(cid:22)(cid:22)8(cid:12)4(cid:18)(cid:0)#(cid:22)(cid:22)8(cid:12)4(cid:0)#(cid:22)98(cid:18)(cid:0) (cid:0)(cid:26)%(cid:0) #(cid:22)(cid:22)8(cid:12)4(cid:0)(cid:17)(cid:19)2(cid:21)(cid:18)(cid:0)(cid:19),8R(cid:22)2(cid:0)$(cid:21):(cid:10)(cid:22)(cid:28).(cid:22)2(cid:0);(cid:21)-(cid:20)/.(cid:21)(cid:20)(cid:0)(cid:22)2(cid:0)3(cid:22)-/9(cid:21)(cid:0)(cid:19)559/(cid:28)(cid:19)./(cid:22),(cid:20)=(cid:18)(cid:0)(cid:20)+(cid:19)99(cid:25)(cid:0) (cid:0)(cid:26)(cid:26)(cid:0) %(cid:23)(cid:0) ,(cid:22)./1:(cid:0)(cid:21)(cid:19)(cid:28)+(cid:0)/,8/(cid:29)/87(cid:19)9(cid:0);+(cid:22)(cid:0)/(cid:20)(cid:0)(cid:19)(cid:0)(cid:28)/./S(cid:21),(cid:0)(cid:22)2(cid:0)2(cid:21)(cid:20)/8(cid:21),.(cid:0)(cid:22)1(cid:0).+(cid:21)(cid:0)(cid:6),/.(cid:21)8(cid:0)(cid:2).(cid:19).(cid:21)(cid:20)(cid:0);+(cid:22)(cid:20)(cid:21)(cid:0) (cid:0)(cid:26)(cid:24)(cid:0) (cid:6),(cid:20)(cid:21)(cid:28)72(cid:21)8(cid:0)(cid:5)$(cid:12)(cid:0)(cid:4)8(cid:21),./1/(cid:19)-9(cid:21)(cid:0)$(cid:21)(cid:19)9.+(cid:0)(cid:4),1(cid:22)23(cid:19)./(cid:22),(cid:0);(cid:19)(cid:20)(cid:0)(cid:19)(cid:28)67/2(cid:21)8(cid:0)-:(cid:0)(cid:19),(cid:0)7,(cid:19)7.+(cid:22)2/S(cid:21)8(cid:0)5(cid:21)2(cid:20)(cid:22),(cid:0)(cid:19)(cid:20)(cid:0)(cid:19)(cid:0) (cid:0)(cid:26)(cid:30)(cid:0) 2(cid:21)(cid:20)79.(cid:0)(cid:22)1(cid:0)(cid:20)7(cid:28)+(cid:0)Q2(cid:21)(cid:19)(cid:28)+(cid:0)(cid:22)1(cid:0)(cid:2)(cid:21)(cid:28)72/.:A(cid:0) (cid:0)(cid:26)&(cid:0) (cid:26)(cid:23)(cid:0) ,(cid:22)./1:(cid:0).+(cid:21)(cid:0)(cid:13)(cid:21)8(cid:21)2(cid:19)9(cid:0)(cid:3)2(cid:19)8(cid:21)(cid:0)(cid:17)(cid:22)33/(cid:20)(cid:20)/(cid:22),(cid:18)(cid:0)/,(cid:0)(cid:19)(cid:28)(cid:28)(cid:22)28(cid:19),(cid:28)(cid:21)(cid:0);/.+(cid:0)(cid:2)7-(cid:20)(cid:21)(cid:28)./(cid:22),(cid:0)(cid:4)!<(cid:9)=(cid:0) (cid:0)(cid:26)(cid:31)(cid:0) -(cid:21)9(cid:22);A(cid:0)(cid:22)2(cid:0) (cid:0)(cid:26)’(cid:0) (cid:24)(cid:23)(cid:0) ,(cid:22)./1:(cid:0)52(cid:22)3/,(cid:21),.(cid:0)3(cid:21)8/(cid:19)(cid:0)(cid:22)7.9(cid:21).(cid:20)(cid:0)/,(cid:0)(cid:19)(cid:0)(cid:20).(cid:19).(cid:21)(cid:0)(cid:22)2(cid:0)T72/(cid:20)8/(cid:28)./(cid:22),(cid:18)(cid:0)/1(cid:0).+(cid:21)(cid:0)(cid:6),(cid:20)(cid:21)(cid:28)72(cid:21)8(cid:0)(cid:5)$(cid:12)(cid:0) (cid:0)(cid:26)((cid:0)",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Prohibition"
      ],
      "case_id": "02.23_goodrx_holdings",
      "company_name": "GoodRx Holdings, Inc.",
      "date_issued": "2023-02-15",
      "year": 2023,
      "administration": "Biden",
      "legal_authority": "Sections 5(a)(1), 5(m)(1)(A), 13(b), 16(a)(1), and 19 of the Federal Trade Commission Act, 15 U.S.C. §§ 45(a)(1), 45(m)(1)(A), 53(b), 56(a)(1), 57b, and the Health Breach Notification Rule, 16 C.F.R. § 318",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/2023090-goodrx-holdings-inc",
      "docket_number": "23-cv-460"
    },
    {
      "provision_number": "IV",
      "title": "Breach Notification and Notice Requirements",
      "category": "affirmative_obligation",
      "summary": "Defendant must notify affected users, the FTC, and media outlets of any Covered Incident within specified timeframes and provide required notice content, and must delete noted information upon request.",
      "verbatim_text": "(cid:4)8(cid:3)(cid:21)(cid:4),(cid:5)(cid:6)./(cid:7)1/(cid:8)(cid:19)(cid:3)-(cid:9)9(cid:21)(cid:10)(cid:0)$(cid:0)(cid:21)(cid:12)(cid:19)(cid:10)9.(cid:9)+(cid:12)(cid:0)(cid:4)(cid:0),(cid:13)(cid:11)1(cid:22)(cid:12)2(cid:0)3(cid:9)(cid:19)(cid:12)./(cid:14)(cid:22),(cid:8)(cid:0)(cid:15)(cid:22)(cid:9)1(cid:0)(cid:15)1/(cid:3)(cid:29)(cid:0)(cid:21)(cid:15)(cid:0)+(cid:16)7(cid:6),(cid:15)8(cid:17)2(cid:3)(cid:21)(cid:4)8(cid:11)(cid:0)<(cid:15)& (cid:0)=(cid:0)(cid:0)(cid:0)(cid:0)(cid:22)(cid:0)(cid:0)2(cid:0)3(cid:22)2(cid:21)(cid:0)2(cid:21)(cid:20)/8(cid:21)(cid:0),.(cid:20)(cid:0)(cid:22)1(cid:0)(cid:20)7(cid:28)+(cid:0)(cid:20).(cid:19).(cid:21)(cid:0)(cid:22)2(cid:0) (cid:4)!(cid:4)(cid:7)(cid:0)(cid:9)(cid:15)(cid:8)(cid:7)(cid:3)\"(cid:0)(cid:6)(cid:10)#(cid:14)(cid:9)(cid:15)(cid:3)(cid:0)(cid:8)(cid:15)(cid:10)(cid:0)(cid:3)$(cid:9)(cid:12)(cid:0)(cid:9)(cid:7)(cid:4)(cid:9)(cid:13) (cid:2) (cid:11) (cid:5) (cid:4) (cid:18)(cid:0) (cid:0) (cid:0) (cid:17)(cid:19)(cid:20)(cid:21)(cid:0)(cid:15)(cid:22)(cid:23)(cid:0)(cid:24)(cid:25)(cid:26)(cid:24)(cid:27)(cid:28)(cid:29)(cid:27)(cid:30)(cid:31) (cid:0) (cid:17) (cid:5) (cid:16) (cid:18) (cid:11) (cid:12) (cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0) % (cid:0) (cid:0) (cid:0) BCDE(cid:0)FGHIJKLJMMFNMJOPQ(cid:0)(cid:0)(cid:0)ORKSTEUV(cid:0)WX(cid:0)(cid:0)(cid:0)YZ[E\\(cid:0)MH]W^]HI(cid:0)(cid:0)(cid:0)_C‘E(cid:0)WW(cid:0)Ra(cid:0)II (cid:0) (cid:0)%(cid:0) *+,-(cid:20).-(cid:28)/-(cid:22)0(cid:0)-(cid:20)(cid:18)(cid:0)(cid:22),(cid:0)-(cid:20)(cid:0),(cid:21)(cid:19)(cid:20)(cid:22)0(cid:19)123(cid:0)1(cid:21)2-(cid:21)(cid:29)(cid:21).(cid:0)/(cid:22)(cid:0)4(cid:19)(cid:29)(cid:21)(cid:0)1(cid:21)(cid:21)0(cid:18)(cid:0)(cid:19)(cid:28)5+-,(cid:21).(cid:0).+,-06(cid:0)(cid:20)+(cid:28)4(cid:0)7,(cid:21)(cid:19)(cid:28)4(cid:0)(cid:22)8(cid:0)(cid:2)(cid:21)(cid:28)+,-/3(cid:23)(cid:0)(cid:0)(cid:0) (cid:0)(cid:26)(cid:0) 7(cid:23)(cid:0) (cid:13)(cid:22),(cid:0)/4(cid:21)(cid:0)9+,9(cid:22)(cid:20)(cid:21)(cid:20)(cid:0)(cid:22)8(cid:0)/4-(cid:20)(cid:0)(cid:2)(cid:21)(cid:28)/-(cid:22)0(cid:18)(cid:0)(cid:19)(cid:0)7,(cid:21)(cid:19)(cid:28)4(cid:0)(cid:22)8(cid:0)(cid:2)(cid:21)(cid:28)+,-/3(cid:0)(cid:20)4(cid:19)22(cid:0)1(cid:21)(cid:0)/,(cid:21)(cid:19)/(cid:21).(cid:0)(cid:19)(cid:20)(cid:0) (cid:0)(cid:24)(cid:0) .-(cid:20)(cid:28)(cid:22)(cid:29)(cid:21),(cid:21).(cid:0)(cid:19)(cid:20)(cid:0)(cid:22)8(cid:0)/4(cid:21)(cid:0)8-,(cid:20)/(cid:0).(cid:19)3(cid:0)(cid:22)0(cid:0):4-(cid:28)4(cid:0)(cid:20)+(cid:28)4(cid:0)1,(cid:21)(cid:19)(cid:28)4(cid:0)-(cid:20)(cid:0);0(cid:22):0(cid:0)(cid:22),(cid:0),(cid:21)(cid:19)(cid:20)(cid:22)0(cid:19)123(cid:0)(cid:20)4(cid:22)+2.(cid:0)4(cid:19)(cid:29)(cid:21)(cid:0)1(cid:21)(cid:21)0(cid:0) (cid:0)(cid:30)(cid:0) ;0(cid:22):0(cid:0)/(cid:22)(cid:0)(cid:10)(cid:21)8(cid:21)0.(cid:19)0/(cid:23)(cid:0)(cid:0)(cid:10)(cid:21)8(cid:21)0.(cid:19)0/(cid:0)(cid:20)4(cid:19)22(cid:0)1(cid:21)(cid:0).(cid:21)(cid:21)<(cid:21).(cid:0)/(cid:22)(cid:0)4(cid:19)(cid:29)(cid:21)(cid:0);0(cid:22):2(cid:21).6(cid:21)(cid:0)(cid:22)8(cid:0)(cid:19)(cid:0)7,(cid:21)(cid:19)(cid:28)4(cid:0)(cid:22)8(cid:0)(cid:2)(cid:21)(cid:28)+,-/3(cid:0)-8(cid:0) (cid:0)&(cid:0) (cid:20)+(cid:28)4(cid:0)1,(cid:21)(cid:19)(cid:28)4(cid:0)-(cid:20)(cid:0);0(cid:22):0(cid:18)(cid:0)(cid:22),(cid:0),(cid:21)(cid:19)(cid:20)(cid:22)0(cid:19)123(cid:0)(cid:20)4(cid:22)+2.(cid:0)4(cid:19)(cid:29)(cid:21)(cid:0)1(cid:21)(cid:21)0(cid:0);0(cid:22):0(cid:18)(cid:0)/(cid:22)(cid:0)(cid:19)03(cid:0)9(cid:21),(cid:20)(cid:22)0(cid:18)(cid:0)(cid:22)/4(cid:21),(cid:0)/4(cid:19)0(cid:0)/4(cid:21)(cid:0) (cid:0)(cid:31)(cid:0) 9(cid:21),(cid:20)(cid:22)0(cid:0)(cid:28)(cid:22)<<-//-06(cid:0)/4(cid:21)(cid:0)1,(cid:21)(cid:19)(cid:28)4(cid:18)(cid:0):4(cid:22)(cid:0)-(cid:20)(cid:0)(cid:19)0(cid:0)(cid:21)<92(cid:22)3(cid:21)(cid:21)(cid:18)(cid:0)(cid:22)88-(cid:28)(cid:21),(cid:18)(cid:0)(cid:22),(cid:0)(cid:22)/4(cid:21),(cid:0)(cid:19)6(cid:21)0/(cid:0)(cid:22)8(cid:0)(cid:10)(cid:21)8(cid:21)0.(cid:19)0/(cid:23)(cid:0)(cid:0) (cid:0)’(cid:0) (cid:17)(cid:23)(cid:0) (cid:9)=(cid:28)(cid:21)9/(cid:0)(cid:19)(cid:20)(cid:0)(cid:22)/4(cid:21),:-(cid:20)(cid:21)(cid:0)9,(cid:22)(cid:29)-.(cid:21).(cid:18)(cid:0)(cid:19)22(cid:0)0(cid:22)/-8-(cid:28)(cid:19)/-(cid:22)0(cid:20)(cid:0)/(cid:22)(cid:0)-0.-(cid:29)-.+(cid:19)2(cid:20)(cid:0)(cid:22),(cid:0)/4(cid:21)(cid:0)<(cid:21).-(cid:19)(cid:0) (cid:0)((cid:0) ,(cid:21)5+-,(cid:21).(cid:0)+0.(cid:21),(cid:0)/4-(cid:20)(cid:0)(cid:2)(cid:21)(cid:28)/-(cid:22)0(cid:0)(cid:20)4(cid:19)22(cid:0)1(cid:21)(cid:0)(cid:20)(cid:21)0/(cid:0):-/4(cid:22)+/(cid:0)+0,(cid:21)(cid:19)(cid:20)(cid:22)0(cid:19)12(cid:21)(cid:0).(cid:21)2(cid:19)3(cid:0)(cid:19)0.(cid:0)-0(cid:0)0(cid:22)(cid:0)(cid:28)(cid:19)(cid:20)(cid:21)(cid:0)2(cid:19)/(cid:21),(cid:0)/4(cid:19)0(cid:0) (cid:0))(cid:0) (cid:20)-=/3(cid:0)>(cid:31) ?(cid:0)(cid:28)(cid:19)2(cid:21)0.(cid:19),(cid:0).(cid:19)3(cid:20)(cid:0)(cid:19)8/(cid:21),(cid:0)/4(cid:21)(cid:0).-(cid:20)(cid:28)(cid:22)(cid:29)(cid:21),3(cid:0)(cid:22)8(cid:0)/4(cid:21)(cid:0)7,(cid:21)(cid:19)(cid:28)4(cid:0)(cid:22)8(cid:0)(cid:2)(cid:21)(cid:28)+,-/3(cid:23)(cid:0)(cid:0)(cid:4)8(cid:0)(cid:19)(cid:0)2(cid:19):(cid:0)(cid:21)08(cid:22),(cid:28)(cid:21)<(cid:21)0/(cid:0) (cid:0)% (cid:0) (cid:22)88-(cid:28)-(cid:19)2(cid:0).(cid:21)/(cid:21),<-0(cid:21)(cid:20)(cid:0)/4(cid:19)/(cid:0)(cid:19)(cid:0)0(cid:22)/-8-(cid:28)(cid:19)/-(cid:22)0(cid:18)(cid:0)0(cid:22)/-(cid:28)(cid:21)(cid:18)(cid:0)(cid:22),(cid:0)9(cid:22)(cid:20)/-06(cid:0),(cid:21)5+-,(cid:21).(cid:0)+0.(cid:21),(cid:0)/4-(cid:20)(cid:0)(cid:2)(cid:21)(cid:28)/-(cid:22)0(cid:0):(cid:22)+2.(cid:0) (cid:0)%%(cid:0) -<9(cid:21).(cid:21)(cid:0)(cid:19)(cid:0)(cid:28),-<-0(cid:19)2(cid:0)-0(cid:29)(cid:21)(cid:20)/-6(cid:19)/-(cid:22)0(cid:0)(cid:22),(cid:0)(cid:28)(cid:19)+(cid:20)(cid:21)(cid:0).(cid:19)<(cid:19)6(cid:21)(cid:0)/(cid:22)(cid:0)0(cid:19)/-(cid:22)0(cid:19)2(cid:0)(cid:20)(cid:21)(cid:28)+,-/3(cid:18)(cid:0)(cid:20)+(cid:28)4(cid:0)0(cid:22)/-8-(cid:28)(cid:19)/-(cid:22)0(cid:18)(cid:0)0(cid:22)/-(cid:28)(cid:21)(cid:18)(cid:0)(cid:22),(cid:0) (cid:0)%(cid:26)(cid:0) 9(cid:22)(cid:20)/-06(cid:0)(cid:20)4(cid:19)22(cid:0)1(cid:21)(cid:0).(cid:21)2(cid:19)3(cid:21).(cid:23)(cid:0)(cid:0)(cid:3)4-(cid:20)(cid:0)(cid:2)+1(cid:20)(cid:21)(cid:28)/-(cid:22)0(cid:0)(cid:20)4(cid:19)22(cid:0)1(cid:21)(cid:0)-<92(cid:21)<(cid:21)0/(cid:21).(cid:0)-0(cid:0)/4(cid:21)(cid:0)(cid:20)(cid:19)<(cid:21)(cid:0)<(cid:19)00(cid:21),(cid:0)(cid:19)(cid:20)(cid:0)9,(cid:22)(cid:29)-.(cid:21).(cid:0) (cid:0)%(cid:24)(cid:0) +0.(cid:21),(cid:0)(cid:30)&(cid:0)(cid:17)(cid:23)(cid:13)(cid:23)(cid:12)(cid:23)(cid:0)(cid:2)(cid:21)(cid:28)/-(cid:22)0(cid:0)%(cid:31)(cid:30)(cid:23)&(cid:26)(>(cid:19)?>(cid:26)?(cid:18)(cid:0)-0(cid:0)/4(cid:21)(cid:0)(cid:28)(cid:19)(cid:20)(cid:21)(cid:0)(cid:22)8(cid:0)(cid:19)(cid:0).-(cid:20)(cid:28)2(cid:22)(cid:20)+,(cid:21)(cid:0)(cid:28)(cid:22)(cid:29)(cid:21),(cid:21).(cid:0)+0.(cid:21),(cid:0)(cid:20)+(cid:28)4(cid:0)(cid:20)(cid:21)(cid:28)/-(cid:22)0(cid:23)(cid:0) (cid:0)%(cid:30)(cid:0) (cid:10)(cid:23)(cid:0) (cid:4)8(cid:0)(cid:10)(cid:21)8(cid:21)0.(cid:19)0/(cid:0)9,(cid:22)(cid:29)-.(cid:21)(cid:20)(cid:0)0(cid:22)/-(cid:28)(cid:21)(cid:0)+0.(cid:21),(cid:0)(cid:2)+1(cid:20)(cid:21)(cid:28)/-(cid:22)0(cid:0)(cid:4)!>(cid:8)?>%?(cid:18)(cid:0)-/(cid:0)(cid:20)4(cid:19)22(cid:0).(cid:22)(cid:0)(cid:20)(cid:22)(cid:0)13(cid:0) (cid:0)%&(cid:0) 9,(cid:22)(cid:29)-.-06(cid:0)-/(cid:0)-0(cid:0)/4(cid:21)(cid:0)8(cid:22)22(cid:22):-06(cid:0)8(cid:22),<(cid:25)(cid:0) (cid:0)%(cid:31)(cid:0) %(cid:23)(cid:0) @,-//(cid:21)0(cid:0)0(cid:22)/-(cid:28)(cid:21)(cid:18)(cid:0)13(cid:0)8-,(cid:20)/(cid:27)(cid:28)2(cid:19)(cid:20)(cid:20)(cid:0)<(cid:19)-2(cid:0)/(cid:22)(cid:0)/4(cid:21)(cid:0)-0.-(cid:29)-.+(cid:19)2(cid:0)(cid:19)/(cid:0)/4(cid:21)(cid:0)2(cid:19)(cid:20)/(cid:0);0(cid:22):0(cid:0)(cid:19)..,(cid:21)(cid:20)(cid:20)(cid:0)(cid:22)8(cid:0) (cid:0)%’(cid:0) /4(cid:21)(cid:0)-0.-(cid:29)-.+(cid:19)2(cid:18)(cid:0)(cid:22),(cid:0)13(cid:0)(cid:21)<(cid:19)-2(cid:0)(cid:22),(cid:0):-/4-0(cid:27)(cid:19)992-(cid:28)(cid:19)/-(cid:22)0(cid:0)<(cid:21)(cid:20)(cid:20)(cid:19)6-06(cid:18)(cid:0)-8(cid:0)/4(cid:21)(cid:0)-0.-(cid:29)-.+(cid:19)2(cid:0)-(cid:20)(cid:0)6-(cid:29)(cid:21)0(cid:0)(cid:19)(cid:0)(cid:28)2(cid:21)(cid:19),(cid:18)(cid:0) (cid:0)%((cid:0) (cid:28)(cid:22)0(cid:20)9-(cid:28)+(cid:22)+(cid:20)(cid:18)(cid:0)(cid:19)0.(cid:0),(cid:21)(cid:19)(cid:20)(cid:22)0(cid:19)12(cid:21)(cid:0)(cid:22)99(cid:22),/+0-/3(cid:0)/(cid:22)(cid:0),(cid:21)(cid:28)(cid:21)-(cid:29)(cid:21)(cid:0)0(cid:22)/-8-(cid:28)(cid:19)/-(cid:22)0(cid:0)13(cid:0)8-,(cid:20)/(cid:27)(cid:28)2(cid:19)(cid:20)(cid:20)(cid:0)<(cid:19)-2(cid:18)(cid:0)(cid:19)0.(cid:0)/4(cid:21)(cid:0) (cid:0)%)(cid:0) -0.-(cid:29)-.+(cid:19)2(cid:0).(cid:22)(cid:21)(cid:20)(cid:0)0(cid:22)/(cid:0)(cid:21)=(cid:21),(cid:28)-(cid:20)(cid:21)(cid:0)/4(cid:19)/(cid:0)(cid:28)4(cid:22)-(cid:28)(cid:21)(cid:23)(cid:0)(cid:0)(cid:4)8(cid:0)/4(cid:21)(cid:0)-0.-(cid:29)-.+(cid:19)2(cid:0)-(cid:20)(cid:0).(cid:21)(cid:28)(cid:21)(cid:19)(cid:20)(cid:21).(cid:18)(cid:0)(cid:10)(cid:21)8(cid:21)0.(cid:19)0/(cid:0)<+(cid:20)/(cid:0)9,(cid:22)(cid:29)-.(cid:21)(cid:0) (cid:0)(cid:26) (cid:0) (cid:20)+(cid:28)4(cid:0)0(cid:22)/-(cid:28)(cid:21)(cid:0)/(cid:22)(cid:0)/4(cid:21)(cid:0)0(cid:21)=/(cid:0)(cid:22)8(cid:0);-0(cid:0)(cid:22)8(cid:0)/4(cid:21)(cid:0)-0.-(cid:29)-.+(cid:19)2(cid:0)-8(cid:0)/4(cid:21)(cid:0)-0.-(cid:29)-.+(cid:19)2(cid:0)4(cid:19).(cid:0)9,(cid:22)(cid:29)-.(cid:21).(cid:0)(cid:28)(cid:22)0/(cid:19)(cid:28)/(cid:0)-08(cid:22),<(cid:19)/-(cid:22)0(cid:0) (cid:0)(cid:26)%(cid:0) 8(cid:22),(cid:0)4-(cid:20)(cid:0)(cid:22),(cid:0)4(cid:21),(cid:0)0(cid:21)=/(cid:0)(cid:22)8(cid:0);-0(cid:18)(cid:0)(cid:19)2(cid:22)06(cid:0):-/4(cid:0)(cid:19)+/4(cid:22),-A(cid:19)/-(cid:22)0(cid:0)/(cid:22)(cid:0)(cid:28)(cid:22)0/(cid:19)(cid:28)/(cid:0)/4(cid:21)<(cid:23)(cid:0)(cid:0)(cid:3)4(cid:21)(cid:0)0(cid:22)/-(cid:28)(cid:21)(cid:0)<(cid:19)3(cid:0)1(cid:21)(cid:0)9,(cid:22)(cid:29)-.(cid:21).(cid:0) (cid:0)(cid:26)(cid:26)(cid:0) -0(cid:0)(cid:22)0(cid:21)(cid:0)(cid:22),(cid:0)<(cid:22),(cid:21)(cid:0)<(cid:19)-2-06(cid:20)(cid:0)(cid:19)(cid:20)(cid:0)-08(cid:22),<(cid:19)/-(cid:22)0(cid:0)-(cid:20)(cid:0)(cid:19)(cid:29)(cid:19)-2(cid:19)12(cid:21)(cid:23)(cid:0)(cid:0)(cid:0) (cid:0)(cid:26)(cid:24)(cid:0) (cid:26)(cid:23)(cid:0) (cid:4)8(cid:18)(cid:0)(cid:19)8/(cid:21),(cid:0)<(cid:19);-06(cid:0),(cid:21)(cid:19)(cid:20)(cid:22)0(cid:19)12(cid:21)(cid:0)(cid:21)88(cid:22),/(cid:20)(cid:0)/(cid:22)(cid:0)(cid:28)(cid:22)0/(cid:19)(cid:28)/(cid:0)(cid:19)22(cid:0)-0.-(cid:29)-.+(cid:19)2(cid:20)(cid:0)/(cid:22)(cid:0):4(cid:22)<(cid:0)0(cid:22)/-(cid:28)(cid:21)(cid:0)-(cid:20)(cid:0) (cid:0)(cid:26)(cid:30)(cid:0) ,(cid:21)5+-,(cid:21).(cid:0)+0.(cid:21),(cid:0)(cid:2)+1(cid:20)(cid:21)(cid:28)/-(cid:22)0(cid:0)(cid:4)!>(cid:8)?>%?(cid:18)(cid:0)/4,(cid:22)+64(cid:0)/4(cid:21)(cid:0)<(cid:21)(cid:19)0(cid:20)(cid:0)9,(cid:22)(cid:29)-.(cid:21).(cid:0)-0(cid:0)(cid:2)+1(cid:20)(cid:21)(cid:28)/-(cid:22)0(cid:0)(cid:4)!>(cid:10)?>%?(cid:18)(cid:0) (cid:0)(cid:26)&(cid:0) (cid:10)(cid:21)8(cid:21)0.(cid:19)0/(cid:0)8-0.(cid:20)(cid:0)/4(cid:19)/(cid:0)(cid:28)(cid:22)0/(cid:19)(cid:28)/(cid:0)-08(cid:22),<(cid:19)/-(cid:22)0(cid:0)8(cid:22),(cid:0)/(cid:21)0(cid:0)>% ?(cid:0)(cid:22),(cid:0)<(cid:22),(cid:21)(cid:0)-0.-(cid:29)-.+(cid:19)2(cid:20)(cid:0)-(cid:20)(cid:0)-0(cid:20)+88-(cid:28)-(cid:21)0/(cid:0)(cid:22),(cid:0)(cid:22)+/(cid:27)(cid:22)8(cid:27) (cid:0)(cid:26)(cid:31)(cid:0) .(cid:19)/(cid:21)(cid:18)(cid:0)(cid:10)(cid:21)8(cid:21)0.(cid:19)0/(cid:0)(cid:20)4(cid:19)22(cid:0)9,(cid:22)(cid:29)-.(cid:21)(cid:0)(cid:20)+1(cid:20)/-/+/(cid:21)(cid:0)0(cid:22)/-(cid:28)(cid:21)(cid:18)(cid:0):4-(cid:28)4(cid:0)(cid:20)4(cid:19)22(cid:0)1(cid:21)(cid:0),(cid:21)(cid:19)(cid:20)(cid:22)0(cid:19)123(cid:0)(cid:28)(cid:19)2(cid:28)+2(cid:19)/(cid:21).(cid:0)/(cid:22)(cid:0),(cid:21)(cid:19)(cid:28)4(cid:0)/4(cid:21)(cid:0) (cid:0)(cid:26)’(cid:0) -0.-(cid:29)-.+(cid:19)2(cid:20)(cid:0)(cid:19)88(cid:21)(cid:28)/(cid:21).(cid:0)13(cid:0)/4(cid:21)(cid:0)7,(cid:21)(cid:19)(cid:28)4(cid:0)(cid:22)8(cid:0)(cid:2)(cid:21)(cid:28)+,-/3(cid:18)(cid:0)-0(cid:0)/4(cid:21)(cid:0)8(cid:22)22(cid:22):-06(cid:0)8(cid:22),<(cid:25)(cid:0)(cid:0) (cid:0)(cid:26)((cid:0) (cid:3)(cid:4)(cid:5)(cid:6)(cid:7)(cid:8)(cid:3)(cid:9)(cid:10)(cid:0)(cid:12)(cid:19)(cid:10)(cid:23)(cid:0)(cid:9)(cid:12)(cid:0)(cid:13)(cid:11)(cid:3)(cid:12)4(cid:0),(cid:9)(cid:22)(cid:12)+(cid:14)64(cid:8)(cid:0)(cid:19)(cid:15)(cid:0)(cid:9)(cid:28)(cid:15)(cid:22)0(cid:3)(cid:0)(cid:20)9(cid:15)-(cid:16)(cid:28)(cid:6)+(cid:15)(cid:22)(cid:17)+(cid:3)(cid:20)(cid:0)(cid:4)9(cid:11)(cid:22)(cid:15)(cid:20)/-0(cid:0)6(cid:0)(cid:0)(cid:0)(cid:0)8(cid:0)(cid:0)(cid:22),(cid:0)(cid:19)(cid:0)9(cid:21),-(cid:22).(cid:0)(cid:22)(cid:0)8(cid:0)0-0(cid:21)/3(cid:0)>) ?(cid:0).(cid:19)3(cid:20)(cid:0)(cid:22)0(cid:0)/4(cid:21)(cid:0) (cid:4)!(cid:4)(cid:7)(cid:0)(cid:9)(cid:15)(cid:8)(cid:7)(cid:3)\"(cid:0)(cid:6)(cid:10)#(cid:14)(cid:9)(cid:15)(cid:3)(cid:0)(cid:8)(cid:15)(cid:10)(cid:0)(cid:3)$(cid:9)(cid:12)(cid:0)(cid:9)(cid:7)(cid:4)(cid:9)(cid:13) (cid:2) (cid:11) (cid:5) (cid:4) (cid:18)(cid:0) (cid:0) (cid:0) (cid:17)(cid:19)(cid:20)(cid:21)(cid:0)(cid:15)(cid:22)(cid:23)(cid:0)(cid:24)(cid:25)(cid:26)(cid:24)(cid:27)(cid:28)(cid:29)(cid:27)(cid:30)(cid:31) (cid:0) (cid:17) (cid:5) (cid:16) (cid:18) (cid:11) (cid:12) (cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0) %%(cid:0) (cid:0) (cid:0)\n\n(cid:0)(cid:24)(cid:0) .-(cid:20)(cid:28)(cid:22)(cid:29)(cid:21),(cid:21).(cid:0)(cid:19)(cid:20)(cid:0)(cid:22)8(cid:0)/4(cid:21)(cid:0)8-,(cid:20)/(cid:0).(cid:19)3(cid:0)(cid:22)0(cid:0):4-(cid:28)4(cid:0)(cid:20)+(cid:28)4(cid:0)1,(cid:21)(cid:19)(cid:28)4(cid:0)-(cid:20)(cid:0);0(cid:22):0(cid:0)(cid:22),(cid:0),(cid:21)(cid:19)(cid:20)(cid:22)0(cid:19)123(cid:0)(cid:20)4(cid:22)+2.(cid:0)4(cid:19)(cid:29)(cid:21)(cid:0)1(cid:21)(cid:21)0(cid:0) (cid:0)(cid:30)(cid:0) ;0(cid:22):0(cid:0)/(cid:22)(cid:0)(cid:10)(cid:21)8(cid:21)0.(cid:19)0/(cid:23)(cid:0)(cid:0)(cid:10)(cid:21)8(cid:21)0.(cid:19)0/(cid:0)(cid:20)4(cid:19)22(cid:0)1(cid:21)(cid:0).(cid:21)(cid:21)<(cid:21).(cid:0)/(cid:22)(cid:0)4(cid:19)(cid:29)(cid:21)(cid:0);0(cid:22):2(cid:21).6(cid:21)(cid:0)(cid:22)8(cid:0)(cid:19)(cid:0)7,(cid:21)(cid:19)(cid:28)4(cid:0)(cid:22)8(cid:0)(cid:2)(cid:21)(cid:28)+,-/3(cid:0)-8(cid:0) (cid:0)&(cid:0) (cid:20)+(cid:28)4(cid:0)1,(cid:21)(cid:19)(cid:28)4(cid:0)-(cid:20)(cid:0);0(cid:22):0(cid:18)(cid:0)(cid:22),(cid:0),(cid:21)(cid:19)(cid:20)(cid:22)0(cid:19)123(cid:0)(cid:20)4(cid:22)+2.(cid:0)4(cid:19)(cid:29)(cid:21)(cid:0)1(cid:21)(cid:21)0(cid:0);0(cid:22):0(cid:18)(cid:0)/(cid:22)(cid:0)(cid:19)03(cid:0)9(cid:21),(cid:20)(cid:22)0(cid:18)(cid:0)(cid:22)/4(cid:21),(cid:0)/4(cid:19)0(cid:0)/4(cid:21)(cid:0) (cid:0)(cid:31)(cid:0) 9(cid:21),(cid:20)(cid:22)0(cid:0)(cid:28)(cid:22)<<-//-06(cid:0)/4(cid:21)(cid:0)1,(cid:21)(cid:19)(cid:28)4(cid:18)(cid:0):4(cid:22)(cid:0)-(cid:20)(cid:0)(cid:19)0(cid:0)(cid:21)<92(cid:22)3(cid:21)(cid:21)(cid:18)(cid:0)(cid:22)88-(cid:28)(cid:21),(cid:18)(cid:0)(cid:22),(cid:0)(cid:22)/4(cid:21),(cid:0)(cid:19)6(cid:21)0/(cid:0)(cid:22)8(cid:0)(cid:10)(cid:21)8(cid:21)0.(cid:19)0/(cid:23)(cid:0)(cid:0) (cid:0)’(cid:0) (cid:17)(cid:23)(cid:0) (cid:9)=(cid:28)(cid:21)9/(cid:0)(cid:19)(cid:20)(cid:0)(cid:22)/4(cid:21),:-(cid:20)(cid:21)(cid:0)9,(cid:22)(cid:29)-.(cid:21).(cid:18)(cid:0)(cid:19)22(cid:0)0(cid:22)/-8-(cid:28)(cid:19)/-(cid:22)0(cid:20)(cid:0)/(cid:22)(cid:0)-0.-(cid:29)-.+(cid:19)2(cid:20)(cid:0)(cid:22),(cid:0)/4(cid:21)(cid:0)<(cid:21).-(cid:19)(cid:0) (cid:0)((cid:0) ,(cid:21)5+-,(cid:21).(cid:0)+0.(cid:21),(cid:0)/4-(cid:20)(cid:0)(cid:2)(cid:21)(cid:28)/-(cid:22)0(cid:0)(cid:20)4(cid:19)22(cid:0)1(cid:21)(cid:0)(cid:20)(cid:21)0/(cid:0):-/4(cid:22)+/(cid:0)+0,(cid:21)(cid:19)(cid:20)(cid:22)0(cid:19)12(cid:21)(cid:0).(cid:21)2(cid:19)3(cid:0)(cid:19)0.(cid:0)-0(cid:0)0(cid:22)(cid:0)(cid:28)(cid:19)(cid:20)(cid:21)(cid:0)2(cid:19)/(cid:21),(cid:0)/4(cid:19)0(cid:0) (cid:0))(cid:0) (cid:20)-=/3(cid:0)>(cid:31) ?(cid:0)(cid:28)(cid:19)2(cid:21)0.(cid:19),(cid:0).(cid:19)3(cid:20)(cid:0)(cid:19)8/(cid:21),(cid:0)/4(cid:21)(cid:0).-(cid:20)(cid:28)(cid:22)(cid:29)(cid:21),3(cid:0)(cid:22)8(cid:0)/4(cid:21)(cid:0)7,(cid:21)(cid:19)(cid:28)4(cid:0)(cid:22)8(cid:0)(cid:2)(cid:21)(cid:28)+,-/3(cid:23)(cid:0)(cid:0)(cid:4)8(cid:0)(cid:19)(cid:0)2(cid:19):(cid:0)(cid:21)08(cid:22),(cid:28)(cid:21)<(cid:21)0/(cid:0) (cid:0)% (cid:0) (cid:22)88-(cid:28)-(cid:19)2(cid:0).(cid:21)/(cid:21),<-0(cid:21)(cid:20)(cid:0)/4(cid:19)/(cid:0)(cid:19)(cid:0)0(cid:22)/-8-(cid:28)(cid:19)/-(cid:22)0(cid:18)(cid:0)0(cid:22)/-(cid:28)(cid:21)(cid:18)(cid:0)(cid:22),(cid:0)9(cid:22)(cid:20)/-06(cid:0),(cid:21)5+-,(cid:21).(cid:0)+0.(cid:21),(cid:0)/4-(cid:20)(cid:0)(cid:2)(cid:21)(cid:28)/-(cid:22)0(cid:0):(cid:22)+2.(cid:0) (cid:0)%%(cid:0) -<9(cid:21).(cid:21)(cid:0)(cid:19)(cid:0)(cid:28),-<-0(cid:19)2(cid:0)-0(cid:29)(cid:21)(cid:20)/-6(cid:19)/-(cid:22)0(cid:0)(cid:22),(cid:0)(cid:28)(cid:19)+(cid:20)(cid:21)(cid:0).(cid:19)<(cid:19)6(cid:21)(cid:0)/(cid:22)(cid:0)0(cid:19)/-(cid:22)0(cid:19)2(cid:0)(cid:20)(cid:21)(cid:28)+,-/3(cid:18)(cid:0)(cid:20)+(cid:28)4(cid:0)0(cid:22)/-8-(cid:28)(cid:19)/-(cid:22)0(cid:18)(cid:0)0(cid:22)/-(cid:28)(cid:21)(cid:18)(cid:0)(cid:22),(cid:0) (cid:0)%(cid:26)(cid:0) 9(cid:22)(cid:20)/-06(cid:0)(cid:20)4(cid:19)22(cid:0)1(cid:21)(cid:0).(cid:21)2(cid:19)3(cid:21).(cid:23)(cid:0)(cid:0)(cid:3)4-(cid:20)(cid:0)(cid:2)+1(cid:20)(cid:21)(cid:28)/-(cid:22)0(cid:0)(cid:20)4(cid:19)22(cid:0)1(cid:21)(cid:0)-<92(cid:21)<(cid:21)0/(cid:21).(cid:0)-0(cid:0)/4(cid:21)(cid:0)(cid:20)(cid:19)<(cid:21)(cid:0)<(cid:19)00(cid:21),(cid:0)(cid:19)(cid:20)(cid:0)9,(cid:22)(cid:29)-.(cid:21).(cid:0) (cid:0)%(cid:24)(cid:0) +0.(cid:21),(cid:0)(cid:30)&(cid:0)(cid:17)(cid:23)(cid:13)(cid:23)(cid:12)(cid:23)(cid:0)(cid:2)(cid:21)(cid:28)/-(cid:22)0(cid:0)%(cid:31)(cid:30)(cid:23)&(cid:26)(>(cid:19)?>(cid:26)?(cid:18)(cid:0)-0(cid:0)/4(cid:21)(cid:0)(cid:28)(cid:19)(cid:20)(cid:21)(cid:0)(cid:22)8(cid:0)(cid:19)(cid:0).-(cid:20)(cid:28)2(cid:22)(cid:20)+,(cid:21)(cid:0)(cid:28)(cid:22)(cid:29)(cid:21),(cid:21).(cid:0)+0.(cid:21),(cid:0)(cid:20)+(cid:28)4(cid:0)(cid:20)(cid:21)(cid:28)/-(cid:22)0(cid:23)(cid:0) (cid:0)%(cid:30)(cid:0) (cid:10)(cid:23)(cid:0) (cid:4)8(cid:0)(cid:10)(cid:21)8(cid:21)0.(cid:19)0/(cid:0)9,(cid:22)(cid:29)-.(cid:21)(cid:20)(cid:0)0(cid:22)/-(cid:28)(cid:21)(cid:0)+0.(cid:21),(cid:0)(cid:2)+1(cid:20)(cid:21)(cid:28)/-(cid:22)0(cid:0)(cid:4)!>(cid:8)?>%?(cid:18)(cid:0)-/(cid:0)(cid:20)4(cid:19)22(cid:0).(cid:22)(cid:0)(cid:20)(cid:22)(cid:0)13(cid:0) (cid:0)%&(cid:0) 9,(cid:22)(cid:29)-.-06(cid:0)-/(cid:0)-0(cid:0)/4(cid:21)(cid:0)8(cid:22)22(cid:22):-06(cid:0)8(cid:22),<(cid:25)(cid:0) (cid:0)%(cid:31)(cid:0) %(cid:23)(cid:0) @,-//(cid:21)0(cid:0)0(cid:22)/-(cid:28)(cid:21)(cid:18)(cid:0)13(cid:0)8-,(cid:20)/(cid:27)(cid:28)2(cid:19)(cid:20)(cid:20)(cid:0)<(cid:19)-2(cid:0)/(cid:22)(cid:0)/4(cid:21)(cid:0)-0.-(cid:29)-.+(cid:19)2(cid:0)(cid:19)/(cid:0)/4(cid:21)(cid:0)2(cid:19)(cid:20)/(cid:0);0(cid:22):0(cid:0)(cid:19)..,(cid:21)(cid:20)(cid:20)(cid:0)(cid:22)8(cid:0) (cid:0)%’(cid:0) /4(cid:21)(cid:0)-0.-(cid:29)-.+(cid:19)2(cid:18)(cid:0)(cid:22),(cid:0)13(cid:0)(cid:21)<(cid:19)-2(cid:0)(cid:22),(cid:0):-/4-0(cid:27)(cid:19)992-(cid:28)(cid:19)/-(cid:22)0(cid:0)<(cid:21)(cid:20)(cid:20)(cid:19)6-06(cid:18)(cid:0)-8(cid:0)/4(cid:21)(cid:0)-0.-(cid:29)-.+(cid:19)2(cid:0)-(cid:20)(cid:0)6-(cid:29)(cid:21)0(cid:0)(cid:19)(cid:0)(cid:28)2(cid:21)(cid:19),(cid:18)(cid:0) (cid:0)%((cid:0) (cid:28)(cid:22)0(cid:20)9-(cid:28)+(cid:22)+(cid:20)(cid:18)(cid:0)(cid:19)0.(cid:0),(cid:21)(cid:19)(cid:20)(cid:22)0(cid:19)12(cid:21)(cid:0)(cid:22)99(cid:22),/+0-/3(cid:0)/(cid:22)(cid:0),(cid:21)(cid:28)(cid:21)-(cid:29)(cid:21)(cid:0)0(cid:22)/-8-(cid:28)(cid:19)/-(cid:22)0(cid:0)13(cid:0)8-,(cid:20)/(cid:27)(cid:28)2(cid:19)(cid:20)(cid:20)(cid:0)<(cid:19)-2(cid:18)(cid:0)(cid:19)0.(cid:0)/4(cid:21)(cid:0) (cid:0)%)(cid:0) -0.-(cid:29)-.+(cid:19)2(cid:0).(cid:22)(cid:21)(cid:20)(cid:0)0(cid:22)/(cid:0)(cid:21)=(cid:21),(cid:28)-(cid:20)(cid:21)(cid:0)/4(cid:19)/(cid:0)(cid:28)4(cid:22)-(cid:28)(cid:21)(cid:23)(cid:0)(cid:0)(cid:4)8(cid:0)/4(cid:21)(cid:0)-0.-(cid:29)-.+(cid:19)2(cid:0)-(cid:20)(cid:0).(cid:21)(cid:28)(cid:21)(cid:19)(cid:20)(cid:21).(cid:18)(cid:0)(cid:10)(cid:21)8(cid:21)0.(cid:19)0/(cid:0)<+(cid:20)/(cid:0)9,(cid:22)(cid:29)-.(cid:21)(cid:0) (cid:0)(cid:26) (cid:0) (cid:20)+(cid:28)4(cid:0)0(cid:22)/-(cid:28)(cid:21)(cid:0)/(cid:22)(cid:0)/4(cid:21)(cid:0)0(cid:21)=/(cid:0)(cid:22)8(cid:0);-0(cid:0)(cid:22)8(cid:0)/4(cid:21)(cid:0)-0.-(cid:29)-.+(cid:19)2(cid:0)-8(cid:0)/4(cid:21)(cid:0)-0.-(cid:29)-.+(cid:19)2(cid:0)4(cid:19).(cid:0)9,(cid:22)(cid:29)-.(cid:21).(cid:0)(cid:28)(cid:22)0/(cid:19)(cid:28)/(cid:0)-08(cid:22),<(cid:19)/-(cid:22)0(cid:0) (cid:0)(cid:26)%(cid:0) 8(cid:22),(cid:0)4-(cid:20)(cid:0)(cid:22),(cid:0)4(cid:21),(cid:0)0(cid:21)=/(cid:0)(cid:22)8(cid:0);-0(cid:18)(cid:0)(cid:19)2(cid:22)06(cid:0):-/4(cid:0)(cid:19)+/4(cid:22),-A(cid:19)/-(cid:22)0(cid:0)/(cid:22)(cid:0)(cid:28)(cid:22)0/(cid:19)(cid:28)/(cid:0)/4(cid:21)<(cid:23)(cid:0)(cid:0)(cid:3)4(cid:21)(cid:0)0(cid:22)/-(cid:28)(cid:21)(cid:0)<(cid:19)3(cid:0)1(cid:21)(cid:0)9,(cid:22)(cid:29)-.(cid:21).(cid:0) (cid:0)(cid:26)(cid:26)(cid:0) -0(cid:0)(cid:22)0(cid:21)(cid:0)(cid:22),(cid:0)<(cid:22),(cid:21)(cid:0)<(cid:19)-2-06(cid:20)(cid:0)(cid:19)(cid:20)(cid:0)-08(cid:22),<(cid:19)/-(cid:22)0(cid:0)-(cid:20)(cid:0)(cid:19)(cid:29)(cid:19)-2(cid:19)12(cid:21)(cid:23)(cid:0)(cid:0)(cid:0) (cid:0)(cid:26)(cid:24)(cid:0) (cid:26)(cid:23)(cid:0) (cid:4)8(cid:18)(cid:0)(cid:19)8/(cid:21),(cid:0)<(cid:19);-06(cid:0),(cid:21)(cid:19)(cid:20)(cid:22)0(cid:19)12(cid:21)(cid:0)(cid:21)88(cid:22),/(cid:20)(cid:0)/(cid:22)(cid:0)(cid:28)(cid:22)0/(cid:19)(cid:28)/(cid:0)(cid:19)22(cid:0)-0.-(cid:29)-.+(cid:19)2(cid:20)(cid:0)/(cid:22)(cid:0):4(cid:22)<(cid:0)0(cid:22)/-(cid:28)(cid:21)(cid:0)-(cid:20)(cid:0) (cid:0)(cid:26)(cid:30)(cid:0) ,(cid:21)5+-,(cid:21).(cid:0)+0.(cid:21),(cid:0)(cid:2)+1(cid:20)(cid:21)(cid:28)/-(cid:22)0(cid:0)(cid:4)!>(cid:8)?>%?(cid:18)(cid:0)/4,(cid:22)+64(cid:0)/4(cid:21)(cid:0)<(cid:21)(cid:19)0(cid:20)(cid:0)9,(cid:22)(cid:29)-.(cid:21).(cid:0)-0(cid:0)(cid:2)+1(cid:20)(cid:21)(cid:28)/-(cid:22)0(cid:0)(cid:4)!>(cid:10)?>%?(cid:18)(cid:0) (cid:0)(cid:26)&(cid:0) (cid:10)(cid:21)8(cid:21)0.(cid:19)0/(cid:0)8-0.(cid:20)(cid:0)/4(cid:19)/(cid:0)(cid:28)(cid:22)0/(cid:19)(cid:28)/(cid:0)-08(cid:22),<(cid:19)/-(cid:22)0(cid:0)8(cid:22),(cid:0)/(cid:21)0(cid:0)>% ?(cid:0)(cid:22),(cid:0)<(cid:22),(cid:21)(cid:0)-0.-(cid:29)-.+(cid:19)2(cid:20)(cid:0)-(cid:20)(cid:0)-0(cid:20)+88-(cid:28)-(cid:21)0/(cid:0)(cid:22),(cid:0)(cid:22)+/(cid:27)(cid:22)8(cid:27) (cid:0)(cid:26)(cid:31)(cid:0) .(cid:19)/(cid:21)(cid:18)(cid:0)(cid:10)(cid:21)8(cid:21)0.(cid:19)0/(cid:0)(cid:20)4(cid:19)22(cid:0)9,(cid:22)(cid:29)-.(cid:21)(cid:0)(cid:20)+1(cid:20)/-/+/(cid:21)(cid:0)0(cid:22)/-(cid:28)(cid:21)(cid:18)(cid:0):4-(cid:28)4(cid:0)(cid:20)4(cid:19)22(cid:0)1(cid:21)(cid:0),(cid:21)(cid:19)(cid:20)(cid:22)0(cid:19)123(cid:0)(cid:28)(cid:19)2(cid:28)+2(cid:19)/(cid:21).(cid:0)/(cid:22)(cid:0),(cid:21)(cid:19)(cid:28)4(cid:0)/4(cid:21)(cid:0) (cid:0)(cid:26)’(cid:0) -0.-(cid:29)-.+(cid:19)2(cid:20)(cid:0)(cid:19)88(cid:21)(cid:28)/(cid:21).(cid:0)13(cid:0)/4(cid:21)(cid:0)7,(cid:21)(cid:19)(cid:28)4(cid:0)(cid:22)8(cid:0)(cid:2)(cid:21)(cid:28)+,-/3(cid:18)(cid:0)-0(cid:0)/4(cid:21)(cid:0)8(cid:22)22(cid:22):-06(cid:0)8(cid:22),<(cid:25)(cid:0)(cid:0) (cid:0)(cid:26)((cid:0) (cid:3)(cid:4)(cid:5)(cid:6)(cid:7)(cid:8)(cid:3)(cid:9)(cid:10)(cid:0)(cid:12)(cid:19)(cid:10)(cid:23)(cid:0)(cid:9)(cid:12)(cid:0)(cid:13)(cid:11)(cid:3)(cid:12)4(cid:0),(cid:9)(cid:22)(cid:12)+(cid:14)64(cid:8)(cid:0)(cid:19)(cid:15)(cid:0)(cid:9)(cid:28)(cid:15)(cid:22)0(cid:3)(cid:0)(cid:20)9(cid:15)-(cid:16)(cid:28)(cid:6)+(cid:15)(cid:22)(cid:17)+(cid:3)(cid:20)(cid:0)(cid:4)9(cid:11)(cid:22)(cid:15)(cid:20)/-0(cid:0)6(cid:0)(cid:0)(cid:0)(cid:0)8(cid:0)(cid:0)(cid:22),(cid:0)(cid:19)(cid:0)9(cid:21),-(cid:22).(cid:0)(cid:22)(cid:0)8(cid:0)0-0(cid:21)/3(cid:0)>) ?(cid:0).(cid:19)3(cid:20)(cid:0)(cid:22)0(cid:0)/4(cid:21)(cid:0) (cid:4)!(cid:4)(cid:7)(cid:0)(cid:9)(cid:15)(cid:8)(cid:7)(cid:3)\"(cid:0)(cid:6)(cid:10)#(cid:14)(cid:9)(cid:15)(cid:3)(cid:0)(cid:8)(cid:15)(cid:10)(cid:0)(cid:3)$(cid:9)(cid:12)(cid:0)(cid:9)(cid:7)(cid:4)(cid:9)(cid:13) (cid:2) (cid:11) (cid:5) (cid:4) (cid:18)(cid:0) (cid:0) (cid:0) (cid:17)(cid:19)(cid:20)(cid:21)(cid:0)(cid:15)(cid:22)(cid:23)(cid:0)(cid:24)(cid:25)(cid:26)(cid:24)(cid:27)(cid:28)(cid:29)(cid:27)(cid:30)(cid:31) (cid:0) (cid:17) (cid:5) (cid:16) (cid:18) (cid:11) (cid:12) (cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0) %%(cid:0) (cid:0) (cid:0)\n\nFGHI(cid:0)JKLMNOPNQQJRQNSTU(cid:0)(cid:0)(cid:0)SVOWXIYZ(cid:0)[\\(cid:0)(cid:0)(cid:0)]^_I‘(cid:0)QLa[baLM(cid:0)(cid:0)(cid:0)cGdI(cid:0)[L(cid:0)Ve(cid:0)MM (cid:0) (cid:0)%(cid:0) *(cid:22)+(cid:21)(cid:0),(cid:19)-(cid:21)(cid:0)(cid:22).(cid:0)/0(cid:20)(cid:0)1(cid:21)2(cid:20)/0(cid:21)3(cid:0)(cid:22)4(cid:0)(cid:0) (cid:0)(cid:26)(cid:0) 2(cid:23)(cid:0) (cid:4)5(cid:0)+(cid:19)6(cid:22)4(cid:0),4/50(cid:0)(cid:22)4(cid:0)24(cid:22)(cid:19)7(cid:28)(cid:19)(cid:20)0(cid:0)+(cid:21)7/(cid:19)(cid:18)(cid:0)/5(cid:28)897/5-(cid:0)+(cid:19)6(cid:22)4(cid:0)+(cid:21)7/(cid:19)(cid:0)/5(cid:0)-(cid:21)(cid:22)-4(cid:19),*/(cid:28)(cid:0) (cid:0)(cid:24)(cid:0) (cid:19)4(cid:21)(cid:19)(cid:20)(cid:0)1*(cid:21)4(cid:21)(cid:0)0*(cid:21)(cid:0)/57/(cid:29)/79(cid:19)8(cid:20)(cid:0)(cid:19)..(cid:21)(cid:28)0(cid:21)7(cid:0)2:(cid:0)0*(cid:21)(cid:0);4(cid:21)(cid:19)(cid:28)*(cid:0)(cid:22).(cid:0)(cid:2)(cid:21)(cid:28)94/0:(cid:0)8/<(cid:21)8:(cid:0) (cid:0)(cid:30)(cid:0) 4(cid:21)(cid:20)/7(cid:21)(cid:23)(cid:0)(cid:0)(cid:2)9(cid:28)*(cid:0)(cid:19)(cid:0)5(cid:22)0/(cid:28)(cid:21)(cid:0)/5(cid:0)+(cid:21)7/(cid:19)(cid:0)(cid:22)4(cid:0)1(cid:21)2(cid:0),(cid:22)(cid:20)0/5-(cid:0)(cid:20)*(cid:19)88(cid:0)/5(cid:28)897(cid:21)(cid:0)(cid:19)(cid:0)0(cid:22)88(cid:27).4(cid:21)(cid:21)(cid:0) (cid:0)&(cid:0) ,*(cid:22)5(cid:21)(cid:0)59+2(cid:21)4(cid:18)(cid:0)1*/(cid:28)*(cid:0)(cid:20)*(cid:19)88(cid:0)4(cid:21)+(cid:19)/5(cid:0)(cid:19)(cid:28)0/(cid:29)(cid:21)(cid:0).(cid:22)4(cid:0)(cid:19)0(cid:0)8(cid:21)(cid:19)(cid:20)0(cid:0)5/5(cid:21)0:(cid:0)=) >(cid:0)7(cid:19):(cid:20)(cid:18)(cid:0) (cid:0)(cid:31)(cid:0) 1*(cid:21)4(cid:21)(cid:0)(cid:19)5(cid:0)/57/(cid:29)/79(cid:19)8(cid:0)(cid:28)(cid:19)5(cid:0)8(cid:21)(cid:19)45(cid:0)1*(cid:21)0*(cid:21)4(cid:0)(cid:22)4(cid:0)5(cid:22)0(cid:0)0*(cid:21)(cid:0)/57/(cid:29)/79(cid:19)8?(cid:20)(cid:0)(cid:5)$(cid:12)(cid:0) (cid:0)’(cid:0) (cid:4)7(cid:21)50/./(cid:19)28(cid:21)(cid:0)$(cid:21)(cid:19)80*(cid:0)(cid:4)5.(cid:22)4+(cid:19)0/(cid:22)5(cid:0)+(cid:19):(cid:0)2(cid:21)(cid:0)/5(cid:28)897(cid:21)7(cid:0)/5(cid:0)0*(cid:21)(cid:0);4(cid:21)(cid:19)(cid:28)*(cid:0)(cid:22).(cid:0)(cid:2)(cid:21)(cid:28)94/0:(cid:23)(cid:0) (cid:0)((cid:0) (cid:24)(cid:23)(cid:0) (cid:4)5(cid:0)(cid:19)5:(cid:0)(cid:28)(cid:19)(cid:20)(cid:21)(cid:0)7(cid:21)(cid:21)+(cid:21)7(cid:0)2:(cid:0)(cid:10)(cid:21).(cid:21)57(cid:19)50(cid:0)0(cid:22)(cid:0)4(cid:21)@9/4(cid:21)(cid:0)94-(cid:21)5(cid:28):(cid:0)2(cid:21)(cid:28)(cid:19)9(cid:20)(cid:21)(cid:0)(cid:22).(cid:0),(cid:22)(cid:20)(cid:20)/28(cid:21)(cid:0) (cid:0))(cid:0) /++/5(cid:21)50(cid:0)+/(cid:20)9(cid:20)(cid:21)(cid:0)(cid:22).(cid:0)(cid:6)5(cid:20)(cid:21)(cid:28)94(cid:21)7(cid:0)(cid:5)$(cid:12)(cid:0)(cid:4)7(cid:21)50/./(cid:19)28(cid:21)(cid:0)$(cid:21)(cid:19)80*(cid:0)(cid:4)5.(cid:22)4+(cid:19)0/(cid:22)5(cid:18)(cid:0)(cid:10)(cid:21).(cid:21)57(cid:19)50(cid:0)+(cid:19):(cid:0),4(cid:22)(cid:29)/7(cid:21)(cid:0) (cid:0)% (cid:0) /5.(cid:22)4+(cid:19)0/(cid:22)5(cid:0)0(cid:22)(cid:0)/57/(cid:29)/79(cid:19)8(cid:20)(cid:0)2:(cid:0)0(cid:21)8(cid:21),*(cid:22)5(cid:21)(cid:0)(cid:22)4(cid:0)(cid:22)0*(cid:21)4(cid:0)+(cid:21)(cid:19)5(cid:20)(cid:18)(cid:0)(cid:19)(cid:20)(cid:0)(cid:19),,4(cid:22),4/(cid:19)0(cid:21)(cid:18)(cid:0)/5(cid:0)(cid:19)77/0/(cid:22)5(cid:0)0(cid:22)(cid:0)5(cid:22)0/(cid:28)(cid:21)(cid:0) (cid:0)%%(cid:0) ,4(cid:22)(cid:29)/7(cid:21)7(cid:0)957(cid:21)4(cid:0)(cid:2)92(cid:20)(cid:21)(cid:28)0/(cid:22)5(cid:0)(cid:4)!=(cid:9)>=%>(cid:23)(cid:0) (cid:0)%(cid:26)(cid:0) (cid:9)(cid:23)(cid:0) (cid:10)(cid:21).(cid:21)57(cid:19)50(cid:0)(cid:20)*(cid:19)88(cid:18)(cid:0)/5(cid:0)(cid:19)(cid:28)(cid:28)(cid:22)47(cid:19)5(cid:28)(cid:21)(cid:0)1/0*(cid:0)(cid:2)92(cid:20)(cid:21)(cid:28)0/(cid:22)5(cid:0)(cid:4)!=(cid:8)>=(cid:26)>(cid:18)(cid:0),4(cid:22)(cid:29)/7(cid:21)(cid:0)5(cid:22)0/(cid:28)(cid:21)(cid:0)0(cid:22)(cid:0)0*(cid:21)(cid:0) (cid:0)%(cid:24)(cid:0) (cid:13)(cid:21)7(cid:21)4(cid:19)8(cid:0)(cid:3)4(cid:19)7(cid:21)(cid:0)(cid:17)(cid:22)++/(cid:20)(cid:20)/(cid:22)5(cid:0).(cid:22)88(cid:22)1/5-(cid:0)0*(cid:21)(cid:0)7/(cid:20)(cid:28)(cid:22)(cid:29)(cid:21)4:(cid:0)(cid:22).(cid:0)(cid:19)(cid:0);4(cid:21)(cid:19)(cid:28)*(cid:0)(cid:22).(cid:0)(cid:2)(cid:21)(cid:28)94/0:(cid:23)(cid:0)(cid:0)(cid:4).(cid:0)0*(cid:21)(cid:0);4(cid:21)(cid:19)(cid:28)*(cid:0)(cid:22).(cid:0) (cid:0)%(cid:30)(cid:0) (cid:2)(cid:21)(cid:28)94/0:(cid:0)/5(cid:29)(cid:22)8(cid:29)(cid:21)(cid:20)(cid:0)0*(cid:21)(cid:0)(cid:6)5(cid:20)(cid:21)(cid:28)94(cid:21)7(cid:0)(cid:5)$(cid:12)(cid:0)(cid:4)7(cid:21)50/./(cid:19)28(cid:21)(cid:0)$(cid:21)(cid:19)80*(cid:0)(cid:4)5.(cid:22)4+(cid:19)0/(cid:22)5(cid:0)(cid:22).(cid:0)./(cid:29)(cid:21)(cid:0)*9574(cid:21)7(cid:0)=& >(cid:0)(cid:22)4(cid:0) (cid:0)%&(cid:0) +(cid:22)4(cid:21)(cid:0)/57/(cid:29)/79(cid:19)8(cid:20)(cid:18)(cid:0)0*(cid:21)5(cid:0)(cid:20)9(cid:28)*(cid:0)5(cid:22)0/(cid:28)(cid:21)(cid:0)(cid:20)*(cid:19)88(cid:0)2(cid:21)(cid:0),4(cid:22)(cid:29)/7(cid:21)7(cid:0)(cid:19)(cid:20)(cid:0)(cid:20)(cid:22)(cid:22)5(cid:0)(cid:19)(cid:20)(cid:0),(cid:22)(cid:20)(cid:20)/28(cid:21)(cid:0)(cid:19)57(cid:0)/5(cid:0)5(cid:22)(cid:0)(cid:28)(cid:19)(cid:20)(cid:21)(cid:0)8(cid:19)0(cid:21)4(cid:0)0*(cid:19)5(cid:0) (cid:0)%(cid:31)(cid:0) 0(cid:21)5(cid:0)=% >(cid:0)29(cid:20)/5(cid:21)(cid:20)(cid:20)(cid:0)7(cid:19):(cid:20)(cid:0).(cid:22)88(cid:22)1/5-(cid:0)0*(cid:21)(cid:0)7(cid:19)0(cid:21)(cid:0)(cid:22).(cid:0)7/(cid:20)(cid:28)(cid:22)(cid:29)(cid:21)4:(cid:0)(cid:22).(cid:0)0*(cid:21)(cid:0);4(cid:21)(cid:19)(cid:28)*(cid:0)(cid:22).(cid:0)(cid:2)(cid:21)(cid:28)94/0:(cid:23)(cid:0)(cid:0)(cid:4).(cid:0)0*(cid:21)(cid:0);4(cid:21)(cid:19)(cid:28)*(cid:0)(cid:22).(cid:0) (cid:0)%’(cid:0) (cid:2)(cid:21)(cid:28)94/0:(cid:0)/5(cid:29)(cid:22)8(cid:29)(cid:21)(cid:20)(cid:0)0*(cid:21)(cid:0)(cid:6)5(cid:20)(cid:21)(cid:28)94(cid:21)7(cid:0)(cid:5)$(cid:12)(cid:0)(cid:4)7(cid:21)50/./(cid:19)28(cid:21)(cid:0)$(cid:21)(cid:19)80*(cid:0)(cid:4)5.(cid:22)4+(cid:19)0/(cid:22)5(cid:0)(cid:22).(cid:0).(cid:21)1(cid:21)4(cid:0)0*(cid:19)5(cid:0)./(cid:29)(cid:21)(cid:0)*9574(cid:21)7(cid:0) (cid:0)%((cid:0) =& >(cid:0)/57/(cid:29)/79(cid:19)8(cid:20)(cid:18)(cid:0)(cid:10)(cid:21).(cid:21)57(cid:19)50(cid:0)+(cid:19):(cid:0)+(cid:19)/50(cid:19)/5(cid:0)(cid:19)(cid:0)8(cid:22)-(cid:0)(cid:22).(cid:0)(cid:19)5:(cid:0)(cid:20)9(cid:28)*(cid:0);4(cid:21)(cid:19)(cid:28)*(cid:0)(cid:22).(cid:0)(cid:2)(cid:21)(cid:28)94/0:(cid:18)(cid:0)(cid:19)57(cid:0)(cid:20)92+/0(cid:0) (cid:0)%)(cid:0) (cid:20)9(cid:28)*(cid:0)(cid:19)(cid:0)8(cid:22)-(cid:0)(cid:19)559(cid:19)88:(cid:0)0(cid:22)(cid:0)0*(cid:21)(cid:0)(cid:13)(cid:21)7(cid:21)4(cid:19)8(cid:0)(cid:3)4(cid:19)7(cid:21)(cid:0)(cid:17)(cid:22)++/(cid:20)(cid:20)/(cid:22)5(cid:0)5(cid:22)(cid:0)8(cid:19)0(cid:21)4(cid:0)0*(cid:19)5(cid:0)(cid:20)/A0:(cid:0)=(cid:31) >(cid:0)(cid:28)(cid:19)8(cid:21)57(cid:19)4(cid:0)7(cid:19):(cid:20)(cid:0) (cid:0)(cid:26) (cid:0) .(cid:22)88(cid:22)1/5-(cid:0)0*(cid:21)(cid:0)(cid:21)57(cid:0)(cid:22).(cid:0)0*(cid:21)(cid:0)(cid:28)(cid:19)8(cid:21)57(cid:19)4(cid:0):(cid:21)(cid:19)4(cid:18)(cid:0)7(cid:22)(cid:28)9+(cid:21)50/5-(cid:0);4(cid:21)(cid:19)(cid:28)*(cid:21)(cid:20)(cid:0)(cid:22).(cid:0)(cid:2)(cid:21)(cid:28)94/0:(cid:0).4(cid:22)+(cid:0)0*(cid:21)(cid:0),4(cid:21)(cid:28)(cid:21)7/5-(cid:0) (cid:0)(cid:26)%(cid:0) (cid:28)(cid:19)8(cid:21)57(cid:19)4(cid:0):(cid:21)(cid:19)4(cid:23)(cid:0)(cid:0)(cid:6)58(cid:21)(cid:20)(cid:20)(cid:0)(cid:22)0*(cid:21)41/(cid:20)(cid:21)(cid:0)7/4(cid:21)(cid:28)0(cid:21)7(cid:0)2:(cid:0)(cid:19)(cid:0)(cid:17)(cid:22)++/(cid:20)(cid:20)/(cid:22)5(cid:0)4(cid:21),4(cid:21)(cid:20)(cid:21)50(cid:19)0/(cid:29)(cid:21)(cid:0)/5(cid:0)14/0/5-(cid:18)(cid:0)(cid:10)(cid:21).(cid:21)57(cid:19)50(cid:0) (cid:0)(cid:26)(cid:26)(cid:0) +9(cid:20)0(cid:0)(cid:20)92+/0(cid:0)(cid:19)88(cid:0)5(cid:22)0/(cid:28)(cid:21)(cid:20)(cid:0)(cid:19)57(cid:0)8(cid:22)-(cid:20)(cid:0)4(cid:21)@9/4(cid:21)7(cid:0)957(cid:21)4(cid:0)0*/(cid:20)(cid:0)(cid:2)(cid:21)(cid:28)0/(cid:22)5(cid:0)0(cid:22)(cid:25)(cid:0)(cid:10)(cid:9)24/(cid:21).B.0(cid:28)(cid:23)-(cid:22)(cid:29)(cid:0)(cid:22)4(cid:0)(cid:20)(cid:21)50(cid:0)2:(cid:0) (cid:0)(cid:26)(cid:24)(cid:0) (cid:22)(cid:29)(cid:21)45/-*0(cid:0)(cid:28)(cid:22)94/(cid:21)4(cid:0)=5(cid:22)0(cid:0)0*(cid:21)(cid:0)(cid:6)(cid:23)(cid:2)(cid:23)(cid:0)(cid:5)(cid:22)(cid:20)0(cid:19)8(cid:0)(cid:2)(cid:21)4(cid:29)/(cid:28)(cid:21)>(cid:0)0(cid:22)(cid:25)(cid:0)(cid:8)(cid:20)(cid:20)(cid:22)(cid:28)/(cid:19)0(cid:21)(cid:0)(cid:10)/4(cid:21)(cid:28)0(cid:22)4(cid:0).(cid:22)4(cid:0)(cid:9)5.(cid:22)4(cid:28)(cid:21)+(cid:21)50(cid:18)(cid:0);94(cid:21)(cid:19)9(cid:0)(cid:22).(cid:0) (cid:0)(cid:26)(cid:30)(cid:0) (cid:17)(cid:22)5(cid:20)9+(cid:21)4(cid:0)(cid:5)4(cid:22)0(cid:21)(cid:28)0/(cid:22)5(cid:18)(cid:0)(cid:13)(cid:21)7(cid:21)4(cid:19)8(cid:0)(cid:3)4(cid:19)7(cid:21)(cid:0)(cid:17)(cid:22)++/(cid:20)(cid:20)/(cid:22)5(cid:18)(cid:0)(cid:31) (cid:0)(cid:5)(cid:21)55(cid:20):8(cid:29)(cid:19)5/(cid:19)(cid:0)(cid:8)(cid:29)(cid:21)59(cid:21)(cid:0)(cid:15)C(cid:18)(cid:0)C(cid:19)(cid:20)*/5-0(cid:22)5(cid:18)(cid:0) (cid:0)(cid:26)&(cid:0) (cid:10)(cid:17)(cid:0)(cid:26) &( (cid:23)(cid:0)(cid:0)(cid:3)*(cid:21)(cid:0)(cid:20)926(cid:21)(cid:28)0(cid:0)8/5(cid:21)(cid:0)+9(cid:20)0(cid:0)2(cid:21)-/5(cid:25)(cid:0)D(cid:6)(cid:23)(cid:2)(cid:23)(cid:0)(cid:29)(cid:23)(cid:0)#(cid:22)(cid:22)7(cid:12)A(cid:0)$(cid:22)87/5-(cid:20)(cid:18)(cid:0)(cid:4)5(cid:28)(cid:23)E(cid:0) (cid:0)(cid:26)(cid:31)(cid:0) (cid:13)(cid:23)(cid:0) (cid:12)(cid:21)-(cid:19)478(cid:21)(cid:20)(cid:20)(cid:0)(cid:22).(cid:0)0*(cid:21)(cid:0)+(cid:21)0*(cid:22)7(cid:0)2:(cid:0)1*/(cid:28)*(cid:0)5(cid:22)0/(cid:28)(cid:21)(cid:0)/(cid:20)(cid:0),4(cid:22)(cid:29)/7(cid:21)7(cid:0)0(cid:22)(cid:0)/57/(cid:29)/79(cid:19)8(cid:20)(cid:18)(cid:0)0*(cid:21)(cid:0)(cid:13)(cid:21)7(cid:21)4(cid:19)8(cid:0) (cid:0)(cid:26)’(cid:0) (cid:3)4(cid:19)7(cid:21)(cid:0)(cid:17)(cid:22)++/(cid:20)(cid:20)/(cid:22)5(cid:18)(cid:0)(cid:22)4(cid:0)0*(cid:21)(cid:0)+(cid:21)7/(cid:19)(cid:0)957(cid:21)4(cid:0)0*/(cid:20)(cid:0)(cid:2)(cid:21)(cid:28)0/(cid:22)5(cid:18)(cid:0)5(cid:22)0/(cid:28)(cid:21)(cid:0)(cid:22).(cid:0)(cid:19)(cid:0);4(cid:21)(cid:19)(cid:28)*(cid:0)(cid:22).(cid:0)(cid:2)(cid:21)(cid:28)94/0:(cid:0)(cid:20)*(cid:19)88(cid:0)2(cid:21)(cid:0)/5(cid:0) (cid:0)(cid:26)((cid:0) ,8(cid:3)(cid:19)(cid:4)/(cid:5)5(cid:6)(cid:0)8(cid:7)(cid:19)(cid:8)5(cid:3)-(cid:9)9(cid:10)(cid:19)(cid:0)-(cid:21)(cid:12)(cid:0)(cid:19)(cid:10)5(cid:9)7(cid:12)(cid:0)/(cid:0)5(cid:13)(cid:11)(cid:28)8(cid:12)9(cid:0)7(cid:21)(cid:9)(cid:18)(cid:12)(cid:0)0(cid:14)(cid:22)(cid:0)(cid:8)0*(cid:15)(cid:21)(cid:9)(cid:0)(cid:21)(cid:15)A(cid:3)0(cid:0)(cid:21)(cid:15)50(cid:16)(cid:0)(cid:6),(cid:15)(cid:22)(cid:17)(cid:20)(cid:20)(cid:3)/(cid:4)2(cid:11)8(cid:15)(cid:21)(cid:18)(cid:0)0*(cid:21)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0).(cid:0)(cid:0)(cid:22)88(cid:22)1/5-(cid:25)(cid:0)(cid:0)(cid:0) (cid:4)!(cid:4)(cid:7)(cid:0)(cid:9)(cid:15)(cid:8)(cid:7)(cid:3)\"(cid:0)(cid:6)(cid:10)#(cid:14)(cid:9)(cid:15)(cid:3)(cid:0)(cid:8)(cid:15)(cid:10)(cid:0)(cid:3)$(cid:9)(cid:12)(cid:0)(cid:9)(cid:7)(cid:4)(cid:9)(cid:13) (cid:2) (cid:11) (cid:5) (cid:4) (cid:18)(cid:0) (cid:0) (cid:0) (cid:17)(cid:19)(cid:20)(cid:21)(cid:0)(cid:15)(cid:22)(cid:23)(cid:0)(cid:24)(cid:25)(cid:26)(cid:24)(cid:27)(cid:28)(cid:29)(cid:27)(cid:30)(cid:31) (cid:0) (cid:17) (cid:5) (cid:16) (cid:18) (cid:11) (cid:12) (cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0) %(cid:26)(cid:0) (cid:0) (cid:0)\n\nTUVW(cid:0)XYZ[\\]^\\__X‘_\\abc(cid:0)(cid:0)(cid:0)ad]efWgh(cid:0)ij(cid:0)(cid:0)(cid:0)klmWn(cid:0)_ZoipoZ[(cid:0)(cid:0)(cid:0)qUrW(cid:0)i[(cid:0)ds(cid:0)[[ (cid:0) (cid:0)%(cid:0) %(cid:23)(cid:0) (cid:8)(cid:0)*+,(cid:21)-(cid:0).(cid:21)(cid:20)(cid:28)+,/0,(cid:22)1(cid:0)(cid:22)-(cid:0)23(cid:19)0(cid:0)3(cid:19)//(cid:21)1(cid:21).(cid:18)(cid:0),1(cid:28)45.,16(cid:0)03(cid:21)(cid:0).(cid:19)0(cid:21)(cid:0)(cid:22)-(cid:0)03(cid:21)(cid:0)7+(cid:21)(cid:19)(cid:28)3(cid:0)(cid:22)-(cid:0)(cid:2)(cid:21)(cid:28)5+,08(cid:0) (cid:0)(cid:26)(cid:0) (cid:19)1.(cid:0)03(cid:21)(cid:0).(cid:19)0(cid:21)(cid:0)(cid:22)-(cid:0)03(cid:21)(cid:0).,(cid:20)(cid:28)(cid:22)(cid:29)(cid:21)+8(cid:0)(cid:22)-(cid:0)03(cid:21)(cid:0)7+(cid:21)(cid:19)(cid:28)3(cid:0)(cid:22)-(cid:0)(cid:2)(cid:21)(cid:28)5+,08(cid:18)(cid:0),-(cid:0)91(cid:22)21:(cid:0)(cid:0) (cid:0)(cid:24)(cid:0) (cid:26)(cid:23)(cid:0) (cid:8)(cid:0).(cid:21)(cid:20)(cid:28)+,/0,(cid:22)1(cid:0)(cid:22)-(cid:0)03(cid:21)(cid:0)08/(cid:21)(cid:20)(cid:0)(cid:22)-(cid:0)(cid:5)$(cid:12)(cid:0)(cid:4).(cid:21)10,-,(cid:19)*4(cid:21)(cid:0)$(cid:21)(cid:19)403(cid:0)(cid:4)1-(cid:22)+;(cid:19)0,(cid:22)1(cid:0)03(cid:19)0(cid:0)2(cid:21)+(cid:21)(cid:0) (cid:0)(cid:30)(cid:0) ,1(cid:29)(cid:22)4(cid:29)(cid:21).(cid:0),1(cid:0)03(cid:21)(cid:0)7+(cid:21)(cid:19)(cid:28)3(cid:0)(cid:22)-(cid:0)(cid:2)(cid:21)(cid:28)5+,08(cid:0)<(cid:20)5(cid:28)3(cid:0)(cid:19)(cid:20)(cid:0)-544(cid:0)1(cid:19);(cid:21)(cid:18)(cid:0)(cid:2)(cid:22)(cid:28),(cid:19)4(cid:0)(cid:2)(cid:21)(cid:28)5+,08(cid:0)15;*(cid:21)+(cid:18)(cid:0).(cid:19)0(cid:21)(cid:0)(cid:22)-(cid:0)*,+03(cid:18)(cid:0) (cid:0)&(cid:0) 3(cid:22);(cid:21)(cid:0)(cid:19)..+(cid:21)(cid:20)(cid:20)(cid:18)(cid:0)(cid:19)(cid:28)(cid:28)(cid:22)510(cid:0)15;*(cid:21)+(cid:18)(cid:0)(cid:22)+(cid:0).,(cid:20)(cid:19)*,4,08(cid:0)(cid:28)(cid:22).(cid:21)=:(cid:0)(cid:0) (cid:0)(cid:31)(cid:0) (cid:24)(cid:23)(cid:0) (cid:2)0(cid:21)/(cid:20)(cid:0),1.,(cid:29),.5(cid:19)4(cid:20)(cid:0)(cid:20)3(cid:22)54.(cid:0)0(cid:19)9(cid:21)(cid:0)0(cid:22)(cid:0)/+(cid:22)0(cid:21)(cid:28)0(cid:0)03(cid:21);(cid:20)(cid:21)4(cid:29)(cid:21)(cid:20)(cid:0)-+(cid:22);(cid:0)/(cid:22)0(cid:21)10,(cid:19)4(cid:0)3(cid:19)+;(cid:0)+(cid:21)(cid:20)540,16(cid:0) (cid:0)’(cid:0) -+(cid:22);(cid:0)03(cid:21)(cid:0)7+(cid:21)(cid:19)(cid:28)3(cid:0)(cid:22)-(cid:0)(cid:2)(cid:21)(cid:28)5+,08:(cid:0) (cid:0)((cid:0) (cid:30)(cid:23)(cid:0) (cid:8)(cid:0)*+,(cid:21)-(cid:0).(cid:21)(cid:20)(cid:28)+,/0,(cid:22)1(cid:0)(cid:22)-(cid:0)23(cid:19)0(cid:0)03(cid:21)(cid:0)(cid:21)10,08(cid:0)03(cid:19)0(cid:0)(cid:20)5--(cid:21)+(cid:21).(cid:0)03(cid:21)(cid:0)7+(cid:21)(cid:19)(cid:28)3(cid:0)(cid:22)-(cid:0)(cid:2)(cid:21)(cid:28)5+,08(cid:0),(cid:20)(cid:0).(cid:22),16(cid:0) (cid:0))(cid:0) 0(cid:22)(cid:0),1(cid:29)(cid:21)(cid:20)0,6(cid:19)0(cid:21)(cid:0)03(cid:21)(cid:0)*+(cid:21)(cid:19)(cid:28)3(cid:18)(cid:0)0(cid:22)(cid:0);,0,6(cid:19)0(cid:21)(cid:0)3(cid:19)+;(cid:18)(cid:0)(cid:19)1.(cid:0)0(cid:22)(cid:0)/+(cid:22)0(cid:21)(cid:28)0(cid:0)(cid:19)6(cid:19),1(cid:20)0(cid:0)(cid:19)18(cid:0)-5+03(cid:21)+(cid:0)*+(cid:21)(cid:19)(cid:28)3(cid:21)(cid:20):(cid:0)(cid:19)1.(cid:0)(cid:0) (cid:0)% (cid:0) &(cid:23)(cid:0) (cid:17)(cid:22)10(cid:19)(cid:28)0(cid:0)/+(cid:22)(cid:28)(cid:21).5+(cid:21)(cid:20)(cid:0)-(cid:22)+(cid:0),1.,(cid:29),.5(cid:19)4(cid:20)(cid:0)0(cid:22)(cid:0)(cid:19)(cid:20)9(cid:0)>5(cid:21)(cid:20)0,(cid:22)1(cid:20)(cid:0)(cid:22)+(cid:0)4(cid:21)(cid:19)+1(cid:0)(cid:19)..,0,(cid:22)1(cid:19)4(cid:0) (cid:0)%%(cid:0) ,1-(cid:22)+;(cid:19)0,(cid:22)1(cid:18)(cid:0)23,(cid:28)3(cid:0)(cid:20)3(cid:19)44(cid:0),1(cid:28)45.(cid:21)(cid:0)(cid:19)(cid:0)0(cid:22)44-+(cid:21)(cid:21)(cid:0)0(cid:21)4(cid:21)/3(cid:22)1(cid:21)(cid:0)15;*(cid:21)+(cid:18)(cid:0)(cid:19)1(cid:0)(cid:21);(cid:19),4(cid:0)(cid:19)..+(cid:21)(cid:20)(cid:20)(cid:18)(cid:0)2(cid:21)*(cid:20),0(cid:21)(cid:18)(cid:0)(cid:22)+(cid:0)/(cid:22)(cid:20)0(cid:19)4(cid:0) (cid:0)%(cid:26)(cid:0) (cid:19)..+(cid:21)(cid:20)(cid:20)(cid:23)(cid:0) (cid:0)%(cid:24)(cid:0) ?@(cid:0) ABCDEF(cid:0)CB(cid:0)GHFIH(cid:0) (cid:0)%(cid:30)(cid:0) (cid:0) (cid:4)(cid:3)(cid:0)(cid:4)(cid:2)(cid:0)(cid:13)(cid:6)(cid:12)(cid:3)$(cid:9)(cid:12)(cid:0)(cid:11)(cid:12)(cid:10)(cid:9)(cid:12)(cid:9)(cid:10)(cid:0)03(cid:19)0(cid:18)(cid:0)2,03,1(cid:0)-(cid:22)5+0(cid:21)(cid:21)1(cid:0)<%(cid:30)=(cid:0).(cid:19)8(cid:20)(cid:0)(cid:22)-(cid:0)(cid:21)10+8(cid:0)(cid:22)-(cid:0)03,(cid:20)(cid:0)(cid:11)+.(cid:21)+(cid:18)(cid:0) (cid:0)%&(cid:0) (cid:10)(cid:21)-(cid:21)1.(cid:19)10(cid:0)(cid:20)3(cid:19)44(cid:0)/(cid:22)(cid:20)0(cid:0)(cid:17)4(cid:21)(cid:19)+48(cid:0)(cid:19)1.(cid:0)(cid:17)(cid:22)1(cid:20)/,(cid:28)5(cid:22)5(cid:20)48(cid:0)(cid:22)1(cid:0)(cid:10)(cid:21)-(cid:21)1.(cid:19)10J(cid:20)(cid:0)2(cid:21)*(cid:20),0(cid:21)(cid:20)(cid:0)(cid:19)1.(cid:0);(cid:22)*,4(cid:21)(cid:0) (cid:0)%(cid:31)(cid:0) (cid:19)//4,(cid:28)(cid:19)0,(cid:22)1(cid:20)(cid:18)(cid:0),1(cid:28)45.,16(cid:18)(cid:0)222(cid:23)#(cid:22)(cid:22).(cid:12)K(cid:23)(cid:28)(cid:22);(cid:18)(cid:0)222(cid:23)6(cid:22)4.(cid:23)6(cid:22)(cid:22).+K(cid:23)(cid:28)(cid:22);L4(cid:22)6,1(cid:18)(cid:0) (cid:0)%’(cid:0) 222(cid:23)#(cid:22)(cid:22).+K(cid:23)(cid:28)(cid:22);L(cid:28)(cid:19)+(cid:21)L4(cid:22)6,1(cid:18)(cid:0)03(cid:21)(cid:0)#(cid:22)(cid:22).(cid:12)K(cid:0)(cid:17)(cid:19)+(cid:21)(cid:0);(cid:22)*,4(cid:21)(cid:0)(cid:19)//4,(cid:28)(cid:19)0,(cid:22)1(cid:18)(cid:0)(cid:19)1.(cid:0)03(cid:21)(cid:0)#(cid:22)(cid:22).(cid:12)K(cid:0) (cid:0)%((cid:0) /+(cid:21)(cid:20)(cid:28)+,/0,(cid:22)1(cid:0)(cid:28)(cid:22)5/(cid:22)1(cid:0);(cid:22)*,4(cid:21)(cid:0)(cid:19)//4,(cid:28)(cid:19)0,(cid:22)1(cid:20)(cid:18)(cid:0)(cid:19)(cid:0)4,19(cid:0)0(cid:22)(cid:0)(cid:19)1(cid:0)(cid:21)K(cid:19)(cid:28)0(cid:0)(cid:28)(cid:22)/8(cid:0)(cid:22)-(cid:0)03(cid:21)(cid:0)1(cid:22)0,(cid:28)(cid:21)(cid:0)(cid:19)00(cid:19)(cid:28)3(cid:21).(cid:0)3(cid:21)+(cid:21)0(cid:22)(cid:0)(cid:19)(cid:20)(cid:0) (cid:0)%)(cid:0) (cid:9)K3,*,0(cid:0)(cid:8)(cid:0)<M(cid:15)(cid:22)0,(cid:28)(cid:21)N=(cid:0)(cid:19)1.(cid:0)(cid:21);(cid:19),4(cid:0)03(cid:21)(cid:0)(cid:15)(cid:22)0,(cid:28)(cid:21)(cid:0)0(cid:22)(cid:0)(cid:19)44(cid:0)(cid:17)(cid:22)(cid:29)(cid:21)+(cid:21).(cid:0)(cid:6)(cid:20)(cid:21)+(cid:20)(cid:0)-(cid:22)+(cid:0)23(cid:22);(cid:0)(cid:10)(cid:21)-(cid:21)1.(cid:19)10(cid:0)3(cid:19)(cid:20)(cid:0)(cid:21);(cid:19),4(cid:0) (cid:0)(cid:26) (cid:0) ,1-(cid:22)+;(cid:19)0,(cid:22)1(cid:23)(cid:0)(cid:0)(cid:10)(cid:21)-(cid:21)1.(cid:19)10(cid:0)(cid:20)3(cid:19)44(cid:0)1(cid:22)0(cid:0),1(cid:28)45.(cid:21)(cid:0)2,03(cid:0)03(cid:21)(cid:0)(cid:15)(cid:22)0,(cid:28)(cid:21)(cid:0)(cid:19)18(cid:0)(cid:22)03(cid:21)+(cid:0),1-(cid:22)+;(cid:19)0,(cid:22)1(cid:18)(cid:0).(cid:22)(cid:28)5;(cid:21)10(cid:20)(cid:18)(cid:0)(cid:22)+(cid:0) (cid:0)(cid:26)%(cid:0) (cid:19)00(cid:19)(cid:28)3;(cid:21)10(cid:20)(cid:23)(cid:0)(cid:0)(cid:10)(cid:21)-(cid:21)1.(cid:19)10(cid:0)(cid:20)3(cid:19)44(cid:0)9(cid:21)(cid:21)/(cid:0)03(cid:21)(cid:0)1(cid:22)0,(cid:28)(cid:21)(cid:0)/(cid:22)(cid:20)0(cid:21).(cid:0)(cid:22)1(cid:0)03(cid:21)(cid:0)(cid:19)*(cid:22)(cid:29)(cid:21)(cid:27)4,(cid:20)0(cid:21).(cid:0)2(cid:21)*(cid:20),0(cid:21)(cid:20)(cid:0)(cid:19)1.(cid:0);(cid:22)*,4(cid:21)(cid:0) (cid:0)(cid:26)(cid:26)(cid:0) (cid:19)//4,(cid:28)(cid:19)0,(cid:22)1(cid:20)(cid:0)(cid:28)(cid:22)10,15(cid:22)5(cid:20)48(cid:0)-(cid:22)+(cid:0)(cid:19)(cid:0)/(cid:21)+,(cid:22).(cid:0)(cid:22)-(cid:0)(cid:22)1(cid:21)(cid:0)351.+(cid:21).(cid:0)(cid:19)1.(cid:0)(cid:21),6308(cid:0)<%( =(cid:0).(cid:19)8(cid:20)(cid:0)-(cid:22)44(cid:22)2,16(cid:0)03(cid:21)(cid:0).(cid:19)0(cid:21)(cid:0) (cid:0)(cid:26)(cid:24)(cid:0) (cid:22)-(cid:0)(cid:21)10+8(cid:0)(cid:22)-(cid:0)03,(cid:20)(cid:0)(cid:11)+.(cid:21)+(cid:23)(cid:0)(cid:0) (cid:0)(cid:26)(cid:30)(cid:0) ?D@(cid:0) OFPFCDBA(cid:0)BQ(cid:0)EB?FIFO(cid:0)DAQBIRSCDBA(cid:0)\n\n(cid:0)(cid:26)(cid:30)(cid:0) ?D@(cid:0) OFPFCDBA(cid:0)BQ(cid:0)EB?FIFO(cid:0)DAQBIRSCDBA(cid:0) (cid:0)(cid:26)&(cid:0) (cid:0) (cid:4)(cid:3)(cid:0)(cid:4)(cid:2)(cid:0)(cid:13)(cid:6)(cid:12)(cid:3)$(cid:9)(cid:12)(cid:0)(cid:11)(cid:12)(cid:10)(cid:9)(cid:12)(cid:9)(cid:10)(cid:0)03(cid:19)0(cid:18)(cid:0)2,03,1(cid:0)(cid:20),K08(cid:0)<(cid:31) =(cid:0).(cid:19)8(cid:20)(cid:0)(cid:22)-(cid:0)(cid:21)10+8(cid:0)(cid:22)-(cid:0)03,(cid:20)(cid:0)(cid:11)+.(cid:21)+(cid:25)(cid:0) (cid:0)(cid:26)(cid:31)(cid:0) (cid:8)(cid:23)(cid:0) (cid:10)(cid:21)-(cid:21)1.(cid:19)10(cid:0);5(cid:20)0(cid:0),.(cid:21)10,-8(cid:0)(cid:19)44(cid:0)(cid:3)3,+.(cid:0)(cid:5)(cid:19)+0,(cid:21)(cid:20)(cid:0)(cid:19)1.(cid:0)(cid:19)44(cid:0)(cid:21)10,0,(cid:21)(cid:20)(cid:0),.(cid:21)10,-,(cid:21).(cid:0),1(cid:0)03(cid:21)(cid:0) (cid:0)(cid:26)’(cid:0) (cid:17)(cid:22);/4(cid:19),10(cid:0)<M(cid:17)(cid:22);/4(cid:19),10(cid:0)(cid:9)10,08N(cid:0)(cid:22)+(cid:0)M(cid:17)(cid:22);/4(cid:19),10(cid:0)(cid:9)10,0,(cid:21)(cid:20)N=(cid:0)03(cid:19)0(cid:0)+(cid:21)(cid:28)(cid:21),(cid:29)(cid:21).(cid:0)$(cid:21)(cid:19)403(cid:0)(cid:4)1-(cid:22)+;(cid:19)0,(cid:22)1(cid:18)(cid:0) (cid:0)(cid:26)((cid:0) ,.(cid:3)(cid:21)(cid:4)1(cid:5)0(cid:6),-(cid:7)8(cid:8)(cid:0)0(cid:3)3(cid:9)(cid:21)(cid:10)(cid:0)(cid:17)(cid:0)(cid:22)(cid:12)(cid:29)(cid:10)(cid:21)(cid:9)+(cid:21)(cid:12).(cid:0)(cid:13)(cid:0)(cid:4)(cid:11)1(cid:12)-(cid:22)(cid:0)+(cid:9);(cid:12)(cid:19)(cid:14)0,(cid:8)(cid:22)(cid:15)1(cid:0)(cid:9)(cid:22)(cid:15)-(cid:0)(cid:3)(cid:17)(cid:0)(cid:22)(cid:15)(cid:29)(cid:16)(cid:6)(cid:21)+(cid:15)(cid:21)(cid:17).(cid:3)(cid:0)(cid:6)(cid:4)(cid:11)(cid:20)(cid:15)(cid:21)+(cid:20)(cid:0)+(cid:0)(cid:21)(cid:0)(cid:0)(cid:28)(cid:0)(cid:0)(cid:21)(cid:0),(cid:29)(cid:21).(cid:0)*8(cid:0)(cid:21)(cid:19)(cid:28)3(cid:0)(cid:0)(cid:20)5(cid:28)3(cid:0)(cid:3)3,+.(cid:0)(cid:5)(cid:19)+08(cid:0)(cid:22)+(cid:0) (cid:4)!(cid:4)(cid:7)(cid:0)(cid:9)(cid:15)(cid:8)(cid:7)(cid:3)\"(cid:0)(cid:6)(cid:10)#(cid:14)(cid:9)(cid:15)(cid:3)(cid:0)(cid:8)(cid:15)(cid:10)(cid:0)(cid:3)$(cid:9)(cid:12)(cid:0)(cid:9)(cid:7)(cid:4)(cid:9)(cid:13) (cid:2) (cid:11) (cid:5) (cid:4) (cid:18)(cid:0) (cid:0) (cid:0) (cid:17)(cid:19)(cid:20)(cid:21)(cid:0)(cid:15)(cid:22)(cid:23)(cid:0)(cid:24)(cid:25)(cid:26)(cid:24)(cid:27)(cid:28)(cid:29)(cid:27)(cid:30)(cid:31) (cid:0) (cid:17) (cid:5) (cid:16) (cid:18) (cid:11) (cid:12) (cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0) %(cid:24)(cid:0) (cid:0) (cid:0) EFGH(cid:0)IJKLMNOMPPIQPMRST(cid:0)(cid:0)(cid:0)RUNVWHXY(cid:0)Z[(cid:0)(cid:0)(cid:0)\\]^H_(cid:0)PK‘Za‘KL(cid:0)(cid:0)(cid:0)bFcH(cid:0)ZI(cid:0)Ud(cid:0)LL (cid:0) (cid:0)%(cid:0) (cid:17)(cid:22)*+,(cid:19)-./(cid:0)(cid:9)./-/-(cid:21)(cid:20)(cid:18)(cid:0)+0(cid:22)(cid:29)-1(cid:21)(cid:0)(cid:19)(cid:0)(cid:28)(cid:22)+2(cid:0)(cid:22)3(cid:0)/4(cid:21)(cid:0)(cid:17)(cid:22)*+,(cid:19)-./(cid:0)(cid:19).1(cid:0)(cid:11)01(cid:21)0(cid:0)/(cid:22)(cid:0)(cid:19),,(cid:0)(cid:3)4-01(cid:0)(cid:5)(cid:19)0/-(cid:21)(cid:20)(cid:0)(cid:19).1(cid:0) (cid:0)(cid:26)(cid:0) (cid:17)(cid:22)*+,(cid:19)-./(cid:0)(cid:9)./-/-(cid:21)(cid:20)(cid:0)/4(cid:19)/(cid:0)0(cid:21)(cid:28)(cid:21)-(cid:29)(cid:21)1(cid:0)$(cid:21)(cid:19),/4(cid:0)(cid:4).3(cid:22)0*(cid:19)/-(cid:22).(cid:0)(cid:22)3(cid:0)(cid:17)(cid:22)(cid:29)(cid:21)0(cid:21)1(cid:0)(cid:6)(cid:20)(cid:21)0(cid:20)(cid:18)(cid:0).(cid:22)/-32(cid:0)(cid:19),,(cid:0)(cid:20)5(cid:28)4(cid:0)(cid:3)4-01(cid:0) (cid:0)(cid:24)(cid:0) (cid:5)(cid:19)0/-(cid:21)(cid:20)(cid:0)(cid:19).1(cid:0)(cid:17)(cid:22)*+,(cid:19)-./(cid:0)(cid:9)./-/-(cid:21)(cid:20)(cid:0)-.(cid:0)60-/-.7(cid:0)/4(cid:19)/(cid:0)/4(cid:21)(cid:0)(cid:13)(cid:21)1(cid:21)0(cid:19),(cid:0)(cid:3)0(cid:19)1(cid:21)(cid:0)(cid:17)(cid:22)**-(cid:20)(cid:20)-(cid:22).(cid:0)(cid:19),,(cid:21)7(cid:21)(cid:20)(cid:0)/4(cid:19)/(cid:0) (cid:0)(cid:30)(cid:0) (cid:10)(cid:21)3(cid:21).1(cid:19)./(cid:0)1-(cid:20)(cid:28),(cid:22)(cid:20)(cid:21)1(cid:0)(cid:17)(cid:22)(cid:29)(cid:21)0(cid:21)1(cid:0)(cid:4).3(cid:22)0*(cid:19)/-(cid:22).(cid:0)(cid:22)3(cid:0)(cid:17)(cid:22)(cid:29)(cid:21)0(cid:21)1(cid:0)(cid:6)(cid:20)(cid:21)0(cid:20)(cid:0)/(cid:22)(cid:0)/4(cid:21)*(cid:0)-.(cid:0)(cid:19)(cid:0)*(cid:19)..(cid:21)0(cid:0)/4(cid:19)/(cid:0)6(cid:19)(cid:20)(cid:0)5.3(cid:19)-0(cid:0) (cid:0)&(cid:0) (cid:22)0(cid:0)1(cid:21)(cid:28)(cid:21)+/-(cid:29)(cid:21)(cid:0)(cid:19).1(cid:0)-.(cid:0)(cid:29)-(cid:22),(cid:19)/-(cid:22).(cid:0)(cid:22)3(cid:0)/4(cid:21)(cid:0)(cid:13)(cid:3)(cid:17)(cid:0)(cid:8)(cid:28)/(cid:18)(cid:0)-.(cid:20)/05(cid:28)/(cid:0)(cid:19),,(cid:0)(cid:20)5(cid:28)4(cid:0)(cid:3)4-01(cid:0)(cid:5)(cid:19)0/-(cid:21)(cid:20)(cid:0)(cid:19).1(cid:0)(cid:17)(cid:22)*+,(cid:19)-./(cid:0) (cid:0)(cid:31)(cid:0) (cid:9)./-/-(cid:21)(cid:20)(cid:0)/(cid:22)(cid:0)(cid:10)(cid:21),(cid:21)/(cid:21)(cid:0)(cid:19),,(cid:0)(cid:17)(cid:22)(cid:29)(cid:21)0(cid:21)1(cid:0)(cid:4).3(cid:22)0*(cid:19)/-(cid:22).(cid:0)(cid:22)3(cid:0)(cid:17)(cid:22)(cid:29)(cid:21)0(cid:21)1(cid:0)(cid:6)(cid:20)(cid:21)0(cid:20)(cid:0)0(cid:21)(cid:28)(cid:21)-(cid:29)(cid:21)1(cid:0)30(cid:22)*(cid:0)(cid:10)(cid:21)3(cid:21).1(cid:19)./(cid:18)(cid:0)(cid:19).1(cid:0) (cid:0)’(cid:0) 1(cid:21)*(cid:19).1(cid:0)60-//(cid:21).(cid:0)(cid:28)(cid:22).3-0*(cid:19)/-(cid:22).(cid:0)/4(cid:19)/(cid:0)(cid:19),,(cid:0)/4(cid:21)(cid:0)-1(cid:21)./-3-(cid:21)1(cid:0)(cid:17)(cid:22)(cid:29)(cid:21)0(cid:21)1(cid:0)(cid:4).3(cid:22)0*(cid:19)/-(cid:22).(cid:0)4(cid:19)(cid:20)(cid:0)8(cid:21)(cid:21).(cid:0)(cid:10)(cid:21),(cid:21)/(cid:21)1(cid:23)(cid:0)(cid:0) (cid:0)((cid:0) (cid:10)(cid:21)3(cid:21).1(cid:19)./9(cid:20)(cid:0)-.(cid:20)/05(cid:28)/-(cid:22).(cid:0)/(cid:22)(cid:0)(cid:21)(cid:19)(cid:28)4(cid:0)(cid:20)5(cid:28)4(cid:0)(cid:3)4-01(cid:0)(cid:5)(cid:19)0/2(cid:0)(cid:19).1(cid:0)(cid:17)(cid:22)*+,(cid:19)-./(cid:0)(cid:9)./-/-(cid:21)(cid:20)(cid:0)(cid:20)4(cid:19),,(cid:0)-.(cid:28),51(cid:21)(cid:0)(cid:19)(cid:0) (cid:0))(cid:0) 1(cid:21)(cid:20)(cid:28)0-+/-(cid:22).(cid:0)(cid:22)3(cid:0)/4(cid:21)(cid:0)(cid:17)(cid:22)(cid:29)(cid:21)0(cid:21)1(cid:0)(cid:4).3(cid:22)0*(cid:19)/-(cid:22).(cid:0)(cid:22)3(cid:0)(cid:17)(cid:22)(cid:29)(cid:21)0(cid:21)1(cid:0)(cid:6)(cid:20)(cid:21)0(cid:20)(cid:0)(cid:20)4(cid:19)0(cid:21)1(cid:0)6-/4(cid:0)/4(cid:21)(cid:0)(cid:3)4-01(cid:0)(cid:5)(cid:19)0/2(cid:0)(cid:22)0(cid:0) (cid:0)% (cid:0) (cid:17)(cid:22)*+,(cid:19)-./(cid:0)(cid:9)./-/-(cid:21)(cid:20)(cid:23)(cid:0)(cid:0)(cid:10)(cid:21)3(cid:21).1(cid:19)./(cid:0)*5(cid:20)/(cid:0)+0(cid:22)(cid:29)-1(cid:21)(cid:0)(cid:19),,(cid:0)-.(cid:20)/05(cid:28)/-(cid:22).(cid:20)(cid:0)(cid:20)(cid:21)./(cid:0)/(cid:22)(cid:0)/4(cid:21)(cid:0)(cid:3)4-01(cid:0)(cid:5)(cid:19)0/-(cid:21)(cid:20)(cid:0)(cid:19).1(cid:0) (cid:0)%%(cid:0) (cid:17)(cid:22)*+,(cid:19)-./(cid:0)(cid:9)./-/-(cid:21)(cid:20)(cid:0)/(cid:22)(cid:25)(cid:0)(cid:10)(cid:9)80-(cid:21)3:3/(cid:28)(cid:23)7(cid:22)(cid:29)(cid:0)(cid:22)0(cid:0)(cid:20)(cid:21)./(cid:0)82(cid:0)(cid:22)(cid:29)(cid:21)0.-74/(cid:0)(cid:28)(cid:22)50-(cid:21)0(cid:0);.(cid:22)/(cid:0)/4(cid:21)(cid:0)(cid:6)(cid:23)(cid:2)(cid:23)(cid:0)(cid:5)(cid:22)(cid:20)/(cid:19),(cid:0) (cid:0)%(cid:26)(cid:0) (cid:2)(cid:21)0(cid:29)-(cid:28)(cid:21)<(cid:0)/(cid:22)(cid:25)(cid:0)(cid:8)(cid:20)(cid:20)(cid:22)(cid:28)-(cid:19)/(cid:21)(cid:0)(cid:10)-0(cid:21)(cid:28)/(cid:22)0(cid:0)3(cid:22)0(cid:0)(cid:9).3(cid:22)0(cid:28)(cid:21)*(cid:21)./(cid:18)(cid:0)=50(cid:21)(cid:19)5(cid:0)(cid:22)3(cid:0)(cid:17)(cid:22).(cid:20)5*(cid:21)0(cid:0)(cid:5)0(cid:22)/(cid:21)(cid:28)/-(cid:22).(cid:18)(cid:0)(cid:13)(cid:21)1(cid:21)0(cid:19),(cid:0)(cid:3)0(cid:19)1(cid:21)(cid:0) (cid:0)%(cid:24)(cid:0) (cid:17)(cid:22)**-(cid:20)(cid:20)-(cid:22).(cid:18)(cid:0)(cid:31) (cid:0)(cid:5)(cid:21)..(cid:20)2,(cid:29)(cid:19).-(cid:19)(cid:0)(cid:8)(cid:29)(cid:21).5(cid:21)(cid:0)(cid:15)>(cid:18)(cid:0)>(cid:19)(cid:20)4-.7/(cid:22).(cid:18)(cid:0)(cid:10)(cid:17)(cid:0)(cid:26) &( (cid:23)(cid:0)(cid:0)(cid:3)4(cid:21)(cid:0)(cid:20)58?(cid:21)(cid:28)/(cid:0),-.(cid:21)(cid:0)*5(cid:20)/(cid:0) (cid:0)%(cid:30)(cid:0) 8(cid:21)7-.(cid:25)(cid:0)@(cid:6)(cid:23)(cid:2)(cid:23)(cid:0)(cid:29)(cid:23)(cid:0)#(cid:22)(cid:22)1(cid:12)A(cid:0)$(cid:22),1-.7(cid:20)(cid:18)(cid:0)(cid:4).(cid:28)(cid:23)B(cid:0) (cid:0)%&(cid:0) =(cid:23)(cid:0) (cid:0)(cid:10)(cid:21)3(cid:21).1(cid:19)./(cid:0)(cid:20)4(cid:19),,(cid:0).(cid:22)/(cid:0)1-(cid:20)(cid:28),(cid:22)(cid:20)(cid:21)(cid:0)(cid:19).2(cid:0)(cid:17)(cid:22)(cid:29)(cid:21)0(cid:21)1(cid:0)(cid:4).3(cid:22)0*(cid:19)/-(cid:22).(cid:0)-.(cid:0)(cid:19).2(cid:0)3(cid:22)0*(cid:18)(cid:0)-.(cid:28),51-.7(cid:0) (cid:0)%(cid:31)(cid:0) 4(cid:19)(cid:20)4(cid:21)1(cid:0)(cid:22)0(cid:0)(cid:21).(cid:28)02+/(cid:21)1(cid:0)(cid:17)(cid:22)(cid:29)(cid:21)0(cid:21)1(cid:0)(cid:4).3(cid:22)0*(cid:19)/-(cid:22).(cid:18)(cid:0)/(cid:22)(cid:0)(cid:19).2(cid:0)(cid:3)4-01(cid:0)(cid:5)(cid:19)0/2(cid:0)(cid:22)0(cid:0)(cid:17)(cid:22)*+,(cid:19)-./(cid:0)(cid:9)./-/-(cid:21)(cid:20)(cid:0)-1(cid:21)./-3-(cid:21)1(cid:0)-.(cid:0) (cid:0)%’(cid:0) (cid:2)58(cid:20)(cid:21)(cid:28)/-(cid:22).(cid:0)(cid:8)(cid:0)(cid:19)8(cid:22)(cid:29)(cid:21)(cid:0)5./-,(cid:0)(cid:10)(cid:21)3(cid:21).1(cid:19)./(cid:0)(cid:28)(cid:22).3-0*(cid:20)(cid:0)(cid:21)(cid:19)(cid:28)4(cid:0)(cid:3)4-01(cid:0)(cid:5)(cid:19)0/2(cid:0)(cid:19).1(cid:0)(cid:17)(cid:22)*+,(cid:19)-./(cid:0)(cid:9)./-/29(cid:20)(cid:0)0(cid:21)(cid:28)(cid:21)-+/(cid:0)(cid:22)3(cid:0) (cid:0)%((cid:0) /4(cid:21)(cid:0)-.(cid:20)/05(cid:28)/-(cid:22).(cid:20)(cid:0)0(cid:21)C5-0(cid:21)1(cid:0)82(cid:0)(cid:2)58(cid:20)(cid:21)(cid:28)/-(cid:22).(cid:0)(cid:8)(cid:0)(cid:19)8(cid:22)(cid:29)(cid:21)(cid:23)(cid:0)(cid:0)(cid:10)(cid:21)3(cid:21).1(cid:19)./(cid:0)*5(cid:20)/(cid:0)+0(cid:22)(cid:29)-1(cid:21)(cid:0)(cid:19),,(cid:0)0(cid:21)(cid:28)(cid:21)-+/(cid:20)(cid:0)(cid:22)3(cid:0) (cid:0)%)(cid:0) (cid:28)(cid:22).3-0*(cid:19)/-(cid:22).(cid:0)(cid:19).1(cid:0)(cid:19).2(cid:0)0(cid:21)(cid:20)+(cid:22).(cid:20)(cid:21)(cid:20)(cid:0)30(cid:22)*(cid:0)(cid:3)4-01(cid:0)(cid:5)(cid:19)0/-(cid:21)(cid:20)(cid:0)(cid:22)0(cid:0)(cid:17)(cid:22)*+,(cid:19)-./(cid:0)(cid:9)./-/-(cid:21)(cid:20)(cid:0)6-/4-.(cid:0)3-(cid:29)(cid:21)(cid:0);&<(cid:0)1(cid:19)2(cid:20)(cid:0)(cid:22)3(cid:0) (cid:0)(cid:26) (cid:0) 0(cid:21)(cid:28)(cid:21)-+/(cid:0)/(cid:22)(cid:25)(cid:0)(cid:10)(cid:9)80-(cid:21)3:3/(cid:28)(cid:23)7(cid:22)(cid:29)(cid:0)(cid:22)0(cid:0)(cid:20)(cid:21)./(cid:0)82(cid:0)(cid:22)(cid:29)(cid:21)0.-74/(cid:0)(cid:28)(cid:22)50-(cid:21)0(cid:0);.(cid:22)/(cid:0)/4(cid:21)(cid:0)(cid:6)(cid:23)(cid:2)(cid:23)(cid:0)(cid:5)(cid:22)(cid:20)/(cid:19),(cid:0)(cid:2)(cid:21)0(cid:29)-(cid:28)(cid:21)<(cid:0)/(cid:22)(cid:25)(cid:0) (cid:0)(cid:26)%(cid:0) (cid:8)(cid:20)(cid:20)(cid:22)(cid:28)-(cid:19)/(cid:21)(cid:0)(cid:10)-0(cid:21)(cid:28)/(cid:22)0(cid:0)3(cid:22)0(cid:0)(cid:9).3(cid:22)0(cid:28)(cid:21)*(cid:21)./(cid:18)(cid:0)=50(cid:21)(cid:19)5(cid:0)(cid:22)3(cid:0)(cid:17)(cid:22).(cid:20)5*(cid:21)0(cid:0)(cid:5)0(cid:22)/(cid:21)(cid:28)/-(cid:22).(cid:18)(cid:0)(cid:13)(cid:21)1(cid:21)0(cid:19),(cid:0)(cid:3)0(cid:19)1(cid:21)(cid:0) (cid:0)(cid:26)(cid:26)(cid:0) (cid:17)(cid:22)**-(cid:20)(cid:20)-(cid:22).(cid:18)(cid:0)(cid:31) (cid:0)(cid:5)(cid:21)..(cid:20)2,(cid:29)(cid:19).-(cid:19)(cid:0)(cid:8)(cid:29)(cid:21).5(cid:21)(cid:0)(cid:15)>(cid:18)(cid:0)>(cid:19)(cid:20)4-.7/(cid:22).(cid:18)(cid:0)(cid:10)(cid:17)(cid:0)(cid:26) &( (cid:23)(cid:0)(cid:0)(cid:3)4(cid:21)(cid:0)(cid:20)58?(cid:21)(cid:28)/(cid:0),-.(cid:21)(cid:0)*5(cid:20)/(cid:0) (cid:0)(cid:26)(cid:24)(cid:0) 8(cid:21)7-.(cid:25)(cid:0)@(cid:6)(cid:23)(cid:2)(cid:23)(cid:0)(cid:29)(cid:23)(cid:0)#(cid:22)(cid:22)1(cid:12)A(cid:0)$(cid:22),1-.7(cid:20)(cid:18)(cid:0)(cid:4).(cid:28)(cid:23)B(cid:0) (cid:0)(cid:26)(cid:30)(cid:0) (cid:17)(cid:23)(cid:0) (cid:10)(cid:21)3(cid:21).1(cid:19)./(cid:0)(cid:20)4(cid:19),,(cid:0).(cid:22)/(cid:0)5(cid:20)(cid:21)(cid:0)(cid:19).2(cid:0)(cid:3)4-01(cid:0)(cid:5)(cid:19)0/2(cid:0)(cid:22)0(cid:0)(cid:17)(cid:22)*+,(cid:19)-./(cid:0)(cid:9)./-/2(cid:0)-1(cid:21)./-3-(cid:21)1(cid:0)-.(cid:0) (cid:0)(cid:26)&(cid:0) (cid:2)58(cid:20)(cid:21)(cid:28)/-(cid:22).(cid:0)(cid:8)(cid:0)(cid:19)8(cid:22)(cid:29)(cid:21)(cid:0)/(cid:22)(cid:0)(cid:19)1(cid:29)(cid:21)0/-(cid:20)(cid:21)(cid:18)(cid:0)*(cid:19)0D(cid:21)/(cid:18)(cid:0)+0(cid:22)*(cid:22)/(cid:21)(cid:18)(cid:0)(cid:22)33(cid:21)0(cid:18)(cid:0)(cid:22)33(cid:21)0(cid:0)3(cid:22)0(cid:0)(cid:20)(cid:19),(cid:21)(cid:18)(cid:0)(cid:22)0(cid:0)(cid:20)(cid:21),,(cid:0)(cid:19).2(cid:0)+0(cid:22)15(cid:28)/(cid:0)(cid:22)0(cid:0) (cid:0)(cid:26)(cid:31)(cid:0) (cid:20)(cid:21)0(cid:29)-(cid:28)(cid:21)(cid:0)5./-,(cid:0)(cid:10)(cid:21)3(cid:21).1(cid:19)./(cid:0)(cid:28)(cid:22).3-0*(cid:20)(cid:0)(cid:21)(cid:19)(cid:28)4(cid:0)(cid:3)4-01(cid:0)(cid:5)(cid:19)0/2(cid:0)(cid:19).1(cid:0)(cid:17)(cid:22)*+,(cid:19)-./(cid:0)(cid:9)./-/29(cid:20)(cid:0)0(cid:21)(cid:28)(cid:21)-+/(cid:0)(cid:22)3(cid:0)/4(cid:21)(cid:0) (cid:0)(cid:26)’(cid:0) -.(cid:20)/05(cid:28)/-(cid:22).(cid:20)(cid:0)0(cid:21)C5-0(cid:21)1(cid:0)82(cid:0)(cid:2)58(cid:20)(cid:21)(cid:28)/-(cid:22).(cid:0)(cid:8)(cid:0)(cid:19)8(cid:22)(cid:29)(cid:21)(cid:23)(cid:0)(cid:0)(cid:0) (cid:3)(cid:4)(cid:5)(cid:6)(cid:7)(cid:8)(cid:3)(cid:9)(cid:10)(cid:0)(cid:12)(cid:10)(cid:9)(cid:12)(cid:0)(cid:13)(cid:11)(cid:12)(cid:0)(cid:9)(cid:12)(cid:14)(cid:8)(cid:15)(cid:9)(cid:15)(cid:3)(cid:0)(cid:15)(cid:16)(cid:6)(cid:15)(cid:17)(cid:3)(cid:4)(cid:11)(cid:15) (cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0) (cid:0) (cid:0)(cid:26)((cid:0) (cid:4)!(cid:4)(cid:7)(cid:0)(cid:9)(cid:15)(cid:8)(cid:7)(cid:3)\"(cid:0)(cid:6)(cid:10)#(cid:14)(cid:9)(cid:15)(cid:3)(cid:0)(cid:8)(cid:15)(cid:10)(cid:0)(cid:3)$(cid:9)(cid:12)(cid:0)(cid:9)(cid:7)(cid:4)(cid:9)(cid:13) (cid:2) (cid:11) (cid:5) (cid:4) (cid:18)(cid:0) (cid:0) (cid:0) (cid:17)(cid:19)(cid:20)(cid:21)(cid:0)(cid:15)(cid:22)(cid:23)(cid:0)(cid:24)(cid:25)(cid:26)(cid:24)(cid:27)(cid:28)(cid:29)(cid:27)(cid:30)(cid:31) (cid:0) (cid:17) (cid:5) (cid:16) (cid:18) (cid:11) (cid:12) (cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0) %(cid:30)(cid:0) (cid:0) (cid:0)",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Order Administration"
      ],
      "case_id": "02.23_goodrx_holdings",
      "company_name": "GoodRx Holdings, Inc.",
      "date_issued": "2023-02-15",
      "year": 2023,
      "administration": "Biden",
      "legal_authority": "Sections 5(a)(1), 5(m)(1)(A), 13(b), 16(a)(1), and 19 of the Federal Trade Commission Act, 15 U.S.C. §§ 45(a)(1), 45(m)(1)(A), 53(b), 56(a)(1), 57b, and the Health Breach Notification Rule, 16 C.F.R. § 318",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/2023090-goodrx-holdings-inc",
      "docket_number": "23-cv-460"
    },
    {
      "provision_number": "V",
      "title": "Privacy Program",
      "category": "affirmative_obligation",
      "summary": "Defendant must establish and maintain a comprehensive privacy program that protects the privacy and confidentiality of Covered Information, including safeguards, controls, data retention limits, and service provider oversight.",
      "verbatim_text": "(cid:0)%(cid:0) *++,(cid:0) -./0.120(cid:0)34+*.56(cid:0)34784.-(cid:0) (cid:0)(cid:26)(cid:0) (cid:0) (cid:4)(cid:3)(cid:0)(cid:4)(cid:2)(cid:0)(cid:13)(cid:6)(cid:12)(cid:3)$(cid:9)(cid:12)(cid:0)(cid:11)(cid:12)(cid:10)(cid:9)(cid:12)(cid:9)(cid:10)(cid:0)9:(cid:19)9(cid:0)(cid:19);<(cid:0)(cid:17)(cid:22)(cid:29)(cid:21)=(cid:21)>(cid:0)?@(cid:20)A;(cid:21)(cid:20)(cid:20)(cid:18)(cid:0)A;(cid:0)(cid:28)(cid:22);;(cid:21)(cid:28)9A(cid:22);(cid:0)BA9:(cid:0)9:(cid:21)(cid:0) (cid:0)(cid:24)(cid:0) (cid:28)(cid:22)CC(cid:21)(cid:28)9A(cid:22);(cid:18)(cid:0)D(cid:19)A;9(cid:21);(cid:19);(cid:28)(cid:21)(cid:18)(cid:0)@(cid:20)(cid:21)(cid:18)(cid:0)>A(cid:20)(cid:28)C(cid:22)(cid:20)@=(cid:21)(cid:0)(cid:22)E(cid:18)(cid:0)(cid:22)=(cid:0)F=(cid:22)(cid:29)A(cid:20)A(cid:22);(cid:0)(cid:22)E(cid:0)(cid:19)(cid:28)(cid:28)(cid:21)(cid:20)(cid:20)(cid:0)9(cid:22)(cid:18)(cid:0)(cid:17)(cid:22)(cid:29)(cid:21)=(cid:21)>(cid:0)(cid:4);E(cid:22)=D(cid:19)9A(cid:22);(cid:18)(cid:0)D@(cid:20)9(cid:18)(cid:0) (cid:0)(cid:30)(cid:0) BA9:A;(cid:0)(cid:22);(cid:21)(cid:0):@;>=(cid:21)>(cid:0)(cid:21)AG:9<(cid:0)H%( I(cid:0)>(cid:19)<(cid:20)(cid:0)(cid:22)E(cid:0)(cid:21);9=<(cid:0)(cid:22)E(cid:0)9:A(cid:20)(cid:0)(cid:11)=>(cid:21)=(cid:18)(cid:0)(cid:21)(cid:20)9(cid:19)JCA(cid:20):(cid:0)(cid:19);>(cid:0)ADFC(cid:21)D(cid:21);9(cid:18)(cid:0)(cid:19);>(cid:0) (cid:0)&(cid:0) 9:(cid:21)=(cid:21)(cid:19)E9(cid:21)=(cid:0)D(cid:19)A;9(cid:19)A;(cid:18)(cid:0)(cid:19)(cid:0)(cid:28)(cid:22)DF=(cid:21):(cid:21);(cid:20)A(cid:29)(cid:21)(cid:0)F=A(cid:29)(cid:19)(cid:28)<(cid:0)F=(cid:22)G=(cid:19)D(cid:0)HK(cid:5)=A(cid:29)(cid:19)(cid:28)<(cid:0)(cid:5)=(cid:22)G=(cid:19)DLI(cid:0)9:(cid:19)9(cid:0)F=(cid:22)9(cid:21)(cid:28)9(cid:20)(cid:0)9:(cid:21)(cid:0) (cid:0)(cid:31)(cid:0) F=A(cid:29)(cid:19)(cid:28)<(cid:18)(cid:0)(cid:20)(cid:21)(cid:28)@=A9<(cid:18)(cid:0)(cid:19)(cid:29)(cid:19)AC(cid:19)JACA9<(cid:18)(cid:0)(cid:28)(cid:22);EA>(cid:21);9A(cid:19)CA9<(cid:18)(cid:0)(cid:19);>(cid:0)A;9(cid:21)G=A9<(cid:0)(cid:22)E(cid:0)(cid:20)@(cid:28):(cid:0)(cid:17)(cid:22)(cid:29)(cid:21)=(cid:21)>(cid:0)(cid:4);E(cid:22)=D(cid:19)9A(cid:22);(cid:23)(cid:0)(cid:0)(cid:3)(cid:22)(cid:0) (cid:0)’(cid:0) (cid:20)(cid:19)9A(cid:20)E<(cid:0)9:A(cid:20)(cid:0)=(cid:21)M@A=(cid:21)D(cid:21);9(cid:18)(cid:0)(cid:10)(cid:21)E(cid:21);>(cid:19);9(cid:0)D@(cid:20)9(cid:18)(cid:0)(cid:19)9(cid:0)(cid:19)(cid:0)DA;AD@D(cid:25)(cid:0)(cid:0) (cid:0)((cid:0) (cid:8)(cid:23)(cid:0) (cid:10)(cid:22)(cid:28)@D(cid:21);9(cid:0)A;(cid:0)B=A9A;G(cid:0)9:(cid:21)(cid:0)(cid:28)(cid:22);9(cid:21);9(cid:18)(cid:0)ADFC(cid:21)D(cid:21);9(cid:19)9A(cid:22);(cid:18)(cid:0)(cid:19);>(cid:0)D(cid:19)A;9(cid:21);(cid:19);(cid:28)(cid:21)(cid:0)(cid:22)E(cid:0)9:(cid:21)(cid:0)(cid:5)=A(cid:29)(cid:19)(cid:28)<(cid:0) (cid:0))(cid:0) (cid:5)=(cid:22)G=(cid:19)DN(cid:0) (cid:0)% (cid:0) ?(cid:23)(cid:0) (cid:5)=(cid:22)(cid:29)A>(cid:21)(cid:0)9:(cid:21)(cid:0)B=A99(cid:21);(cid:0)F=(cid:22)G=(cid:19)D(cid:0)(cid:19);>(cid:0)(cid:19);<(cid:0)(cid:21)(cid:29)(cid:19)C@(cid:19)9A(cid:22);(cid:20)(cid:0)9:(cid:21)=(cid:21)(cid:22)E(cid:0)(cid:22)=(cid:0)@F>(cid:19)9(cid:21)(cid:20)(cid:0)9:(cid:21)=(cid:21)9(cid:22)(cid:0)9(cid:22)(cid:0) (cid:0)%%(cid:0) (cid:21)(cid:19)(cid:28):(cid:0)(cid:17)(cid:22)(cid:29)(cid:21)=(cid:21)>(cid:0)?@(cid:20)A;(cid:21)(cid:20)(cid:20)O(cid:20)(cid:0)J(cid:22)(cid:19)=>(cid:0)(cid:22)E(cid:0)>A=(cid:21)(cid:28)9(cid:22)=(cid:20)(cid:0)(cid:22)=(cid:0)G(cid:22)(cid:29)(cid:21)=;A;G(cid:0)J(cid:22)><(cid:0)(cid:22)=(cid:18)(cid:0)AE(cid:0);(cid:22)(cid:0)(cid:20)@(cid:28):(cid:0)J(cid:22)(cid:19)=>(cid:0)(cid:22)=(cid:0)(cid:21)M@A(cid:29)(cid:19)C(cid:21);9(cid:0) (cid:0)%(cid:26)(cid:0) G(cid:22)(cid:29)(cid:21)=;A;G(cid:0)J(cid:22)><(cid:0)(cid:21)PA(cid:20)9(cid:20)(cid:18)(cid:0)9(cid:22)(cid:0)(cid:19)(cid:0)(cid:20)(cid:21);A(cid:22)=(cid:0)(cid:22)EEA(cid:28)(cid:21)=(cid:0)(cid:22)E(cid:0)9:(cid:21)(cid:0)(cid:17)(cid:22)(cid:29)(cid:21)=(cid:21)>(cid:0)?@(cid:20)A;(cid:21)(cid:20)(cid:20)(cid:0)=(cid:21)(cid:20)F(cid:22);(cid:20)AJC(cid:21)(cid:0)E(cid:22)=(cid:0)9:(cid:21)(cid:0)(cid:17)(cid:22)(cid:29)(cid:21)=(cid:21)>(cid:0) (cid:0)%(cid:24)(cid:0) ?@(cid:20)A;(cid:21)(cid:20)(cid:20)O(cid:20)(cid:0)(cid:5)=A(cid:29)(cid:19)(cid:28)<(cid:0)(cid:5)=(cid:22)G=(cid:19)D(cid:0)(cid:19)9(cid:0)C(cid:21)(cid:19)(cid:20)9(cid:0)(cid:22);(cid:28)(cid:21)(cid:0)(cid:21)(cid:29)(cid:21)=<(cid:0)9B(cid:21)C(cid:29)(cid:21)(cid:0)H%(cid:26)I(cid:0)D(cid:22);9:(cid:20)(cid:0)(cid:19);>(cid:0)F=(cid:22)DF9C<(cid:0)H;(cid:22)9(cid:0)9(cid:22)(cid:0)(cid:21)P(cid:28)(cid:21)(cid:21)>(cid:0) (cid:0)%(cid:30)(cid:0) 9:A=9<(cid:0)H(cid:24) I(cid:0)>(cid:19)<(cid:20)I(cid:0)(cid:19)E9(cid:21)=(cid:0)(cid:19)(cid:0)(cid:17)(cid:22)(cid:29)(cid:21)=(cid:21)>(cid:0)(cid:4);(cid:28)A>(cid:21);9N(cid:0) (cid:0)%&(cid:0) (cid:17)(cid:23)(cid:0) (cid:10)(cid:21)(cid:20)AG;(cid:19)9(cid:21)(cid:0)(cid:19)(cid:0)M@(cid:19)CAEA(cid:21)>(cid:0)(cid:21)DFC(cid:22)<(cid:21)(cid:21)(cid:0)(cid:22)=(cid:0)(cid:21)DFC(cid:22)<(cid:21)(cid:21)(cid:20)(cid:18)(cid:0)B:(cid:22)(cid:0)=(cid:21)F(cid:22)=9H(cid:20)I(cid:0)>A=(cid:21)(cid:28)9C<(cid:0)9(cid:22)(cid:0)9:(cid:21)(cid:0)(cid:17):A(cid:21)E(cid:0) (cid:0)%(cid:31)(cid:0) (cid:9)P(cid:21)(cid:28)@9A(cid:29)(cid:21)(cid:0)(cid:11)EEA(cid:28)(cid:21)=H(cid:20)I(cid:0)(cid:22)=(cid:18)(cid:0)A;(cid:0)9:(cid:21)(cid:0)(cid:21)(cid:29)(cid:21);9(cid:0)(cid:19)(cid:0)(cid:17):A(cid:21)E(cid:0)(cid:9)P(cid:21)(cid:28)@9A(cid:29)(cid:21)(cid:0)(cid:11)EEA(cid:28)(cid:21)=(cid:0)=(cid:22)C(cid:21)(cid:0)>(cid:22)(cid:21)(cid:20)(cid:0);(cid:22)9(cid:0)(cid:21)PA(cid:20)9(cid:18)(cid:0)(cid:19)(cid:0)(cid:20)ADAC(cid:19)=C<(cid:27) (cid:0)%’(cid:0) (cid:20)A9@(cid:19)9(cid:21)>(cid:0)(cid:21)P(cid:21)(cid:28)@9A(cid:29)(cid:21)(cid:18)(cid:0)9(cid:22)(cid:0)(cid:28)(cid:22)(cid:22)=>A;(cid:19)9(cid:21)(cid:0)(cid:19);>(cid:0)J(cid:21)(cid:0)=(cid:21)(cid:20)F(cid:22);(cid:20)AJC(cid:21)(cid:0)E(cid:22)=(cid:0)9:(cid:21)(cid:0)(cid:5)=A(cid:29)(cid:19)(cid:28)<(cid:0)(cid:5)=(cid:22)G=(cid:19)DN(cid:0)(cid:19);>(cid:0)Q(cid:21)(cid:21)F(cid:0)9:(cid:21)(cid:0)(cid:17):A(cid:21)E(cid:0) (cid:0)%((cid:0) (cid:9)P(cid:21)(cid:28)@9A(cid:29)(cid:21)(cid:0)(cid:11)EEA(cid:28)(cid:21)=H(cid:20)I(cid:0)(cid:19);>(cid:0)?(cid:22)(cid:19)=>(cid:0)(cid:22)E(cid:0)(cid:10)A=(cid:21)(cid:28)9(cid:22)=(cid:20)(cid:0)A;E(cid:22)=D(cid:21)>(cid:0)(cid:22)E(cid:0)9:(cid:21)(cid:0)(cid:5)=A(cid:29)(cid:19)(cid:28)<(cid:0)(cid:5)=(cid:22)G=(cid:19)D(cid:18)(cid:0)A;(cid:28)C@>A;G(cid:0)(cid:19)CC(cid:0) (cid:0)%)(cid:0) (cid:19)(cid:28)9A(cid:22);(cid:20)(cid:0)(cid:19);>(cid:0)F=(cid:22)(cid:28)(cid:21)>@=(cid:21)(cid:20)(cid:0)ADFC(cid:21)D(cid:21);9(cid:21)>(cid:0)9(cid:22)(cid:0)(cid:28)(cid:22)DFC<(cid:0)BA9:(cid:0)9:(cid:21)(cid:0)=(cid:21)M@A=(cid:21)D(cid:21);9(cid:20)(cid:0)(cid:22)E(cid:0)9:A(cid:20)(cid:0)(cid:11)=>(cid:21)=(cid:18)(cid:0)(cid:19);>(cid:0)(cid:19);<(cid:0) (cid:0)(cid:26) (cid:0) (cid:19)(cid:28)9A(cid:22);(cid:20)(cid:0)(cid:19);>(cid:0)F=(cid:22)(cid:28)(cid:21)>@=(cid:21)(cid:20)(cid:0)9(cid:22)(cid:0)J(cid:21)(cid:0)ADFC(cid:21)D(cid:21);9(cid:21)>(cid:0)9(cid:22)(cid:0)(cid:21);(cid:20)@=(cid:21)(cid:0)(cid:28)(cid:22);9A;@(cid:21)>(cid:0)(cid:28)(cid:22)DFCA(cid:19);(cid:28)(cid:21)(cid:0)BA9:(cid:0)9:A(cid:20)(cid:0)(cid:11)=>(cid:21)=N(cid:0)(cid:0) (cid:0)(cid:26)%(cid:0) (cid:10)(cid:23)(cid:0) (cid:8)(cid:20)(cid:20)(cid:21)(cid:20)(cid:20)(cid:0)(cid:19);>(cid:0)>(cid:22)(cid:28)@D(cid:21);9(cid:18)(cid:0)(cid:19)9(cid:0)C(cid:21)(cid:19)(cid:20)9(cid:0)(cid:22);(cid:28)(cid:21)(cid:0)(cid:21)(cid:29)(cid:21)=<(cid:0)9B(cid:21)C(cid:29)(cid:21)(cid:0)H%(cid:26)I(cid:0)D(cid:22);9:(cid:20)(cid:0)(cid:19);>(cid:0)F=(cid:22)DF9C<(cid:0)H;(cid:22)9(cid:0) (cid:0)(cid:26)(cid:26)(cid:0) 9(cid:22)(cid:0)(cid:21)P(cid:28)(cid:21)(cid:21)>(cid:0)9:A=9<(cid:0)H(cid:24) I(cid:0)>(cid:19)<(cid:20)I(cid:0)E(cid:22)CC(cid:22)BA;G(cid:0)(cid:19)(cid:0)(cid:17)(cid:22)(cid:29)(cid:21)=(cid:21)>(cid:0)(cid:4);(cid:28)A>(cid:21);9(cid:18)(cid:0)A;9(cid:21)=;(cid:19)C(cid:0)(cid:19);>(cid:0)(cid:21)P9(cid:21)=;(cid:19)C(cid:0)=A(cid:20)Q(cid:20)(cid:0)A;(cid:0)(cid:21)(cid:19)(cid:28):(cid:0)(cid:19)=(cid:21)(cid:19)(cid:0) (cid:0)(cid:26)(cid:24)(cid:0) (cid:22)E(cid:0)9:(cid:21)(cid:0)(cid:17)(cid:22)(cid:29)(cid:21)=(cid:21)>(cid:0)?@(cid:20)A;(cid:21)(cid:20)(cid:20)O(cid:20)(cid:0)(cid:22)F(cid:21)=(cid:19)9A(cid:22);(cid:20)(cid:0)9(cid:22)(cid:0)9:(cid:21)(cid:0)F=A(cid:29)(cid:19)(cid:28)<(cid:18)(cid:0)(cid:20)(cid:21)(cid:28)@=A9<(cid:18)(cid:0)(cid:19)(cid:29)(cid:19)AC(cid:19)JACA9<(cid:18)(cid:0)(cid:28)(cid:22);EA>(cid:21);9A(cid:19)CA9<(cid:18)(cid:0)(cid:19);>(cid:0) (cid:0)(cid:26)(cid:30)(cid:0) A;9(cid:21)G=A9<(cid:0)(cid:22)E(cid:0)(cid:17)(cid:22)(cid:29)(cid:21)=(cid:21)>(cid:0)(cid:4);E(cid:22)=D(cid:19)9A(cid:22);(cid:0)9:(cid:19)9(cid:0)(cid:28)(cid:22)@C>(cid:0)=(cid:21)(cid:20)@C9(cid:0)A;(cid:0)9:(cid:21)(cid:0)@;(cid:19)@9:(cid:22)=AR(cid:21)>(cid:0)(cid:19)(cid:28)(cid:28)(cid:21)(cid:20)(cid:20)(cid:18)(cid:0)(cid:28)(cid:22)CC(cid:21)(cid:28)9A(cid:22);(cid:18)(cid:0)@(cid:20)(cid:21)(cid:18)(cid:0) (cid:0)(cid:26)&(cid:0) >(cid:21)(cid:20)9=@(cid:28)9A(cid:22);(cid:18)(cid:0)(cid:22)=(cid:0)>A(cid:20)(cid:28)C(cid:22)(cid:20)@=(cid:21)(cid:0)(cid:22)E(cid:18)(cid:0)(cid:22)=(cid:0)F=(cid:22)(cid:29)A(cid:20)A(cid:22);(cid:0)(cid:22)E(cid:0)(cid:19)(cid:28)(cid:28)(cid:21)(cid:20)(cid:20)(cid:0)9(cid:22)(cid:18)(cid:0)(cid:17)(cid:22)(cid:29)(cid:21)=(cid:21)>(cid:0)(cid:4);E(cid:22)=D(cid:19)9A(cid:22);N(cid:0)(cid:0) (cid:0)(cid:26)(cid:31)(cid:0) (cid:9)(cid:23)(cid:0) (cid:10)(cid:21)(cid:20)AG;(cid:18)(cid:0)ADFC(cid:21)D(cid:21);9(cid:18)(cid:0)D(cid:19)A;9(cid:19)A;(cid:18)(cid:0)(cid:19);>(cid:0)>(cid:22)(cid:28)@D(cid:21);9(cid:0)(cid:20)(cid:19)E(cid:21)G@(cid:19)=>(cid:20)(cid:0)9:(cid:19)9(cid:0)(cid:28)(cid:22);9=(cid:22)C(cid:0)E(cid:22)=(cid:0)9:(cid:21)(cid:0) (cid:0)(cid:26)’(cid:0) A;9(cid:21)=;(cid:19)C(cid:0)(cid:19);>(cid:0)(cid:21)P9(cid:21)=;(cid:19)C(cid:0)=A(cid:20)Q(cid:20)(cid:0)9(cid:22)(cid:0)9:(cid:21)(cid:0)F=A(cid:29)(cid:19)(cid:28)<(cid:18)(cid:0)(cid:20)(cid:21)(cid:28)@=A9<(cid:18)(cid:0)(cid:19)(cid:29)(cid:19)AC(cid:19)JACA9<(cid:18)(cid:0)(cid:28)(cid:22);EA>(cid:21);9A(cid:19)CA9<(cid:18)(cid:0)(cid:19);>(cid:0)A;9(cid:21)G=A9<(cid:0)(cid:22)E(cid:0) (cid:0)(cid:26)((cid:0) (cid:17)(cid:3)(cid:22)(cid:4)(cid:29)(cid:5)(cid:21)(cid:6)=(cid:7)(cid:21)(cid:8)>(cid:3)(cid:0)(cid:4)(cid:9);(cid:10)E(cid:22)(cid:0)=D(cid:12)(cid:10)(cid:19)9(cid:9)A(cid:12)(cid:22);(cid:0)(cid:13)(cid:0)(cid:11)A>(cid:12)(cid:21)(cid:0);9(cid:9)A(cid:12)EA(cid:14)(cid:21)>(cid:8)(cid:0)(cid:15)J<(cid:9)(cid:0)(cid:15)(cid:21)(cid:3)(cid:19)(cid:0)(cid:28):(cid:15)(cid:0)(cid:16)(cid:17)(cid:6)(cid:22)(cid:15)(cid:29)(cid:17)(cid:21)(cid:3)=(cid:4)(cid:21)(cid:11)>(cid:15)(cid:0)?@(cid:20)(cid:0)(cid:0)A(cid:0);(cid:0)(cid:0)(cid:0)(cid:21)(cid:20)(cid:20)(cid:0)A;(cid:0)=(cid:21)(cid:20)F(cid:22);(cid:0)(cid:20)(cid:21)(cid:0)9(cid:22)(cid:0)(cid:2)@J(cid:20)(cid:21)(cid:28)9A(cid:22);(cid:0)!(cid:4)(cid:4)(cid:23)(cid:10)(cid:23)(cid:0)(cid:0) (cid:4)!(cid:4)(cid:7)(cid:0)(cid:9)(cid:15)(cid:8)(cid:7)(cid:3)\"(cid:0)(cid:6)(cid:10)#(cid:14)(cid:9)(cid:15)(cid:3)(cid:0)(cid:8)(cid:15)(cid:10)(cid:0)(cid:3)$(cid:9)(cid:12)(cid:0)(cid:9)(cid:7)(cid:4)(cid:9)(cid:13) (cid:2) (cid:11) (cid:5) (cid:4) (cid:18)(cid:0) (cid:0) (cid:0) (cid:17)(cid:19)(cid:20)(cid:21)(cid:0)(cid:15)(cid:22)(cid:23)(cid:0)(cid:24)(cid:25)(cid:26)(cid:24)(cid:27)(cid:28)(cid:29)(cid:27)(cid:30)(cid:31) (cid:0) (cid:17) (cid:5) (cid:16) (cid:18) (cid:11) (cid:12) (cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0) %&(cid:0) (cid:0) (cid:0)\n\nBCDE(cid:0)FGHIJKLJMMFNMJOPQ(cid:0)(cid:0)(cid:0)ORKSTEUV(cid:0)WX(cid:0)(cid:0)(cid:0)YZ[E\\(cid:0)MH]W^]HI(cid:0)(cid:0)(cid:0)_C‘E(cid:0)WN(cid:0)Ra(cid:0)II (cid:0) (cid:0)%(cid:0) (cid:9)(cid:19)(cid:28)*(cid:0)(cid:20)(cid:19)+(cid:21),-(cid:19)./(cid:0)0-(cid:20)1(cid:0)2(cid:21)(cid:0)2(cid:19)(cid:20)(cid:21)/(cid:0)(cid:22)3(cid:0)1*(cid:21)(cid:0)(cid:29)(cid:22)4-0(cid:21)(cid:0)(cid:19)3/(cid:0)(cid:20)(cid:21)3(cid:20)515(cid:29)516(cid:0)(cid:22)+(cid:0)1*(cid:21)(cid:0)(cid:17)(cid:22)(cid:29)(cid:21).(cid:21)/(cid:0)(cid:4)3+(cid:22).0(cid:19)15(cid:22)3(cid:0)1*(cid:19)1(cid:0)5(cid:20)(cid:0)(cid:19)1(cid:0) (cid:0)(cid:26)(cid:0) .5(cid:20)7(cid:18)(cid:0)(cid:19)3/(cid:0)1*(cid:21)(cid:0)457(cid:21)45*(cid:22)(cid:22)/(cid:0)1*(cid:19)1(cid:0)1*(cid:21)(cid:0).5(cid:20)7(cid:0)(cid:28)(cid:22)-4/(cid:0)2(cid:21)(cid:0).(cid:21)(cid:19)458(cid:21)/(cid:0)(cid:19)3/(cid:0).(cid:21)(cid:20)-41(cid:0)53(cid:0)1*(cid:21)(cid:0)-3(cid:19)-1*(cid:22).58(cid:21)/(cid:0)(cid:19)(cid:28)(cid:28)(cid:21)(cid:20)(cid:20)(cid:18)(cid:0) (cid:0)(cid:24)(cid:0) (cid:28)(cid:22)44(cid:21)(cid:28)15(cid:22)3(cid:18)(cid:0)-(cid:20)(cid:21)(cid:18)(cid:0)/(cid:21)(cid:20)1.-(cid:28)15(cid:22)3(cid:18)(cid:0)/5(cid:20)(cid:28)4(cid:22)(cid:20)-.(cid:21)(cid:0)(cid:22)+(cid:18)(cid:0)(cid:22).(cid:0)9.(cid:22)(cid:29)5(cid:20)5(cid:22)3(cid:0)(cid:22)+(cid:0)(cid:19)(cid:28)(cid:28)(cid:21)(cid:20)(cid:20)(cid:0)1(cid:22)(cid:18)(cid:0)1*(cid:21)(cid:0)(cid:17)(cid:22)(cid:29)(cid:21).(cid:21)/(cid:0)(cid:4)3+(cid:22).0(cid:19)15(cid:22)3(cid:23)(cid:0)(cid:0) (cid:0)(cid:30)(cid:0) (cid:2)-(cid:28)*(cid:0)(cid:20)(cid:19)+(cid:21),-(cid:19)./(cid:20)(cid:0)0-(cid:20)1(cid:0)(cid:19)4(cid:20)(cid:22)(cid:0)53(cid:28)4-/(cid:21)(cid:25)(cid:0) (cid:0)&(cid:0) %(cid:23)(cid:0) 9(cid:22)45(cid:28)5(cid:21)(cid:20)(cid:18)(cid:0)9.(cid:22)(cid:28)(cid:21)/-.(cid:21)(cid:20)(cid:18)(cid:0)(cid:19)3/(cid:0)1(cid:21)(cid:28)*35(cid:28)(cid:19)4(cid:0)0(cid:21)(cid:19)(cid:20)-.(cid:21)(cid:20)(cid:0)1(cid:22)(cid:0)(cid:20)6(cid:20)1(cid:21)0(cid:19)15(cid:28)(cid:19)446(cid:0)53(cid:29)(cid:21)31(cid:22).6(cid:0)(cid:17)(cid:22)(cid:29)(cid:21).(cid:21)/(cid:0) (cid:0)(cid:31)(cid:0) (cid:4)3+(cid:22).0(cid:19)15(cid:22)3(cid:0)53(cid:0)1*(cid:21)(cid:0)(cid:17)(cid:22)(cid:29)(cid:21).(cid:21)/(cid:0):-(cid:20)53(cid:21)(cid:20)(cid:20);(cid:20)(cid:0)(cid:28)(cid:22)31.(cid:22)4(cid:0)(cid:19)3/(cid:0)(cid:10)(cid:21)4(cid:21)1(cid:21)(cid:0)(cid:17)(cid:22)(cid:29)(cid:21).(cid:21)/(cid:0)(cid:4)3+(cid:22).0(cid:19)15(cid:22)3(cid:0)1*(cid:19)1(cid:0)5(cid:20)(cid:0)3(cid:22)(cid:0)4(cid:22)3,(cid:21).(cid:0) (cid:0)’(cid:0) 3(cid:21)(cid:28)(cid:21)(cid:20)(cid:20)(cid:19).6<(cid:0) (cid:0)((cid:0) (cid:26)(cid:23)(cid:0) 9(cid:22)45(cid:28)5(cid:21)(cid:20)(cid:18)(cid:0)9.(cid:22)(cid:28)(cid:21)/-.(cid:21)(cid:20)(cid:18)(cid:0)(cid:19)3/(cid:0)1(cid:21)(cid:28)*35(cid:28)(cid:19)4(cid:0)0(cid:21)(cid:19)(cid:20)-.(cid:21)(cid:20)(cid:0)1(cid:22)(cid:0)9.(cid:21)(cid:29)(cid:21)31(cid:0)1*(cid:21)(cid:0)(cid:28)(cid:22)44(cid:21)(cid:28)15(cid:22)3(cid:18)(cid:0) (cid:0))(cid:0) 0(cid:19)531(cid:21)3(cid:19)3(cid:28)(cid:21)(cid:18)(cid:0)-(cid:20)(cid:21)(cid:18)(cid:0)(cid:22).(cid:0)/5(cid:20)(cid:28)4(cid:22)(cid:20)-.(cid:21)(cid:0)(cid:22)+(cid:18)(cid:0)(cid:22).(cid:0)9.(cid:22)(cid:29)5(cid:20)5(cid:22)3(cid:0)(cid:22)+(cid:0)(cid:19)(cid:28)(cid:28)(cid:21)(cid:20)(cid:20)(cid:0)1(cid:22)(cid:18)(cid:0)(cid:17)(cid:22)(cid:29)(cid:21).(cid:21)/(cid:0)(cid:4)3+(cid:22).0(cid:19)15(cid:22)3(cid:0)53(cid:28)(cid:22)3(cid:20)5(cid:20)1(cid:21)31(cid:0) (cid:0)% (cid:0) =51*(cid:0)1*(cid:21)(cid:0)(cid:17)(cid:22)(cid:29)(cid:21).(cid:21)/(cid:0):-(cid:20)53(cid:21)(cid:20)(cid:20);(cid:20)(cid:0).(cid:21)9.(cid:21)(cid:20)(cid:21)31(cid:19)15(cid:22)3(cid:20)(cid:0)1(cid:22)(cid:0)(cid:28)(cid:22)3(cid:20)-0(cid:21).(cid:20)<(cid:0)(cid:0) (cid:0)%%(cid:0) (cid:24)(cid:23)(cid:0) (cid:19)-/51(cid:20)(cid:18)(cid:0)(cid:19)(cid:20)(cid:20)(cid:21)(cid:20)(cid:20)0(cid:21)31(cid:20)(cid:18)(cid:0)(cid:19)3/(cid:0).(cid:21)(cid:29)5(cid:21)=(cid:20)(cid:0)(cid:22)+(cid:0)1*(cid:21)(cid:0)(cid:28)(cid:22)31.(cid:19)(cid:28)1(cid:20)(cid:18)(cid:0)9.5(cid:29)(cid:19)(cid:28)6(cid:0)9(cid:22)45(cid:28)5(cid:21)(cid:20)(cid:18)(cid:0)(cid:19)3/(cid:0)1(cid:21).0(cid:20)(cid:0)(cid:22)+(cid:0) (cid:0)%(cid:26)(cid:0) (cid:20)(cid:21).(cid:29)5(cid:28)(cid:21)(cid:0)(cid:19)(cid:20)(cid:20)(cid:22)(cid:28)5(cid:19)1(cid:21)/(cid:0)=51*(cid:0)(cid:19)36(cid:0)(cid:3)*5./(cid:0)(cid:5)(cid:19).16(cid:0)1(cid:22)(cid:0)=*5(cid:28)*(cid:0)(cid:21)(cid:19)(cid:28)*(cid:0)(cid:17)(cid:22)(cid:29)(cid:21).(cid:21)/(cid:0):-(cid:20)53(cid:21)(cid:20)(cid:20)(cid:0)/5(cid:20)(cid:28)4(cid:22)(cid:20)(cid:21)(cid:20)(cid:18)(cid:0)(cid:22).(cid:0)9.(cid:22)(cid:29)5/(cid:21)(cid:20)(cid:0) (cid:0)%(cid:24)(cid:0) (cid:19)(cid:28)(cid:28)(cid:21)(cid:20)(cid:20)(cid:0)1(cid:22)(cid:0)(cid:17)(cid:22)(cid:29)(cid:21).(cid:21)/(cid:0)(cid:4)3+(cid:22).0(cid:19)15(cid:22)3<(cid:0) (cid:0)%(cid:30)(cid:0) (cid:30)(cid:23)(cid:0) 9(cid:22)45(cid:28)5(cid:21)(cid:20)(cid:18)(cid:0)9.(cid:22)(cid:28)(cid:21)/-.(cid:21)(cid:20)(cid:18)(cid:0)(cid:19)3/(cid:0)(cid:28)(cid:22)31.(cid:22)4(cid:20)(cid:0)1(cid:22)(cid:0)(cid:21)3(cid:20)-.(cid:21)(cid:0)1*(cid:19)1(cid:0)(cid:21)(cid:19)(cid:28)*(cid:0)(cid:17)(cid:22)(cid:29)(cid:21).(cid:21)/(cid:0):-(cid:20)53(cid:21)(cid:20)(cid:20)(cid:0)(cid:28)(cid:22)0945(cid:21)(cid:20)(cid:0) (cid:0)%&(cid:0) =51*(cid:0)(cid:2)(cid:21)(cid:28)15(cid:22)3(cid:20)(cid:0)(cid:4)(cid:27)(cid:4)!(cid:0)(cid:19)2(cid:22)(cid:29)(cid:21)<(cid:0) (cid:0)%(cid:31)(cid:0) &(cid:23)(cid:0) 9(cid:22)45(cid:28)5(cid:21)(cid:20)(cid:0)(cid:19)3/(cid:0)1(cid:21)(cid:28)*35(cid:28)(cid:19)4(cid:0)0(cid:21)(cid:19)(cid:20)-.(cid:21)(cid:20)(cid:0)1*(cid:19)1(cid:0)45051(cid:0)(cid:21)094(cid:22)6(cid:21)(cid:21)(cid:0)(cid:19)3/(cid:0)(cid:28)(cid:22)31.(cid:19)(cid:28)1(cid:22).(cid:0)(cid:19)(cid:28)(cid:28)(cid:21)(cid:20)(cid:20)(cid:0)1(cid:22)(cid:0) (cid:0)%’(cid:0) (cid:17)(cid:22)(cid:29)(cid:21).(cid:21)/(cid:0)(cid:4)3+(cid:22).0(cid:19)15(cid:22)3(cid:0)1(cid:22)(cid:0)(cid:22)346(cid:0)1*(cid:22)(cid:20)(cid:21)(cid:0)(cid:21)094(cid:22)6(cid:21)(cid:21)(cid:20)(cid:0)(cid:19)3/(cid:0)(cid:28)(cid:22)31.(cid:19)(cid:28)1(cid:22).(cid:20)(cid:0)=51*(cid:0)(cid:19)(cid:0)4(cid:21),5150(cid:19)1(cid:21)(cid:0)2-(cid:20)53(cid:21)(cid:20)(cid:20)(cid:0)3(cid:21)(cid:21)/(cid:0)1(cid:22)(cid:0) (cid:0)%((cid:0) (cid:19)(cid:28)(cid:28)(cid:21)(cid:20)(cid:20)(cid:0)(cid:20)-(cid:28)*(cid:0)(cid:17)(cid:22)(cid:29)(cid:21).(cid:21)/(cid:0)(cid:4)3+(cid:22).0(cid:19)15(cid:22)3<(cid:0) (cid:0)%)(cid:0) (cid:31)(cid:23)(cid:0) 0(cid:19)3/(cid:19)1(cid:22).6(cid:0)9.5(cid:29)(cid:19)(cid:28)6(cid:0)1.(cid:19)5353,(cid:0)9.(cid:22),.(cid:19)0(cid:20)(cid:0)+(cid:22).(cid:0)(cid:19)44(cid:0)(cid:21)094(cid:22)6(cid:21)(cid:21)(cid:20)(cid:0)(cid:22)3(cid:0)(cid:19)1(cid:0)4(cid:21)(cid:19)(cid:20)1(cid:0)(cid:19)3(cid:0)(cid:19)33-(cid:19)4(cid:0) (cid:0)(cid:26) (cid:0) 2(cid:19)(cid:20)5(cid:20)(cid:18)(cid:0)-9/(cid:19)1(cid:21)/(cid:0)1(cid:22)(cid:0)(cid:19)//.(cid:21)(cid:20)(cid:20)(cid:25)(cid:0)1*(cid:21)(cid:0)(cid:28)(cid:22)44(cid:21)(cid:28)15(cid:22)3(cid:18)(cid:0)-(cid:20)(cid:21)(cid:18)(cid:0)(cid:19)3/(cid:0)/5(cid:20)(cid:28)4(cid:22)(cid:20)-.(cid:21)(cid:0)(cid:22)+(cid:0)(cid:17)(cid:22)(cid:29)(cid:21).(cid:21)/(cid:0)(cid:4)3+(cid:22).0(cid:19)15(cid:22)3<(cid:0)(cid:19)36(cid:0)531(cid:21).3(cid:19)4(cid:0) (cid:0)(cid:26)%(cid:0) (cid:22).(cid:0)(cid:21)>1(cid:21).3(cid:19)4(cid:0).5(cid:20)7(cid:20)(cid:0)5/(cid:21)315+5(cid:21)/(cid:0)26(cid:0)(cid:21)(cid:19)(cid:28)*(cid:0)(cid:17)(cid:22)(cid:29)(cid:21).(cid:21)/(cid:0):-(cid:20)53(cid:21)(cid:20)(cid:20)(cid:0)53(cid:0)(cid:2)-2(cid:20)(cid:21)(cid:28)15(cid:22)3(cid:0)!(cid:4)(cid:4)?(cid:10)@<(cid:0)(cid:19)3/(cid:0)(cid:20)(cid:19)+(cid:21),-(cid:19)./(cid:20)(cid:0) (cid:0)(cid:26)(cid:26)(cid:0) 5094(cid:21)0(cid:21)31(cid:21)/(cid:0)9-.(cid:20)-(cid:19)31(cid:0)1(cid:22)(cid:0)(cid:2)-2(cid:20)(cid:21)(cid:28)15(cid:22)3(cid:0)!(cid:4)(cid:4)?(cid:9)@(cid:18)(cid:0)1*(cid:19)1(cid:0)53(cid:28)4-/(cid:21)(cid:20)(cid:0)1.(cid:19)5353,(cid:0)(cid:22)3(cid:0)1*(cid:21)(cid:0).(cid:21)A-5.(cid:21)0(cid:21)31(cid:20)(cid:0)(cid:22)+(cid:0)1*5(cid:20)(cid:0) (cid:0)(cid:26)(cid:24)(cid:0) (cid:11)./(cid:21).<(cid:0) (cid:0)(cid:26)(cid:30)(cid:0) ’(cid:23)(cid:0) (cid:19)(cid:0)/(cid:19)1(cid:19)(cid:0).(cid:21)1(cid:21)315(cid:22)3(cid:0)9(cid:22)45(cid:28)6(cid:0)1*(cid:19)1(cid:18)(cid:0)(cid:19)1(cid:0)(cid:19)(cid:0)05350-0(cid:18)(cid:0)53(cid:28)4-/(cid:21)(cid:20)(cid:25)(cid:0) (cid:0)(cid:26)&(cid:0) (cid:19)(cid:23)(cid:0) (cid:19)(cid:0).(cid:21)1(cid:21)315(cid:22)3(cid:0)(cid:20)(cid:28)*(cid:21)/-4(cid:21)(cid:0)1*(cid:19)1(cid:0)45051(cid:20)(cid:0)1*(cid:21)(cid:0).(cid:21)1(cid:21)315(cid:22)3(cid:0)(cid:22)+(cid:0)(cid:17)(cid:22)(cid:29)(cid:21).(cid:21)/(cid:0)(cid:4)3+(cid:22).0(cid:19)15(cid:22)3(cid:0)+(cid:22).(cid:0) (cid:0)(cid:26)(cid:31)(cid:0) (cid:22)346(cid:0)(cid:19)(cid:20)(cid:0)4(cid:22)3,(cid:0)(cid:19)(cid:20)(cid:0)5(cid:20)(cid:0).(cid:21)(cid:19)(cid:20)(cid:22)3(cid:19)246(cid:0)3(cid:21)(cid:28)(cid:21)(cid:20)(cid:20)(cid:19).6(cid:0)1(cid:22)(cid:0)+-4+544(cid:0)1*(cid:21)(cid:0)9-.9(cid:22)(cid:20)(cid:21)(cid:0)+(cid:22).(cid:0)=*5(cid:28)*(cid:0)1*(cid:21)(cid:0) (cid:0)(cid:26)’(cid:0) (cid:17)(cid:22)(cid:29)(cid:21).(cid:21)/(cid:0)(cid:4)3+(cid:22).0(cid:19)15(cid:22)3(cid:0)=(cid:19)(cid:20)(cid:0)(cid:28)(cid:22)44(cid:21)(cid:28)1(cid:21)/<(cid:0)9.(cid:22)(cid:29)5/(cid:21)/(cid:18)(cid:0)*(cid:22)=(cid:21)(cid:29)(cid:21).(cid:18)(cid:0)1*(cid:19)1(cid:0)(cid:20)-(cid:28)*(cid:0)(cid:17)(cid:22)(cid:29)(cid:21).(cid:21)/(cid:0) (cid:0)(cid:26)((cid:0) (cid:3)(cid:4)(cid:5)(cid:6)(cid:7)(cid:8)(cid:3)(cid:9)(cid:10)(cid:0)(cid:12)(cid:10)(cid:9)(cid:12)(cid:0)(cid:13)(cid:11)(cid:4)(cid:12)3(cid:0)+(cid:22)(cid:9).(cid:12)0(cid:14)(cid:19)(cid:8)15(cid:15)(cid:22)3(cid:9)(cid:15)(cid:0)3(cid:3)(cid:21)(cid:0)(cid:21)(cid:15)/(cid:0)(cid:16)3(cid:6)(cid:22)(cid:15)1(cid:17)(cid:0)2(cid:3)(cid:21)(cid:4)(cid:0)(cid:11)/(cid:15)(cid:21)(cid:20)1.(cid:22)(cid:0)(cid:0)6(cid:0)(cid:0)(cid:0)(cid:21)(cid:0)/(cid:18)(cid:0)(cid:19)3/(cid:0)0(cid:19)6(cid:0)2(cid:0)(cid:21)(cid:0)/5(cid:20)(cid:28)4(cid:22)(cid:20)(cid:21)/(cid:18)(cid:0)1(cid:22)(cid:0)1*(cid:21)(cid:0)(cid:21)>1(cid:21)31(cid:0) (cid:4)!(cid:4)(cid:7)(cid:0)(cid:9)(cid:15)(cid:8)(cid:7)(cid:3)\"(cid:0)(cid:6)(cid:10)#(cid:14)(cid:9)(cid:15)(cid:3)(cid:0)(cid:8)(cid:15)(cid:10)(cid:0)(cid:3)$(cid:9)(cid:12)(cid:0)(cid:9)(cid:7)(cid:4)(cid:9)(cid:13) (cid:2) (cid:11) (cid:5) (cid:4) (cid:18)(cid:0) (cid:0) (cid:0) (cid:17)(cid:19)(cid:20)(cid:21)(cid:0)(cid:15)(cid:22)(cid:23)(cid:0)(cid:24)(cid:25)(cid:26)(cid:24)(cid:27)(cid:28)(cid:29)(cid:27)(cid:30)(cid:31) (cid:0) (cid:17) (cid:5) (cid:16) (cid:18) (cid:11) (cid:12) (cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0) %(cid:31)(cid:0) (cid:0) (cid:0)\n\nBCDE(cid:0)FGHIJKLJMMFNMJOPQ(cid:0)(cid:0)(cid:0)ORKSTEUV(cid:0)WX(cid:0)(cid:0)(cid:0)YZ[E\\(cid:0)MH]W^]HI(cid:0)(cid:0)(cid:0)_C‘E(cid:0)W^(cid:0)Ra(cid:0)II (cid:0) (cid:0)%(cid:0) *(cid:21)+,(cid:21)(cid:20)-(cid:21).(cid:0)/0(cid:0)(cid:19)(cid:0)1(cid:22)(cid:29)(cid:21)*23(cid:21)2-(cid:0)(cid:19)1(cid:21)2(cid:28)0(cid:0)(cid:22)*(cid:0)*(cid:21)+,4*(cid:21).(cid:0)/0(cid:0)5(cid:19)6(cid:18)(cid:0)*(cid:21)1,5(cid:19)-4(cid:22)2(cid:18)(cid:0)(cid:22)*(cid:0)(cid:28)(cid:22),*-(cid:0) (cid:0)(cid:26)(cid:0) (cid:22)*.(cid:21)*7(cid:0)(cid:19)2.(cid:0) (cid:0)(cid:24)(cid:0) /(cid:23)(cid:0) (cid:19)(cid:0)*(cid:21)+,4*(cid:21)3(cid:21)2-(cid:0)-8(cid:19)-(cid:0)(cid:21)(cid:19)(cid:28)8(cid:0)(cid:17)(cid:22)(cid:29)(cid:21)*(cid:21).(cid:0)9,(cid:20)42(cid:21)(cid:20)(cid:20)(cid:0).(cid:22)(cid:28),3(cid:21)2-(cid:18)(cid:0)(cid:19).8(cid:21)*(cid:21)(cid:0)-(cid:22)(cid:18)(cid:0)(cid:19)2.(cid:0)3(cid:19):(cid:21)(cid:0) (cid:0)(cid:30)(cid:0) ;,/54(cid:28)50(cid:0)(cid:19)(cid:29)(cid:19)45(cid:19)/5(cid:21)(cid:0)42(cid:0)4-(cid:20)(cid:0)-(cid:21)*3(cid:20)(cid:0)(cid:22)<(cid:0)(cid:20)(cid:21)*(cid:29)4(cid:28)(cid:21)(cid:0)(cid:22)*(cid:0)-(cid:21)*3(cid:20)(cid:0)(cid:22)<(cid:0),(cid:20)(cid:21)(cid:0)(cid:19)(cid:0)*(cid:21)-(cid:21)2-4(cid:22)2(cid:0) (cid:0)’(cid:0) (cid:20)(cid:28)8(cid:21).,5(cid:21)(cid:0)<(cid:22)*(cid:0)(cid:17)(cid:22)(cid:29)(cid:21)*(cid:21).(cid:0)(cid:4)2<(cid:22)*3(cid:19)-4(cid:22)2(cid:18)(cid:0)(cid:20)(cid:21)--421(cid:0)<(cid:22)*-8(cid:25)(cid:0)=%>(cid:0)-8(cid:21)(cid:0);,*;(cid:22)(cid:20)(cid:21)(cid:20)(cid:0)<(cid:22)*(cid:0) (cid:0)(cid:31)(cid:0) 684(cid:28)8(cid:0)(cid:20),(cid:28)8(cid:0)42<(cid:22)*3(cid:19)-4(cid:22)2(cid:0)4(cid:20)(cid:0)(cid:28)(cid:22)55(cid:21)(cid:28)-(cid:21).7(cid:0)=(cid:26)>(cid:0)-8(cid:21)(cid:0)(cid:20);(cid:21)(cid:28)4<4(cid:28)(cid:0)/,(cid:20)42(cid:21)(cid:20)(cid:20)(cid:0)2(cid:21)(cid:21).(cid:0)<(cid:22)*(cid:0) (cid:0)&(cid:0) *(cid:21)-(cid:19)42421(cid:0)(cid:21)(cid:19)(cid:28)8(cid:0)-0;(cid:21)(cid:0)(cid:22)<(cid:0)(cid:17)(cid:22)(cid:29)(cid:21)*(cid:21).(cid:0)(cid:4)2<(cid:22)*3(cid:19)-4(cid:22)27(cid:0)(cid:19)2.(cid:0)=(cid:24)>(cid:0)(cid:19)(cid:0)(cid:20)(cid:21)-(cid:0)-43(cid:21)<*(cid:19)3(cid:21)(cid:0)<(cid:22)*(cid:0) (cid:0)((cid:0) (cid:10)(cid:21)5(cid:21)-4(cid:22)2(cid:0)(cid:22)<(cid:0)(cid:21)(cid:19)(cid:28)8(cid:0)-0;(cid:21)(cid:0)(cid:22)<(cid:0)(cid:17)(cid:22)(cid:29)(cid:21)*(cid:21).(cid:0)(cid:4)2<(cid:22)*3(cid:19)-4(cid:22)2(cid:0)=(cid:19)/(cid:20)(cid:21)2-(cid:0)(cid:19)20(cid:0)42-(cid:21)*(cid:29)(cid:21)2421(cid:0) (cid:0))(cid:0) (cid:10)(cid:21)5(cid:21)-4(cid:22)2(cid:0)*(cid:21)+,(cid:21)(cid:20)-(cid:20)(cid:0)<*(cid:22)3(cid:0)(cid:28)(cid:22)2(cid:20),3(cid:21)*(cid:20)>(cid:0)-8(cid:19)-(cid:0);*(cid:21)(cid:28)5,.(cid:21)(cid:20)(cid:0)42.(cid:21)<424-(cid:21)(cid:0)*(cid:21)-(cid:21)2-4(cid:22)2(cid:0)(cid:22)<(cid:0) (cid:0)% (cid:0) (cid:19)20(cid:0)(cid:17)(cid:22)(cid:29)(cid:21)*(cid:21).(cid:0)(cid:4)2<(cid:22)*3(cid:19)-4(cid:22)27(cid:0) (cid:0)%%(cid:0) ((cid:23)(cid:0) (cid:13)(cid:22)*(cid:0)(cid:21)(cid:19)(cid:28)8(cid:0);*(cid:22).,(cid:28)-(cid:0)(cid:22)*(cid:0)(cid:20)(cid:21)*(cid:29)4(cid:28)(cid:21)(cid:18)(cid:0);(cid:22)54(cid:28)4(cid:21)(cid:20)(cid:0)(cid:19)2.(cid:0);*(cid:22)(cid:28)(cid:21).,*(cid:21)(cid:20)(cid:0)-(cid:22)(cid:0).(cid:22)(cid:28),3(cid:21)2-(cid:0)42-(cid:21)*2(cid:19)550(cid:0)-8(cid:21)(cid:0) (cid:0)%(cid:26)(cid:0) .(cid:21)(cid:28)4(cid:20)4(cid:22)2(cid:0)-(cid:22)(cid:0)(cid:28)(cid:22)55(cid:21)(cid:28)-(cid:18)(cid:0),(cid:20)(cid:21)(cid:18)(cid:0).4(cid:20)(cid:28)5(cid:22)(cid:20)(cid:21)(cid:18)(cid:0)(cid:22)*(cid:0)3(cid:19)42-(cid:19)42(cid:0)(cid:21)(cid:19)(cid:28)8(cid:0)-0;(cid:21)(cid:0)(cid:22)<(cid:0)(cid:17)(cid:22)(cid:29)(cid:21)*(cid:21).(cid:0)(cid:4)2<(cid:22)*3(cid:19)-4(cid:22)2(cid:23)(cid:0)(cid:0)(cid:2),(cid:28)8(cid:0) (cid:0)%(cid:24)(cid:0) .(cid:22)(cid:28),3(cid:21)2-(cid:19)-4(cid:22)2(cid:0)(cid:20)8(cid:22),5.(cid:0)42(cid:28)5,.(cid:21)(cid:25)(cid:0)=(cid:19)>(cid:0)-8(cid:21)(cid:0)2(cid:19)3(cid:21)(cid:0)(cid:22)*(cid:0)2(cid:19)3(cid:21)(cid:20)(cid:0)(cid:22)<(cid:0)-8(cid:21)(cid:0);(cid:21)*(cid:20)(cid:22)2(cid:0)(cid:22)*(cid:0);(cid:21)(cid:22);5(cid:21)(cid:0)68(cid:22)(cid:0)3(cid:19).(cid:21)(cid:0)-8(cid:21)(cid:0) (cid:0)%(cid:30)(cid:0) .(cid:21)(cid:28)4(cid:20)4(cid:22)27(cid:0)=/>(cid:0)<(cid:22)*(cid:0)68(cid:19)-(cid:0);,*;(cid:22)(cid:20)(cid:21)(cid:0)-8(cid:21)(cid:0)-0;(cid:21)(cid:0)(cid:22)<(cid:0)(cid:17)(cid:22)(cid:29)(cid:21)*(cid:21).(cid:0)(cid:4)2<(cid:22)*3(cid:19)-4(cid:22)2(cid:0)4(cid:20)(cid:0)/(cid:21)421(cid:0)(cid:28)(cid:22)55(cid:21)(cid:28)-(cid:21).7(cid:0)=(cid:28)>(cid:0)-8(cid:21)(cid:0).(cid:19)-(cid:19)(cid:0) (cid:0)%’(cid:0) (cid:20)(cid:21)13(cid:21)2-(cid:19)-4(cid:22)2(cid:0)(cid:28)(cid:22)2-*(cid:22)5(cid:20)(cid:0)42(cid:0);5(cid:19)(cid:28)(cid:21)(cid:0)-(cid:22)(cid:0)(cid:21)2(cid:20),*(cid:21)(cid:0)-8(cid:19)-(cid:0)-8(cid:21)(cid:0)-0;(cid:21)(cid:0)(cid:22)<(cid:0)(cid:17)(cid:22)(cid:29)(cid:21)*(cid:21).(cid:0)(cid:4)2<(cid:22)*3(cid:19)-4(cid:22)2(cid:0)(cid:28)(cid:22)55(cid:21)(cid:28)-(cid:21).(cid:0)4(cid:20)(cid:0)(cid:22)250(cid:0) (cid:0)%(cid:31)(cid:0) ,(cid:20)(cid:21).(cid:0)<(cid:22)*(cid:0)-8(cid:21)(cid:0);(cid:19)*-4(cid:28),5(cid:19)*(cid:0);,*;(cid:22)(cid:20)(cid:21)(cid:0)<(cid:22)*(cid:0)684(cid:28)8(cid:0)4-(cid:0)6(cid:19)(cid:20)(cid:0)(cid:28)(cid:22)55(cid:21)(cid:28)-(cid:21).7(cid:0)=.>(cid:0)-8(cid:21)(cid:0).(cid:19)-(cid:19)(cid:0)*(cid:21)-(cid:21)2-4(cid:22)2(cid:0)5434-(cid:0)(cid:20)(cid:21)-(cid:0)<(cid:22)*(cid:0)(cid:21)(cid:19)(cid:28)8(cid:0) (cid:0)%&(cid:0) -0;(cid:21)(cid:0)(cid:22)<(cid:0)(cid:17)(cid:22)(cid:29)(cid:21)*(cid:21).(cid:0)(cid:4)2<(cid:22)*3(cid:19)-4(cid:22)2(cid:0)(cid:19)2.(cid:0)-8(cid:21)(cid:0)-(cid:21)(cid:28)824(cid:28)(cid:19)5(cid:0)3(cid:21)(cid:19)2(cid:20)(cid:0)<(cid:22)*(cid:0)(cid:19)(cid:28)84(cid:21)(cid:29)421(cid:0)(cid:10)(cid:21)5(cid:21)-4(cid:22)27(cid:0)=(cid:21)>(cid:0)-8(cid:21)(cid:0)(cid:20)(cid:19)<(cid:21)1,(cid:19)*.(cid:20)(cid:0) (cid:0)%((cid:0) 42(cid:0);5(cid:19)(cid:28)(cid:21)(cid:0)-(cid:22)(cid:0);*(cid:21)(cid:29)(cid:21)2-(cid:0).4(cid:20)(cid:28)5(cid:22)(cid:20),*(cid:21)(cid:0)(cid:22)*(cid:0)(cid:20)(cid:19)5(cid:21)(cid:0)(cid:22)<(cid:0)(cid:21)(cid:19)(cid:28)8(cid:0)-0;(cid:21)(cid:0)(cid:22)<(cid:0)(cid:17)(cid:22)(cid:29)(cid:21)*(cid:21).(cid:0)(cid:4)2<(cid:22)*3(cid:19)-4(cid:22)27(cid:0)(cid:19)2.(cid:0)=<>(cid:0)-8(cid:21)(cid:0)(cid:19)(cid:28)(cid:28)(cid:21)(cid:20)(cid:20)(cid:0) (cid:0)%)(cid:0) (cid:28)(cid:22)2-*(cid:22)5(cid:20)(cid:0)42(cid:0);5(cid:19)(cid:28)(cid:21)(cid:0)-(cid:22)(cid:0)(cid:21)2(cid:20),*(cid:21)(cid:0)(cid:22)250(cid:0)(cid:19),-8(cid:22)*4?(cid:21).(cid:0)(cid:21)3;5(cid:22)0(cid:21)(cid:21)(cid:20)(cid:0)64-8(cid:0)(cid:19)(cid:0)2(cid:21)(cid:21).(cid:27)-(cid:22)(cid:27):2(cid:22)6(cid:0)8(cid:19)(cid:29)(cid:21)(cid:0)(cid:19)(cid:28)(cid:28)(cid:21)(cid:20)(cid:20)(cid:0)-(cid:22)(cid:0)(cid:21)(cid:19)(cid:28)8(cid:0) (cid:0)(cid:26) (cid:0) -0;(cid:21)(cid:0)(cid:22)<(cid:0)(cid:17)(cid:22)(cid:29)(cid:21)*(cid:21).(cid:0)(cid:4)2<(cid:22)*3(cid:19)-4(cid:22)27(cid:0) (cid:0)(cid:26)%(cid:0) )(cid:23)(cid:0) (cid:19),.4-(cid:20)(cid:18)(cid:0)(cid:19)(cid:20)(cid:20)(cid:21)(cid:20)(cid:20)3(cid:21)2-(cid:20)(cid:18)(cid:0)*(cid:21)(cid:29)4(cid:21)6(cid:20)(cid:18)(cid:0)(cid:22)*(cid:0)-(cid:21)(cid:20)-421(cid:0)(cid:22)<(cid:0)6(cid:21)/(cid:0);4@(cid:21)5(cid:20)(cid:0)(cid:19)2.(cid:0)(cid:2)(cid:22)<-6(cid:19)*(cid:21)(cid:0)(cid:10)(cid:21)(cid:29)(cid:21)5(cid:22);3(cid:21)2-(cid:0) (cid:0)(cid:26)(cid:26)(cid:0) A4-(cid:20)(cid:18)(cid:0)(cid:19)2.(cid:0)-8(cid:21)4*(cid:0)(cid:19)(cid:20)(cid:20)(cid:22)(cid:28)4(cid:19)-(cid:21).(cid:0)(cid:3)84*.(cid:0)(cid:5)(cid:19)*-4(cid:21)(cid:20)(cid:18)(cid:0)-(cid:22)(cid:0)684(cid:28)8(cid:0)(cid:21)(cid:19)(cid:28)8(cid:0)(cid:17)(cid:22)(cid:29)(cid:21)*(cid:21).(cid:0)9,(cid:20)42(cid:21)(cid:20)(cid:20)(cid:0).4(cid:20)(cid:28)5(cid:22)(cid:20)(cid:21)(cid:20)(cid:0)(cid:22)*(cid:0);*(cid:22)(cid:29)4.(cid:21)(cid:20)(cid:0) (cid:0)(cid:26)(cid:24)(cid:0) (cid:19)(cid:28)(cid:28)(cid:21)(cid:20)(cid:20)(cid:0)-(cid:22)(cid:0)(cid:17)(cid:22)(cid:29)(cid:21)*(cid:21).(cid:0)(cid:4)2<(cid:22)*3(cid:19)-4(cid:22)2(cid:23)(cid:0) (cid:0)(cid:26)(cid:30)(cid:0) (cid:13)(cid:23)(cid:0) (cid:8)(cid:20)(cid:20)(cid:21)(cid:20)(cid:20)(cid:18)(cid:0)(cid:19)-(cid:0)5(cid:21)(cid:19)(cid:20)-(cid:0)(cid:22)2(cid:28)(cid:21)(cid:0)(cid:21)(cid:29)(cid:21)*0(cid:0)-6(cid:21)5(cid:29)(cid:21)(cid:0)=%(cid:26)>(cid:0)3(cid:22)2-8(cid:20)(cid:0)(cid:19)2.(cid:0);*(cid:22)3;-50(cid:0)=2(cid:22)-(cid:0)-(cid:22)(cid:0)(cid:21)@(cid:28)(cid:21)(cid:21).(cid:0)-84*-0(cid:0) (cid:0)(cid:26)’(cid:0) =(cid:24) >(cid:0).(cid:19)0(cid:20)>(cid:0)<(cid:22)55(cid:22)6421(cid:0)(cid:19)(cid:0)(cid:17)(cid:22)(cid:29)(cid:21)*(cid:21).(cid:0)(cid:4)2(cid:28)4.(cid:21)2-(cid:18)(cid:0)-8(cid:21)(cid:0)(cid:20),<<4(cid:28)4(cid:21)2(cid:28)0(cid:0)(cid:22)<(cid:0)(cid:19)20(cid:0)(cid:20)(cid:19)<(cid:21)1,(cid:19)*.(cid:20)(cid:0)42(cid:0);5(cid:19)(cid:28)(cid:21)(cid:0)-(cid:22)(cid:0)(cid:19)..*(cid:21)(cid:20)(cid:20)(cid:0)-8(cid:21)(cid:0) (cid:0)(cid:26)(cid:31)(cid:0) 42-(cid:21)*2(cid:19)5(cid:0)(cid:19)2.(cid:0)(cid:21)@-(cid:21)*2(cid:19)5(cid:0)*4(cid:20):(cid:20)(cid:0)-(cid:22)(cid:0)-8(cid:21)(cid:0);*4(cid:29)(cid:19)(cid:28)0(cid:18)(cid:0)(cid:20)(cid:21)(cid:28),*4-0(cid:18)(cid:0)(cid:19)(cid:29)(cid:19)45(cid:19)/454-0(cid:18)(cid:0)(cid:28)(cid:22)2<4.(cid:21)2-4(cid:19)54-0(cid:18)(cid:0)(cid:19)2.(cid:0)42-(cid:21)1*4-0(cid:0)(cid:22)<(cid:0) (cid:0)(cid:26)&(cid:0) (cid:17)(cid:22)(cid:29)(cid:21)*(cid:21).(cid:0)(cid:4)2<(cid:22)*3(cid:19)-4(cid:22)2(cid:18)(cid:0)(cid:19)2.(cid:0)3(cid:22).4<0(cid:0)-8(cid:21)(cid:0)(cid:5)*4(cid:29)(cid:19)(cid:28)0(cid:0)(cid:5)*(cid:22)1*(cid:19)3(cid:0)/(cid:19)(cid:20)(cid:21).(cid:0)(cid:22)2(cid:0)-8(cid:21)(cid:0)*(cid:21)(cid:20),5-(cid:20)7(cid:0) (cid:3)(cid:4)(cid:5)(cid:6)(cid:7)(cid:8)(cid:3)(cid:9)(cid:10)(cid:0)(cid:12)(cid:10)(cid:9)(cid:12)(cid:0)(cid:13)(cid:11)(cid:12)(cid:0)(cid:9)(cid:12)(cid:14)(cid:8)(cid:15)(cid:9)(cid:15)(cid:3)(cid:0)(cid:15)(cid:16)(cid:6)(cid:15)(cid:17)(cid:3)(cid:4)(cid:11)(cid:15) (cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0) (cid:0) (cid:0)(cid:26)((cid:0) (cid:4)!(cid:4)(cid:7)(cid:0)(cid:9)(cid:15)(cid:8)(cid:7)(cid:3)\"(cid:0)(cid:6)(cid:10)#(cid:14)(cid:9)(cid:15)(cid:3)(cid:0)(cid:8)(cid:15)(cid:10)(cid:0)(cid:3)$(cid:9)(cid:12)(cid:0)(cid:9)(cid:7)(cid:4)(cid:9)(cid:13) (cid:2) (cid:11) (cid:5) (cid:4) (cid:18)(cid:0) (cid:0) (cid:0) (cid:17)(cid:19)(cid:20)(cid:21)(cid:0)(cid:15)(cid:22)(cid:23)(cid:0)(cid:24)(cid:25)(cid:26)(cid:24)(cid:27)(cid:28)(cid:29)(cid:27)(cid:30)(cid:31) (cid:0) (cid:17) (cid:5) (cid:16) (cid:18) (cid:11) (cid:12) (cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0) %&(cid:0) (cid:0) (cid:0)\n\nTUVW(cid:0)XYZ[\\]^\\__X‘_\\abc(cid:0)(cid:0)(cid:0)ad]efWgh(cid:0)ij(cid:0)(cid:0)(cid:0)klmWn(cid:0)_ZoipoZ[(cid:0)(cid:0)(cid:0)qUrW(cid:0)is(cid:0)dt(cid:0)[[ (cid:0) (cid:0)%(cid:0) #(cid:23)(cid:0) (cid:3)(cid:21)(cid:20)*(cid:0)(cid:19)+,(cid:0)-(cid:22)+.*(cid:22)/(cid:0)*0(cid:21)(cid:0)(cid:21)11(cid:21)(cid:28)*.(cid:29)(cid:21)+(cid:21)(cid:20)(cid:20)(cid:0)(cid:22)1(cid:0)*0(cid:21)(cid:0)(cid:20)(cid:19)1(cid:21)23(cid:19)/,(cid:20)(cid:0)(cid:19)*(cid:0)4(cid:21)(cid:19)(cid:20)*(cid:0)(cid:22)+(cid:28)(cid:21)(cid:0)(cid:21)(cid:29)(cid:21)/5(cid:0)*6(cid:21)4(cid:29)(cid:21)(cid:0) (cid:0)(cid:26)(cid:0) 7%(cid:26)8(cid:0)-(cid:22)+*0(cid:20)(cid:0)(cid:19)+,(cid:0)9/(cid:22)-9*45(cid:0)7+(cid:22)*(cid:0)*(cid:22)(cid:0)(cid:21):(cid:28)(cid:21)(cid:21),(cid:0)*0./*5(cid:0)7(cid:24) 8(cid:0),(cid:19)5(cid:20)8(cid:0)1(cid:22)44(cid:22)6.+2(cid:0)(cid:19)(cid:0)(cid:17)(cid:22)(cid:29)(cid:21)/(cid:21),(cid:0)(cid:4)+(cid:28).,(cid:21)+*(cid:18)(cid:0)(cid:19)+,(cid:0) (cid:0)(cid:24)(cid:0) -(cid:22),.15(cid:0)*0(cid:21)(cid:0)(cid:5)/.(cid:29)(cid:19)(cid:28)5(cid:0)(cid:5)/(cid:22)2/(cid:19)-(cid:0);(cid:19)(cid:20)(cid:21),(cid:0)(cid:22)+(cid:0)*0(cid:21)(cid:0)/(cid:21)(cid:20)34*(cid:20)<(cid:0) (cid:0)(cid:30)(cid:0) $(cid:23)(cid:0) (cid:2)(cid:21)4(cid:21)(cid:28)*(cid:0)(cid:19)+,(cid:0)/(cid:21)*(cid:19).+(cid:0)(cid:20)(cid:21)/(cid:29).(cid:28)(cid:21)(cid:0)9/(cid:22)(cid:29).,(cid:21)/(cid:20)(cid:0)(cid:28)(cid:19)9(cid:19);4(cid:21)(cid:0)(cid:22)1(cid:0)(cid:20)(cid:19)1(cid:21)23(cid:19)/,.+2(cid:0)(cid:17)(cid:22)(cid:29)(cid:21)/(cid:21),(cid:0)(cid:4)+1(cid:22)/-(cid:19)*.(cid:22)+(cid:0) (cid:0)’(cid:0) *0(cid:21)5(cid:0)/(cid:21)(cid:28)(cid:21).(cid:29)(cid:21)(cid:0)1/(cid:22)-(cid:0)*0(cid:21)(cid:0)(cid:17)(cid:22)(cid:29)(cid:21)/(cid:21),(cid:0)=3(cid:20).+(cid:21)(cid:20)(cid:20)(cid:18)(cid:0)(cid:19)+,(cid:0)(cid:28)(cid:22)+*/(cid:19)(cid:28)*3(cid:19)445(cid:0)/(cid:21)>3./(cid:21)(cid:0)(cid:20)(cid:21)/(cid:29).(cid:28)(cid:21)(cid:0)9/(cid:22)(cid:29).,(cid:21)/(cid:20)(cid:0)*(cid:22)(cid:0) (cid:0)(cid:31)(cid:0) .-94(cid:21)-(cid:21)+*(cid:0)(cid:19)+,(cid:0)-(cid:19).+*(cid:19).+(cid:0)(cid:20)(cid:19)1(cid:21)23(cid:19)/,(cid:20)(cid:0)1(cid:22)/(cid:0)(cid:17)(cid:22)(cid:29)(cid:21)/(cid:21),(cid:0)(cid:4)+1(cid:22)/-(cid:19)*.(cid:22)+<(cid:0) (cid:0)((cid:0) (cid:4)(cid:23)(cid:0) (cid:9)(cid:29)(cid:19)43(cid:19)*(cid:21)(cid:0)(cid:19)+,(cid:0)(cid:19),?3(cid:20)*(cid:0)*0(cid:21)(cid:0)(cid:5)/.(cid:29)(cid:19)(cid:28)5(cid:0)(cid:5)/(cid:22)2/(cid:19)-(cid:0).+(cid:0)4.20*(cid:0)(cid:22)1(cid:0)(cid:19)+5(cid:0)-(cid:19)*(cid:21)/.(cid:19)4(cid:0)(cid:28)0(cid:19)+2(cid:21)(cid:20)(cid:0)*(cid:22)(cid:0)(cid:21)(cid:19)(cid:28)0(cid:0) (cid:0)&(cid:0) (cid:17)(cid:22)(cid:29)(cid:21)/(cid:21),(cid:0)=3(cid:20).+(cid:21)(cid:20)(cid:20)@(cid:20)(cid:0)(cid:22)9(cid:21)/(cid:19)*.(cid:22)+(cid:20)(cid:0)(cid:22)/(cid:0);3(cid:20).+(cid:21)(cid:20)(cid:20)(cid:0)(cid:19)//(cid:19)+2(cid:21)-(cid:21)+*(cid:20)(cid:18)(cid:0)*0(cid:21)(cid:0)/(cid:21)(cid:20)34*(cid:20)(cid:0)(cid:22)1(cid:0)*0(cid:21)(cid:0)*(cid:21)(cid:20)*.+2(cid:0)(cid:19)+,(cid:0) (cid:0))(cid:0) -(cid:22)+.*(cid:22)/.+2(cid:0)/(cid:21)>3./(cid:21),(cid:0);5(cid:0)(cid:2)3;(cid:20)(cid:21)(cid:28)*.(cid:22)+(cid:0)!(cid:4)(cid:4)7(cid:13)8(cid:18)(cid:0)(cid:19)(cid:0)(cid:17)(cid:22)(cid:29)(cid:21)/(cid:21),(cid:0)(cid:4)+(cid:28).,(cid:21)+*(cid:18)(cid:0)+(cid:21)6(cid:0)(cid:22)/(cid:0)-(cid:22)/(cid:21)(cid:0)(cid:21)11.(cid:28).(cid:21)+*(cid:0) (cid:0)% (cid:0) *(cid:21)(cid:28)0+(cid:22)4(cid:22)2.(cid:28)(cid:19)4(cid:0)(cid:22)/(cid:0)(cid:22)9(cid:21)/(cid:19)*.(cid:22)+(cid:19)4(cid:0)-(cid:21)*0(cid:22),(cid:20)(cid:0)*(cid:22)(cid:0)(cid:28)(cid:22)+*/(cid:22)4(cid:0)1(cid:22)/(cid:0)*0(cid:21)(cid:0)/.(cid:20)A(cid:20)(cid:0).,(cid:21)+*.1.(cid:21),(cid:0).+(cid:0)(cid:2)3;(cid:20)(cid:21)(cid:28)*.(cid:22)+(cid:0)!(cid:4)(cid:4)7(cid:10)8(cid:18)(cid:0)(cid:19)+,(cid:0) (cid:0)%%(cid:0) (cid:19)+5(cid:0)(cid:22)*0(cid:21)/(cid:0)(cid:28)./(cid:28)3-(cid:20)*(cid:19)+(cid:28)(cid:21)(cid:20)(cid:0)*0(cid:19)*(cid:0)*0(cid:21)(cid:0)(cid:17)(cid:22)(cid:29)(cid:21)/(cid:21),(cid:0)=3(cid:20).+(cid:21)(cid:20)(cid:20)(cid:0)A+(cid:22)6(cid:20)(cid:0)(cid:22)/(cid:0)0(cid:19)(cid:20)(cid:0)/(cid:21)(cid:19)(cid:20)(cid:22)+(cid:0)*(cid:22)(cid:0);(cid:21)4.(cid:21)(cid:29)(cid:21)(cid:0)-(cid:19)5(cid:0)0(cid:19)(cid:29)(cid:21)(cid:0)(cid:19)(cid:0) (cid:0)%(cid:26)(cid:0) -(cid:19)*(cid:21)/.(cid:19)4(cid:0).-9(cid:19)(cid:28)*(cid:0)(cid:22)+(cid:0)*0(cid:21)(cid:0)(cid:21)11(cid:21)(cid:28)*.(cid:29)(cid:21)+(cid:21)(cid:20)(cid:20)(cid:0)(cid:22)1(cid:0)*0(cid:21)(cid:0)(cid:5)/.(cid:29)(cid:19)(cid:28)5(cid:0)(cid:5)/(cid:22)2/(cid:19)-(cid:0)(cid:22)/(cid:0)(cid:19)+5(cid:0)(cid:22)1(cid:0).*(cid:20)(cid:0).+,.(cid:29).,3(cid:19)4(cid:0)(cid:20)(cid:19)1(cid:21)23(cid:19)/,(cid:20)(cid:23)(cid:0)(cid:0) (cid:0)%(cid:24)(cid:0) (cid:3)0(cid:21)(cid:0)(cid:17)(cid:22)(cid:29)(cid:21)/(cid:21),(cid:0)=3(cid:20).+(cid:21)(cid:20)(cid:20)(cid:0)-(cid:19)5(cid:0)-(cid:19)A(cid:21)(cid:0)*0.(cid:20)(cid:0)(cid:21)(cid:29)(cid:19)43(cid:19)*.(cid:22)+(cid:0)(cid:19)+,(cid:0)(cid:19),?3(cid:20)*-(cid:21)+*(cid:0)*(cid:22)(cid:0)*0(cid:21)(cid:0)(cid:5)/.(cid:29)(cid:19)(cid:28)5(cid:0)(cid:5)/(cid:22)2/(cid:19)-(cid:0)(cid:19)*(cid:0)(cid:19)+5(cid:0) (cid:0)%(cid:30)(cid:0) *.-(cid:21)(cid:18)(cid:0);3*(cid:0)-3(cid:20)*(cid:18)(cid:0)(cid:19)*(cid:0)(cid:19)(cid:0)-.+.-3-(cid:18)(cid:0)(cid:21)(cid:29)(cid:19)43(cid:19)*(cid:21)(cid:0)*0(cid:21)(cid:0)(cid:5)/.(cid:29)(cid:19)(cid:28)5(cid:0)(cid:5)/(cid:22)2/(cid:19)-(cid:0)(cid:19)*(cid:0)4(cid:21)(cid:19)(cid:20)*(cid:0)(cid:22)+(cid:28)(cid:21)(cid:0)(cid:21)(cid:29)(cid:21)/5(cid:0)*6(cid:21)4(cid:29)(cid:21)(cid:0)7%(cid:26)8(cid:0) (cid:0)%’(cid:0) -(cid:22)+*0(cid:20)(cid:0)(cid:19)+,(cid:0)-(cid:22),.15(cid:0)*0(cid:21)(cid:0)(cid:5)/(cid:22)2/(cid:19)-(cid:0)(cid:19)(cid:20)(cid:0)+(cid:21)(cid:28)(cid:21)(cid:20)(cid:20)(cid:19)/5(cid:0);(cid:19)(cid:20)(cid:21),(cid:0)(cid:22)+(cid:0)*0(cid:21)(cid:0)/(cid:21)(cid:20)34*(cid:20)(cid:23)(cid:0) (cid:0)%(cid:31)(cid:0) BCCCD(cid:0) EFCBGHI(cid:0)GJJKJJLKMN(cid:0)OI(cid:0)G(cid:0)NPCFQ(cid:0)EGFNI(cid:0)",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Comprehensive Security Program"
      ],
      "case_id": "02.23_goodrx_holdings",
      "company_name": "GoodRx Holdings, Inc.",
      "date_issued": "2023-02-15",
      "year": 2023,
      "administration": "Biden",
      "legal_authority": "Sections 5(a)(1), 5(m)(1)(A), 13(b), 16(a)(1), and 19 of the Federal Trade Commission Act, 15 U.S.C. §§ 45(a)(1), 45(m)(1)(A), 53(b), 56(a)(1), 57b, and the Health Breach Notification Rule, 16 C.F.R. § 318",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/2023090-goodrx-holdings-inc",
      "docket_number": "23-cv-460"
    },
    {
      "provision_number": "VI",
      "title": "Third Party Assessment",
      "category": "assessment",
      "summary": "Defendant must obtain biennial third-party assessments of its privacy program from a qualified assessor, with the first assessment due within 180 days of the Order's entry, and must submit those assessments to the FTC.",
      "verbatim_text": "(cid:0)%(cid:31)(cid:0) BCCCD(cid:0) EFCBGHI(cid:0)GJJKJJLKMN(cid:0)OI(cid:0)G(cid:0)NPCFQ(cid:0)EGFNI(cid:0) (cid:0)%((cid:0) (cid:0) (cid:4)(cid:3)(cid:0)(cid:4)(cid:2)(cid:0)(cid:13)(cid:6)(cid:12)(cid:3)$(cid:9)(cid:12)(cid:0)(cid:11)(cid:12)(cid:10)(cid:9)(cid:12)(cid:9)(cid:10)(cid:0)*0(cid:19)*(cid:18)(cid:0).+(cid:0)(cid:28)(cid:22)++(cid:21)(cid:28)*.(cid:22)+(cid:0)6.*0(cid:0)(cid:28)(cid:22)-94.(cid:19)+(cid:28)(cid:21)(cid:0)6.*0(cid:0)(cid:2)(cid:21)(cid:28)*.(cid:22)+(cid:0)!(cid:4)(cid:4)(cid:18)(cid:0)1(cid:22)/(cid:0) (cid:0)%&(cid:0) (cid:19)+5(cid:0)(cid:17)(cid:22)(cid:29)(cid:21)/(cid:21),(cid:0)=3(cid:20).+(cid:21)(cid:20)(cid:20)(cid:0)*0(cid:19)*(cid:0)(cid:28)(cid:22)44(cid:21)(cid:28)*(cid:20)(cid:18)(cid:0)-(cid:19).+*(cid:19).+(cid:20)(cid:18)(cid:0)3(cid:20)(cid:21)(cid:20)(cid:18)(cid:0),.(cid:20)(cid:28)4(cid:22)(cid:20)(cid:21)(cid:20)(cid:18)(cid:0)(cid:22)/(cid:0)9/(cid:22)(cid:29).,(cid:21)(cid:20)(cid:0)(cid:19)(cid:28)(cid:28)(cid:21)(cid:20)(cid:20)(cid:0)*(cid:22)(cid:0)(cid:17)(cid:22)(cid:29)(cid:21)/(cid:21),(cid:0) (cid:0)%)(cid:0) (cid:4)+1(cid:22)/-(cid:19)*.(cid:22)+(cid:18)(cid:0)(cid:10)(cid:21)1(cid:21)+,(cid:19)+*(cid:0)-3(cid:20)*(cid:0)(cid:22);*(cid:19).+(cid:0).+.*.(cid:19)4(cid:0)(cid:19)+,(cid:0);.(cid:21)++.(cid:19)4(cid:0)(cid:19)(cid:20)(cid:20)(cid:21)(cid:20)(cid:20)-(cid:21)+*(cid:20)(cid:0)7R(cid:8)(cid:20)(cid:20)(cid:21)(cid:20)(cid:20)-(cid:21)+*(cid:20)S8(cid:25)(cid:0) (cid:0)(cid:26) (cid:0) (cid:8)(cid:23)(cid:0) (cid:3)0(cid:21)(cid:0)(cid:8)(cid:20)(cid:20)(cid:21)(cid:20)(cid:20)-(cid:21)+*(cid:20)(cid:0)-3(cid:20)*(cid:0);(cid:21)(cid:0)(cid:22);*(cid:19).+(cid:21),(cid:0)1/(cid:22)-(cid:0)(cid:22)+(cid:21)(cid:0)(cid:22)/(cid:0)-(cid:22)/(cid:21)(cid:0)>3(cid:19)4.1.(cid:21),(cid:18)(cid:0)(cid:22);?(cid:21)(cid:28)*.(cid:29)(cid:21)(cid:18)(cid:0) (cid:0)(cid:26)%(cid:0) .+,(cid:21)9(cid:21)+,(cid:21)+*(cid:0)*0./,(cid:27)9(cid:19)/*5(cid:0)9/(cid:22)1(cid:21)(cid:20)(cid:20).(cid:22)+(cid:19)4(cid:20)(cid:0)7R(cid:8)(cid:20)(cid:20)(cid:21)(cid:20)(cid:20)(cid:22)/7(cid:20)8S8(cid:0)60(cid:22)(cid:25)(cid:0)7%8(cid:0)3(cid:20)(cid:21)(cid:20)(cid:0)9/(cid:22)(cid:28)(cid:21),3/(cid:21)(cid:20)(cid:0)(cid:19)+,(cid:0)(cid:20)*(cid:19)+,(cid:19)/,(cid:20)(cid:0) (cid:0)(cid:26)(cid:26)(cid:0) 2(cid:21)+(cid:21)/(cid:19)445(cid:0)(cid:19)(cid:28)(cid:28)(cid:21)9*(cid:21),(cid:0).+(cid:0)*0(cid:21)(cid:0)9/(cid:22)1(cid:21)(cid:20)(cid:20).(cid:22)+<(cid:0)7(cid:26)8(cid:0)(cid:28)(cid:22)+,3(cid:28)*(cid:20)(cid:0)(cid:19)+(cid:0).+,(cid:21)9(cid:21)+,(cid:21)+*(cid:0)/(cid:21)(cid:29).(cid:21)6(cid:0)(cid:22)1(cid:0)*0(cid:21)(cid:0)(cid:5)/.(cid:29)(cid:19)(cid:28)5(cid:0) (cid:0)(cid:26)(cid:24)(cid:0) (cid:5)/(cid:22)2/(cid:19)-<(cid:0)7(cid:24)8(cid:0)/(cid:21)*(cid:19).+(cid:20)(cid:0)(cid:19)44(cid:0),(cid:22)(cid:28)3-(cid:21)+*(cid:20)(cid:0)/(cid:21)4(cid:21)(cid:29)(cid:19)+*(cid:0)*(cid:22)(cid:0)(cid:21)(cid:19)(cid:28)0(cid:0)(cid:8)(cid:20)(cid:20)(cid:21)(cid:20)(cid:20)-(cid:21)+*(cid:0)1(cid:22)/(cid:0)1.(cid:29)(cid:21)(cid:0)7’8(cid:0)5(cid:21)(cid:19)/(cid:20)(cid:0)(cid:19)1*(cid:21)/(cid:0) (cid:0)(cid:26)(cid:30)(cid:0) (cid:28)(cid:22)-94(cid:21)*.(cid:22)+(cid:0)(cid:22)1(cid:0)(cid:20)3(cid:28)0(cid:0)(cid:8)(cid:20)(cid:20)(cid:21)(cid:20)(cid:20)-(cid:21)+*<(cid:0)(cid:19)+,(cid:0)7(cid:30)8(cid:0)6.44(cid:0)9/(cid:22)(cid:29).,(cid:21)(cid:0)(cid:20)3(cid:28)0(cid:0),(cid:22)(cid:28)3-(cid:21)+*(cid:20)(cid:0)*(cid:22)(cid:0)*0(cid:21)(cid:0)(cid:17)(cid:22)--.(cid:20)(cid:20).(cid:22)+(cid:0)6.*0.+(cid:0) (cid:0)(cid:26)’(cid:0) *(cid:21)+(cid:0)7% 8(cid:0),(cid:19)5(cid:20)(cid:0)(cid:22)1(cid:0)/(cid:21)(cid:28)(cid:21).9*(cid:0)(cid:22)1(cid:0)(cid:19)(cid:0)6/.**(cid:21)+(cid:0)/(cid:21)>3(cid:21)(cid:20)*(cid:0)1/(cid:22)-(cid:0)(cid:19)(cid:0)/(cid:21)9/(cid:21)(cid:20)(cid:21)+*(cid:19)*.(cid:29)(cid:21)(cid:0)(cid:22)1(cid:0)*0(cid:21)(cid:0)(cid:17)(cid:22)--.(cid:20)(cid:20).(cid:22)+(cid:23)(cid:0)(cid:0)(cid:15)(cid:22)(cid:0) (cid:0)(cid:26)(cid:31)(cid:0) ,(cid:22)(cid:28)3-(cid:21)+*(cid:20)(cid:0)-(cid:19)5(cid:0);(cid:21)(cid:0)6.*00(cid:21)4,(cid:0)(cid:22)+(cid:0)*0(cid:21)(cid:0);(cid:19)(cid:20).(cid:20)(cid:0)(cid:22)1(cid:0)(cid:19)(cid:0)(cid:28)4(cid:19).-(cid:0)(cid:22)1(cid:0)(cid:28)(cid:22)+1.,(cid:21)+*.(cid:19)4.*5(cid:18)(cid:0)9/(cid:22)9/.(cid:21)*(cid:19)/5(cid:0)(cid:22)/(cid:0)*/(cid:19),(cid:21)(cid:0) (cid:0)(cid:26)((cid:0) (cid:20)(cid:21)(cid:28)/(cid:21)*(cid:20)(cid:18)(cid:0)6(cid:22)/A(cid:0)9/(cid:22),3(cid:28)*(cid:0)9/(cid:22)*(cid:21)(cid:28)*.(cid:22)+(cid:18)(cid:0)(cid:19)**(cid:22)/+(cid:21)5(cid:0)(cid:28)4.(cid:21)+*(cid:0)9/.(cid:29).4(cid:21)2(cid:21)(cid:18)(cid:0)(cid:20)*(cid:19)*3*(cid:22)/5(cid:0)(cid:21):(cid:21)-9*.(cid:22)+(cid:18)(cid:0)(cid:22)/(cid:0)(cid:19)+5(cid:0)(cid:20).-.4(cid:19)/(cid:0) (cid:0)(cid:26)&(cid:0) (cid:28)4(cid:3)(cid:19)(cid:4).(cid:5)-(cid:6)(cid:23)(cid:7)(cid:0)(cid:0)(cid:8)(cid:3)(cid:3)0(cid:9)(cid:21)(cid:10)(cid:0)(cid:8)(cid:0)(cid:20)(cid:12)(cid:20)(cid:21)(cid:10)(cid:20)(cid:9)(cid:20)(cid:12)(cid:22)(cid:0)/(cid:13)7(cid:11)(cid:20)8(cid:12)(cid:0)-(cid:0)3(cid:9)(cid:12)(cid:20)*(cid:14)(cid:0)0(cid:8)(cid:19)(cid:15)(cid:29)(cid:21)(cid:9)(cid:0)(cid:15)(cid:19)(cid:3)(cid:0)-(cid:0)(cid:15).+(cid:16).(cid:6)-(cid:15)3(cid:17)-(cid:3)(cid:4)(cid:0)(cid:11)(cid:22)(cid:15)1(cid:0)*0/(cid:21)(cid:0)(cid:0)(cid:0)(cid:21)(cid:0)(cid:0)(cid:0)(cid:0)7(cid:24)8(cid:0)5(cid:21)(cid:19)/(cid:20)(cid:0)(cid:22)1(cid:0)(cid:21)(cid:0):9(cid:21)/.(cid:21)+(cid:28)(cid:21)(cid:0).+(cid:0)*0(cid:21)(cid:0)1.(cid:21)4,(cid:0)(cid:22)1(cid:0) (cid:4)!(cid:4)(cid:7)(cid:0)(cid:9)(cid:15)(cid:8)(cid:7)(cid:3)\"(cid:0)(cid:6)(cid:10)#(cid:14)(cid:9)(cid:15)(cid:3)(cid:0)(cid:8)(cid:15)(cid:10)(cid:0)(cid:3)$(cid:9)(cid:12)(cid:0)(cid:9)(cid:7)(cid:4)(cid:9)(cid:13) (cid:2) (cid:11) (cid:5) (cid:4) (cid:18)(cid:0) (cid:0) (cid:0) (cid:17)(cid:19)(cid:20)(cid:21)(cid:0)(cid:15)(cid:22)(cid:23)(cid:0)(cid:24)(cid:25)(cid:26)(cid:24)(cid:27)(cid:28)(cid:29)(cid:27)(cid:30)(cid:31) (cid:0) (cid:17) (cid:5) (cid:16) (cid:18) (cid:11) (cid:12) (cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0) %&(cid:0) (cid:0) (cid:0)\n\n(cid:0)%((cid:0) (cid:0) (cid:4)(cid:3)(cid:0)(cid:4)(cid:2)(cid:0)(cid:13)(cid:6)(cid:12)(cid:3)$(cid:9)(cid:12)(cid:0)(cid:11)(cid:12)(cid:10)(cid:9)(cid:12)(cid:9)(cid:10)(cid:0)*0(cid:19)*(cid:18)(cid:0).+(cid:0)(cid:28)(cid:22)++(cid:21)(cid:28)*.(cid:22)+(cid:0)6.*0(cid:0)(cid:28)(cid:22)-94.(cid:19)+(cid:28)(cid:21)(cid:0)6.*0(cid:0)(cid:2)(cid:21)(cid:28)*.(cid:22)+(cid:0)!(cid:4)(cid:4)(cid:18)(cid:0)1(cid:22)/(cid:0) (cid:0)%&(cid:0) (cid:19)+5(cid:0)(cid:17)(cid:22)(cid:29)(cid:21)/(cid:21),(cid:0)=3(cid:20).+(cid:21)(cid:20)(cid:20)(cid:0)*0(cid:19)*(cid:0)(cid:28)(cid:22)44(cid:21)(cid:28)*(cid:20)(cid:18)(cid:0)-(cid:19).+*(cid:19).+(cid:20)(cid:18)(cid:0)3(cid:20)(cid:21)(cid:20)(cid:18)(cid:0),.(cid:20)(cid:28)4(cid:22)(cid:20)(cid:21)(cid:20)(cid:18)(cid:0)(cid:22)/(cid:0)9/(cid:22)(cid:29).,(cid:21)(cid:20)(cid:0)(cid:19)(cid:28)(cid:28)(cid:21)(cid:20)(cid:20)(cid:0)*(cid:22)(cid:0)(cid:17)(cid:22)(cid:29)(cid:21)/(cid:21),(cid:0) (cid:0)%)(cid:0) (cid:4)+1(cid:22)/-(cid:19)*.(cid:22)+(cid:18)(cid:0)(cid:10)(cid:21)1(cid:21)+,(cid:19)+*(cid:0)-3(cid:20)*(cid:0)(cid:22);*(cid:19).+(cid:0).+.*.(cid:19)4(cid:0)(cid:19)+,(cid:0);.(cid:21)++.(cid:19)4(cid:0)(cid:19)(cid:20)(cid:20)(cid:21)(cid:20)(cid:20)-(cid:21)+*(cid:20)(cid:0)7R(cid:8)(cid:20)(cid:20)(cid:21)(cid:20)(cid:20)-(cid:21)+*(cid:20)S8(cid:25)(cid:0) (cid:0)(cid:26) (cid:0) (cid:8)(cid:23)(cid:0) (cid:3)0(cid:21)(cid:0)(cid:8)(cid:20)(cid:20)(cid:21)(cid:20)(cid:20)-(cid:21)+*(cid:20)(cid:0)-3(cid:20)*(cid:0);(cid:21)(cid:0)(cid:22);*(cid:19).+(cid:21),(cid:0)1/(cid:22)-(cid:0)(cid:22)+(cid:21)(cid:0)(cid:22)/(cid:0)-(cid:22)/(cid:21)(cid:0)>3(cid:19)4.1.(cid:21),(cid:18)(cid:0)(cid:22);?(cid:21)(cid:28)*.(cid:29)(cid:21)(cid:18)(cid:0) (cid:0)(cid:26)%(cid:0) .+,(cid:21)9(cid:21)+,(cid:21)+*(cid:0)*0./,(cid:27)9(cid:19)/*5(cid:0)9/(cid:22)1(cid:21)(cid:20)(cid:20).(cid:22)+(cid:19)4(cid:20)(cid:0)7R(cid:8)(cid:20)(cid:20)(cid:21)(cid:20)(cid:20)(cid:22)/7(cid:20)8S8(cid:0)60(cid:22)(cid:25)(cid:0)7%8(cid:0)3(cid:20)(cid:21)(cid:20)(cid:0)9/(cid:22)(cid:28)(cid:21),3/(cid:21)(cid:20)(cid:0)(cid:19)+,(cid:0)(cid:20)*(cid:19)+,(cid:19)/,(cid:20)(cid:0) (cid:0)(cid:26)(cid:26)(cid:0) 2(cid:21)+(cid:21)/(cid:19)445(cid:0)(cid:19)(cid:28)(cid:28)(cid:21)9*(cid:21),(cid:0).+(cid:0)*0(cid:21)(cid:0)9/(cid:22)1(cid:21)(cid:20)(cid:20).(cid:22)+<(cid:0)7(cid:26)8(cid:0)(cid:28)(cid:22)+,3(cid:28)*(cid:20)(cid:0)(cid:19)+(cid:0).+,(cid:21)9(cid:21)+,(cid:21)+*(cid:0)/(cid:21)(cid:29).(cid:21)6(cid:0)(cid:22)1(cid:0)*0(cid:21)(cid:0)(cid:5)/.(cid:29)(cid:19)(cid:28)5(cid:0) (cid:0)(cid:26)(cid:24)(cid:0) (cid:5)/(cid:22)2/(cid:19)-<(cid:0)7(cid:24)8(cid:0)/(cid:21)*(cid:19).+(cid:20)(cid:0)(cid:19)44(cid:0),(cid:22)(cid:28)3-(cid:21)+*(cid:20)(cid:0)/(cid:21)4(cid:21)(cid:29)(cid:19)+*(cid:0)*(cid:22)(cid:0)(cid:21)(cid:19)(cid:28)0(cid:0)(cid:8)(cid:20)(cid:20)(cid:21)(cid:20)(cid:20)-(cid:21)+*(cid:0)1(cid:22)/(cid:0)1.(cid:29)(cid:21)(cid:0)7’8(cid:0)5(cid:21)(cid:19)/(cid:20)(cid:0)(cid:19)1*(cid:21)/(cid:0) (cid:0)(cid:26)(cid:30)(cid:0) (cid:28)(cid:22)-94(cid:21)*.(cid:22)+(cid:0)(cid:22)1(cid:0)(cid:20)3(cid:28)0(cid:0)(cid:8)(cid:20)(cid:20)(cid:21)(cid:20)(cid:20)-(cid:21)+*<(cid:0)(cid:19)+,(cid:0)7(cid:30)8(cid:0)6.44(cid:0)9/(cid:22)(cid:29).,(cid:21)(cid:0)(cid:20)3(cid:28)0(cid:0),(cid:22)(cid:28)3-(cid:21)+*(cid:20)(cid:0)*(cid:22)(cid:0)*0(cid:21)(cid:0)(cid:17)(cid:22)--.(cid:20)(cid:20).(cid:22)+(cid:0)6.*0.+(cid:0) (cid:0)(cid:26)’(cid:0) *(cid:21)+(cid:0)7% 8(cid:0),(cid:19)5(cid:20)(cid:0)(cid:22)1(cid:0)/(cid:21)(cid:28)(cid:21).9*(cid:0)(cid:22)1(cid:0)(cid:19)(cid:0)6/.**(cid:21)+(cid:0)/(cid:21)>3(cid:21)(cid:20)*(cid:0)1/(cid:22)-(cid:0)(cid:19)(cid:0)/(cid:21)9/(cid:21)(cid:20)(cid:21)+*(cid:19)*.(cid:29)(cid:21)(cid:0)(cid:22)1(cid:0)*0(cid:21)(cid:0)(cid:17)(cid:22)--.(cid:20)(cid:20).(cid:22)+(cid:23)(cid:0)(cid:0)(cid:15)(cid:22)(cid:0) (cid:0)(cid:26)(cid:31)(cid:0) ,(cid:22)(cid:28)3-(cid:21)+*(cid:20)(cid:0)-(cid:19)5(cid:0);(cid:21)(cid:0)6.*00(cid:21)4,(cid:0)(cid:22)+(cid:0)*0(cid:21)(cid:0);(cid:19)(cid:20).(cid:20)(cid:0)(cid:22)1(cid:0)(cid:19)(cid:0)(cid:28)4(cid:19).-(cid:0)(cid:22)1(cid:0)(cid:28)(cid:22)+1.,(cid:21)+*.(cid:19)4.*5(cid:18)(cid:0)9/(cid:22)9/.(cid:21)*(cid:19)/5(cid:0)(cid:22)/(cid:0)*/(cid:19),(cid:21)(cid:0) (cid:0)(cid:26)((cid:0) (cid:20)(cid:21)(cid:28)/(cid:21)*(cid:20)(cid:18)(cid:0)6(cid:22)/A(cid:0)9/(cid:22),3(cid:28)*(cid:0)9/(cid:22)*(cid:21)(cid:28)*.(cid:22)+(cid:18)(cid:0)(cid:19)**(cid:22)/+(cid:21)5(cid:0)(cid:28)4.(cid:21)+*(cid:0)9/.(cid:29).4(cid:21)2(cid:21)(cid:18)(cid:0)(cid:20)*(cid:19)*3*(cid:22)/5(cid:0)(cid:21):(cid:21)-9*.(cid:22)+(cid:18)(cid:0)(cid:22)/(cid:0)(cid:19)+5(cid:0)(cid:20).-.4(cid:19)/(cid:0) (cid:0)(cid:26)&(cid:0) (cid:28)4(cid:3)(cid:19)(cid:4).(cid:5)-(cid:6)(cid:23)(cid:7)(cid:0)(cid:0)(cid:8)(cid:3)(cid:3)0(cid:9)(cid:21)(cid:10)(cid:0)(cid:8)(cid:0)(cid:20)(cid:12)(cid:20)(cid:21)(cid:10)(cid:20)(cid:9)(cid:20)(cid:12)(cid:22)(cid:0)/(cid:13)7(cid:11)(cid:20)8(cid:12)(cid:0)-(cid:0)3(cid:9)(cid:12)(cid:20)*(cid:14)(cid:0)0(cid:8)(cid:19)(cid:15)(cid:29)(cid:21)(cid:9)(cid:0)(cid:15)(cid:19)(cid:3)(cid:0)-(cid:0)(cid:15).+(cid:16).(cid:6)-(cid:15)3(cid:17)-(cid:3)(cid:4)(cid:0)(cid:11)(cid:22)(cid:15)1(cid:0)*0/(cid:21)(cid:0)(cid:0)(cid:0)(cid:21)(cid:0)(cid:0)(cid:0)(cid:0)7(cid:24)8(cid:0)5(cid:21)(cid:19)/(cid:20)(cid:0)(cid:22)1(cid:0)(cid:21)(cid:0):9(cid:21)/.(cid:21)+(cid:28)(cid:21)(cid:0).+(cid:0)*0(cid:21)(cid:0)1.(cid:21)4,(cid:0)(cid:22)1(cid:0) (cid:4)!(cid:4)(cid:7)(cid:0)(cid:9)(cid:15)(cid:8)(cid:7)(cid:3)\"(cid:0)(cid:6)(cid:10)#(cid:14)(cid:9)(cid:15)(cid:3)(cid:0)(cid:8)(cid:15)(cid:10)(cid:0)(cid:3)$(cid:9)(cid:12)(cid:0)(cid:9)(cid:7)(cid:4)(cid:9)(cid:13) (cid:2) (cid:11) (cid:5) (cid:4) (cid:18)(cid:0) (cid:0) (cid:0) (cid:17)(cid:19)(cid:20)(cid:21)(cid:0)(cid:15)(cid:22)(cid:23)(cid:0)(cid:24)(cid:25)(cid:26)(cid:24)(cid:27)(cid:28)(cid:29)(cid:27)(cid:30)(cid:31) (cid:0) (cid:17) (cid:5) (cid:16) (cid:18) (cid:11) (cid:12) (cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0) %&(cid:0) (cid:0) (cid:0) CDEF(cid:0)GHIJKLMKNNGONKPQR(cid:0)(cid:0)(cid:0)PSLTUFVW(cid:0)XY(cid:0)(cid:0)(cid:0)Z[\\F](cid:0)NI^X_^IJ(cid:0)(cid:0)(cid:0)‘DaF(cid:0)Xb(cid:0)Sc(cid:0)JJ (cid:0) (cid:0)%(cid:0) *+,(cid:29)(cid:19)(cid:28)-(cid:0)(cid:19)./(cid:0)/(cid:19)0(cid:19)(cid:0)*+(cid:22)0(cid:21)(cid:28)0,(cid:22).(cid:23)(cid:0) (cid:0)(cid:26)(cid:0) 1(cid:23)(cid:0) (cid:13)(cid:22)+(cid:0)(cid:21)(cid:19)(cid:28)2(cid:0)(cid:8)(cid:20)(cid:20)(cid:21)(cid:20)(cid:20)3(cid:21).0(cid:18)(cid:0)(cid:10)(cid:21)4(cid:21)./(cid:19).0(cid:0)35(cid:20)0(cid:0)*+(cid:22)(cid:29),/(cid:21)(cid:0)02(cid:21)(cid:0)(cid:8)(cid:20)(cid:20)(cid:22)(cid:28),(cid:19)0(cid:21)(cid:0)(cid:10),+(cid:21)(cid:28)0(cid:22)+(cid:0)4(cid:22)+(cid:0) (cid:0)(cid:24)(cid:0) (cid:9).4(cid:22)+(cid:28)(cid:21)3(cid:21).0(cid:0)4(cid:22)+(cid:0)02(cid:21)(cid:0)15+(cid:21)(cid:19)5(cid:0)(cid:22)4(cid:0)(cid:17)(cid:22).(cid:20)53(cid:21)+(cid:0)(cid:5)+(cid:22)0(cid:21)(cid:28)0,(cid:22).(cid:0)(cid:19)0(cid:0)02(cid:21)(cid:0)(cid:13)(cid:21)/(cid:21)+(cid:19)6(cid:0)(cid:3)+(cid:19)/(cid:21)(cid:0)(cid:17)(cid:22)33,(cid:20)(cid:20),(cid:22).(cid:0)7,02(cid:0)02(cid:21)(cid:0) (cid:0)(cid:30)(cid:0) .(cid:19)3(cid:21)(cid:18)(cid:0)(cid:19)44,6,(cid:19)0,(cid:22).(cid:18)(cid:0)(cid:19)./(cid:0)85(cid:19)6,4,(cid:28)(cid:19)0,(cid:22).(cid:20)(cid:0)(cid:22)4(cid:0)02(cid:21)(cid:0)*+(cid:22)*(cid:22)(cid:20)(cid:21)/(cid:0)(cid:8)(cid:20)(cid:20)(cid:21)(cid:20)(cid:20)(cid:22)+(cid:18)(cid:0)72(cid:22)3(cid:0)02(cid:21)(cid:0)(cid:8)(cid:20)(cid:20)(cid:22)(cid:28),(cid:19)0(cid:21)(cid:0)(cid:10),+(cid:21)(cid:28)0(cid:22)+(cid:0)(cid:20)2(cid:19)66(cid:0) (cid:0)’(cid:0) 2(cid:19)(cid:29)(cid:21)(cid:0)02(cid:21)(cid:0)(cid:19)502(cid:22)+,0-(cid:0)0(cid:22)(cid:0)(cid:19)**+(cid:22)(cid:29)(cid:21)(cid:0),.(cid:0)2,(cid:20)(cid:0)(cid:22)+(cid:0)2(cid:21)+(cid:0)(cid:20)(cid:22)6(cid:21)(cid:0)/,(cid:20)(cid:28)+(cid:21)0,(cid:22).(cid:23)(cid:0) (cid:0)(cid:31)(cid:0) (cid:17)(cid:23)(cid:0) (cid:3)2(cid:21)(cid:0)+(cid:21)*(cid:22)+0,.9(cid:0)*(cid:21)+,(cid:22)/(cid:0)4(cid:22)+(cid:0)02(cid:21)(cid:0)(cid:8)(cid:20)(cid:20)(cid:21)(cid:20)(cid:20)3(cid:21).0(cid:20)(cid:0)35(cid:20)0(cid:0)(cid:28)(cid:22)(cid:29)(cid:21)+(cid:25)(cid:0):%;(cid:0)02(cid:21)(cid:0)4,+(cid:20)0(cid:0)-(cid:21)(cid:19)+(cid:0)(cid:19)40(cid:21)+(cid:0)02(cid:21)(cid:0) (cid:0)((cid:0) (cid:21).0+-(cid:0)(cid:22)4(cid:0)02,(cid:20)(cid:0)(cid:11)+/(cid:21)+(cid:0)4(cid:22)+(cid:0)02(cid:21)(cid:0),.,0,(cid:19)6(cid:0)(cid:8)(cid:20)(cid:20)(cid:21)(cid:20)(cid:20)3(cid:21).0<(cid:0)(cid:19)./(cid:0):(cid:26);(cid:0)(cid:21)(cid:19)(cid:28)2(cid:0)07(cid:22)(cid:0):(cid:26);(cid:0)-(cid:21)(cid:19)+(cid:0)*(cid:21)+,(cid:22)/(cid:0)02(cid:21)+(cid:21)(cid:19)40(cid:21)+(cid:0)4(cid:22)+(cid:0) (cid:0))(cid:0) 07(cid:21).0-(cid:0):(cid:26) ;(cid:0)-(cid:21)(cid:19)+(cid:20)(cid:0)(cid:19)40(cid:21)+(cid:0)02(cid:21)(cid:0)(cid:21).0+-(cid:0)(cid:22)4(cid:0)02,(cid:20)(cid:0)(cid:11)+/(cid:21)+(cid:0)4(cid:22)+(cid:0)02(cid:21)(cid:0)=,(cid:21)..,(cid:19)6(cid:0)(cid:8)(cid:20)(cid:20)(cid:21)(cid:20)(cid:20)3(cid:21).0(cid:20)(cid:23)(cid:0)(cid:0)(cid:0) (cid:0)&(cid:0) (cid:10)(cid:23)(cid:0) (cid:9)(cid:19)(cid:28)2(cid:0)(cid:8)(cid:20)(cid:20)(cid:21)(cid:20)(cid:20)3(cid:21).0(cid:0)35(cid:20)0(cid:18)(cid:0)4(cid:22)+(cid:0)02(cid:21)(cid:0)(cid:21).0,+(cid:21)(cid:0)(cid:19)(cid:20)(cid:20)(cid:21)(cid:20)(cid:20)3(cid:21).0(cid:0)*(cid:21)+,(cid:22)/(cid:25)(cid:0) (cid:0)% (cid:0) (cid:9)(cid:23)(cid:0) /(cid:21)0(cid:21)+3,.(cid:21)(cid:0)72(cid:21)02(cid:21)+(cid:0)(cid:10)(cid:21)4(cid:21)./(cid:19).0(cid:0)2(cid:19)(cid:20)(cid:0),3*6(cid:21)3(cid:21).0(cid:21)/(cid:0)(cid:19)./(cid:0)3(cid:19),.0(cid:19),.(cid:21)/(cid:0)02(cid:21)(cid:0)(cid:5)+,(cid:29)(cid:19)(cid:28)-(cid:0) (cid:0)%%(cid:0) (cid:5)+(cid:22)9+(cid:19)3(cid:0)+(cid:21)85,+(cid:21)/(cid:0)=-(cid:0)(cid:2)(cid:21)(cid:28)0,(cid:22).(cid:0)!(cid:4)(cid:4)<(cid:0) (cid:0)%(cid:26)(cid:0) (cid:13)(cid:23)(cid:0) (cid:19)(cid:20)(cid:20)(cid:21)(cid:20)(cid:20)(cid:0)02(cid:21)(cid:0)(cid:21)44(cid:21)(cid:28)0,(cid:29)(cid:21).(cid:21)(cid:20)(cid:20)(cid:0)(cid:22)4(cid:0)(cid:10)(cid:21)4(cid:21)./(cid:19).0>(cid:20)(cid:0),3*6(cid:21)3(cid:21).0(cid:19)0,(cid:22).(cid:0)(cid:19)./(cid:0)3(cid:19),.0(cid:21).(cid:19).(cid:28)(cid:21)(cid:0)(cid:22)4(cid:0) (cid:0)%(cid:24)(cid:0) (cid:2)5=(cid:21)(cid:28)0,(cid:22).(cid:20)(cid:0)!(cid:4)(cid:4):(cid:8);(cid:27):(cid:4);<(cid:0) (cid:0)%(cid:30)(cid:0) #(cid:23)(cid:0) ,/(cid:21).0,4-(cid:0)(cid:19).-(cid:0)9(cid:19)*(cid:20)(cid:0)(cid:22)+(cid:0)7(cid:21)(cid:19)?.(cid:21)(cid:20)(cid:20)(cid:21)(cid:20)(cid:0),.(cid:0)02(cid:21)(cid:0)(cid:5)+,(cid:29)(cid:19)(cid:28)-(cid:0)(cid:5)+(cid:22)9+(cid:19)3(cid:0)(cid:22)+(cid:0),.(cid:20)0(cid:19).(cid:28)(cid:21)(cid:20)(cid:0)(cid:22)4(cid:0)3(cid:19)0(cid:21)+,(cid:19)6(cid:0) (cid:0)%’(cid:0) .(cid:22).(cid:28)(cid:22)3*6,(cid:19).(cid:28)(cid:21)(cid:0)7,02(cid:0)(cid:2)5=(cid:20)(cid:21)(cid:28)0,(cid:22).(cid:20)(cid:0)!(cid:4)(cid:4):(cid:8);(cid:27):(cid:4);<(cid:0)\n\nCDEF(cid:0)GHIJKLMKNNGONKPQR(cid:0)(cid:0)(cid:0)PSLTUFVW(cid:0)XY(cid:0)(cid:0)(cid:0)Z[\\F](cid:0)NI^X_^IJ(cid:0)(cid:0)(cid:0)‘DaF(cid:0)Xb(cid:0)Sc(cid:0)JJ (cid:0) (cid:0)%(cid:0) *+,(cid:29)(cid:19)(cid:28)-(cid:0)(cid:19)./(cid:0)/(cid:19)0(cid:19)(cid:0)*+(cid:22)0(cid:21)(cid:28)0,(cid:22).(cid:23)(cid:0) (cid:0)(cid:26)(cid:0) 1(cid:23)(cid:0) (cid:13)(cid:22)+(cid:0)(cid:21)(cid:19)(cid:28)2(cid:0)(cid:8)(cid:20)(cid:20)(cid:21)(cid:20)(cid:20)3(cid:21).0(cid:18)(cid:0)(cid:10)(cid:21)4(cid:21)./(cid:19).0(cid:0)35(cid:20)0(cid:0)*+(cid:22)(cid:29),/(cid:21)(cid:0)02(cid:21)(cid:0)(cid:8)(cid:20)(cid:20)(cid:22)(cid:28),(cid:19)0(cid:21)(cid:0)(cid:10),+(cid:21)(cid:28)0(cid:22)+(cid:0)4(cid:22)+(cid:0) (cid:0)(cid:24)(cid:0) (cid:9).4(cid:22)+(cid:28)(cid:21)3(cid:21).0(cid:0)4(cid:22)+(cid:0)02(cid:21)(cid:0)15+(cid:21)(cid:19)5(cid:0)(cid:22)4(cid:0)(cid:17)(cid:22).(cid:20)53(cid:21)+(cid:0)(cid:5)+(cid:22)0(cid:21)(cid:28)0,(cid:22).(cid:0)(cid:19)0(cid:0)02(cid:21)(cid:0)(cid:13)(cid:21)/(cid:21)+(cid:19)6(cid:0)(cid:3)+(cid:19)/(cid:21)(cid:0)(cid:17)(cid:22)33,(cid:20)(cid:20),(cid:22).(cid:0)7,02(cid:0)02(cid:21)(cid:0) (cid:0)(cid:30)(cid:0) .(cid:19)3(cid:21)(cid:18)(cid:0)(cid:19)44,6,(cid:19)0,(cid:22).(cid:18)(cid:0)(cid:19)./(cid:0)85(cid:19)6,4,(cid:28)(cid:19)0,(cid:22).(cid:20)(cid:0)(cid:22)4(cid:0)02(cid:21)(cid:0)*+(cid:22)*(cid:22)(cid:20)(cid:21)/(cid:0)(cid:8)(cid:20)(cid:20)(cid:21)(cid:20)(cid:20)(cid:22)+(cid:18)(cid:0)72(cid:22)3(cid:0)02(cid:21)(cid:0)(cid:8)(cid:20)(cid:20)(cid:22)(cid:28),(cid:19)0(cid:21)(cid:0)(cid:10),+(cid:21)(cid:28)0(cid:22)+(cid:0)(cid:20)2(cid:19)66(cid:0) (cid:0)’(cid:0) 2(cid:19)(cid:29)(cid:21)(cid:0)02(cid:21)(cid:0)(cid:19)502(cid:22)+,0-(cid:0)0(cid:22)(cid:0)(cid:19)**+(cid:22)(cid:29)(cid:21)(cid:0),.(cid:0)2,(cid:20)(cid:0)(cid:22)+(cid:0)2(cid:21)+(cid:0)(cid:20)(cid:22)6(cid:21)(cid:0)/,(cid:20)(cid:28)+(cid:21)0,(cid:22).(cid:23)(cid:0) (cid:0)(cid:31)(cid:0) (cid:17)(cid:23)(cid:0) (cid:3)2(cid:21)(cid:0)+(cid:21)*(cid:22)+0,.9(cid:0)*(cid:21)+,(cid:22)/(cid:0)4(cid:22)+(cid:0)02(cid:21)(cid:0)(cid:8)(cid:20)(cid:20)(cid:21)(cid:20)(cid:20)3(cid:21).0(cid:20)(cid:0)35(cid:20)0(cid:0)(cid:28)(cid:22)(cid:29)(cid:21)+(cid:25)(cid:0):%;(cid:0)02(cid:21)(cid:0)4,+(cid:20)0(cid:0)-(cid:21)(cid:19)+(cid:0)(cid:19)40(cid:21)+(cid:0)02(cid:21)(cid:0) (cid:0)((cid:0) (cid:21).0+-(cid:0)(cid:22)4(cid:0)02,(cid:20)(cid:0)(cid:11)+/(cid:21)+(cid:0)4(cid:22)+(cid:0)02(cid:21)(cid:0),.,0,(cid:19)6(cid:0)(cid:8)(cid:20)(cid:20)(cid:21)(cid:20)(cid:20)3(cid:21).0<(cid:0)(cid:19)./(cid:0):(cid:26);(cid:0)(cid:21)(cid:19)(cid:28)2(cid:0)07(cid:22)(cid:0):(cid:26);(cid:0)-(cid:21)(cid:19)+(cid:0)*(cid:21)+,(cid:22)/(cid:0)02(cid:21)+(cid:21)(cid:19)40(cid:21)+(cid:0)4(cid:22)+(cid:0) (cid:0))(cid:0) 07(cid:21).0-(cid:0):(cid:26) ;(cid:0)-(cid:21)(cid:19)+(cid:20)(cid:0)(cid:19)40(cid:21)+(cid:0)02(cid:21)(cid:0)(cid:21).0+-(cid:0)(cid:22)4(cid:0)02,(cid:20)(cid:0)(cid:11)+/(cid:21)+(cid:0)4(cid:22)+(cid:0)02(cid:21)(cid:0)=,(cid:21)..,(cid:19)6(cid:0)(cid:8)(cid:20)(cid:20)(cid:21)(cid:20)(cid:20)3(cid:21).0(cid:20)(cid:23)(cid:0)(cid:0)(cid:0) (cid:0)&(cid:0) (cid:10)(cid:23)(cid:0) (cid:9)(cid:19)(cid:28)2(cid:0)(cid:8)(cid:20)(cid:20)(cid:21)(cid:20)(cid:20)3(cid:21).0(cid:0)35(cid:20)0(cid:18)(cid:0)4(cid:22)+(cid:0)02(cid:21)(cid:0)(cid:21).0,+(cid:21)(cid:0)(cid:19)(cid:20)(cid:20)(cid:21)(cid:20)(cid:20)3(cid:21).0(cid:0)*(cid:21)+,(cid:22)/(cid:25)(cid:0) (cid:0)% (cid:0) (cid:9)(cid:23)(cid:0) /(cid:21)0(cid:21)+3,.(cid:21)(cid:0)72(cid:21)02(cid:21)+(cid:0)(cid:10)(cid:21)4(cid:21)./(cid:19).0(cid:0)2(cid:19)(cid:20)(cid:0),3*6(cid:21)3(cid:21).0(cid:21)/(cid:0)(cid:19)./(cid:0)3(cid:19),.0(cid:19),.(cid:21)/(cid:0)02(cid:21)(cid:0)(cid:5)+,(cid:29)(cid:19)(cid:28)-(cid:0) (cid:0)%%(cid:0) (cid:5)+(cid:22)9+(cid:19)3(cid:0)+(cid:21)85,+(cid:21)/(cid:0)=-(cid:0)(cid:2)(cid:21)(cid:28)0,(cid:22).(cid:0)!(cid:4)(cid:4)<(cid:0) (cid:0)%(cid:26)(cid:0) (cid:13)(cid:23)(cid:0) (cid:19)(cid:20)(cid:20)(cid:21)(cid:20)(cid:20)(cid:0)02(cid:21)(cid:0)(cid:21)44(cid:21)(cid:28)0,(cid:29)(cid:21).(cid:21)(cid:20)(cid:20)(cid:0)(cid:22)4(cid:0)(cid:10)(cid:21)4(cid:21)./(cid:19).0>(cid:20)(cid:0),3*6(cid:21)3(cid:21).0(cid:19)0,(cid:22).(cid:0)(cid:19)./(cid:0)3(cid:19),.0(cid:21).(cid:19).(cid:28)(cid:21)(cid:0)(cid:22)4(cid:0) (cid:0)%(cid:24)(cid:0) (cid:2)5=(cid:21)(cid:28)0,(cid:22).(cid:20)(cid:0)!(cid:4)(cid:4):(cid:8);(cid:27):(cid:4);<(cid:0) (cid:0)%(cid:30)(cid:0) #(cid:23)(cid:0) ,/(cid:21).0,4-(cid:0)(cid:19).-(cid:0)9(cid:19)*(cid:20)(cid:0)(cid:22)+(cid:0)7(cid:21)(cid:19)?.(cid:21)(cid:20)(cid:20)(cid:21)(cid:20)(cid:0),.(cid:0)02(cid:21)(cid:0)(cid:5)+,(cid:29)(cid:19)(cid:28)-(cid:0)(cid:5)+(cid:22)9+(cid:19)3(cid:0)(cid:22)+(cid:0),.(cid:20)0(cid:19).(cid:28)(cid:21)(cid:20)(cid:0)(cid:22)4(cid:0)3(cid:19)0(cid:21)+,(cid:19)6(cid:0) (cid:0)%’(cid:0) .(cid:22).(cid:28)(cid:22)3*6,(cid:19).(cid:28)(cid:21)(cid:0)7,02(cid:0)(cid:2)5=(cid:20)(cid:21)(cid:28)0,(cid:22).(cid:20)(cid:0)!(cid:4)(cid:4):(cid:8);(cid:27):(cid:4);<(cid:0) (cid:0)%(cid:31)(cid:0) $(cid:23)(cid:0) (cid:19)//+(cid:21)(cid:20)(cid:20)(cid:0)02(cid:21)(cid:0)(cid:20)0(cid:19)05(cid:20)(cid:0)(cid:22)4(cid:0)9(cid:19)*(cid:20)(cid:0)(cid:22)+(cid:0)7(cid:21)(cid:19)?.(cid:21)(cid:20)(cid:20)(cid:21)(cid:20)(cid:0),.(cid:0)02(cid:21)(cid:0)(cid:5)+,(cid:29)(cid:19)(cid:28)-(cid:0)(cid:5)+(cid:22)9+(cid:19)3(cid:18)(cid:0)(cid:19)(cid:20)(cid:0)7(cid:21)66(cid:0)(cid:19)(cid:20)(cid:0)(cid:19).-(cid:0) (cid:0)%((cid:0) ,.(cid:20)0(cid:19).(cid:28)(cid:21)(cid:20)(cid:0)(cid:22)4(cid:0)3(cid:19)0(cid:21)+,(cid:19)6(cid:0).(cid:22).(cid:27)(cid:28)(cid:22)3*6,(cid:19).(cid:28)(cid:21)(cid:0)7,02(cid:0)(cid:2)5=(cid:20)(cid:21)(cid:28)0,(cid:22).(cid:20)(cid:0)!(cid:4)(cid:4):(cid:8);(cid:27):(cid:4);(cid:18)(cid:0)02(cid:19)0(cid:0)7(cid:21)+(cid:21)(cid:0),/(cid:21).0,4,(cid:21)/(cid:0),.(cid:0)(cid:19).-(cid:0) (cid:0)%)(cid:0) *+,(cid:22)+(cid:0)(cid:8)(cid:20)(cid:20)(cid:21)(cid:20)(cid:20)3(cid:21).0(cid:0)+(cid:21)85,+(cid:21)/(cid:0)=-(cid:0)02,(cid:20)(cid:0)(cid:11)+/(cid:21)+<(cid:0)(cid:19)./(cid:0) (cid:0)%&(cid:0) (cid:4)(cid:23)(cid:0) ,/(cid:21).0,4-(cid:0)(cid:20)*(cid:21)(cid:28),4,(cid:28)(cid:0)(cid:21)(cid:29),/(cid:21).(cid:28)(cid:21)(cid:0):,.(cid:28)65/,.9(cid:18)(cid:0)=50(cid:0).(cid:22)0(cid:0)6,3,0(cid:21)/(cid:0)0(cid:22)(cid:18)(cid:0)/(cid:22)(cid:28)53(cid:21).0(cid:20)(cid:0)+(cid:21)(cid:29),(cid:21)7(cid:21)/(cid:18)(cid:0) (cid:0)(cid:26) (cid:0) (cid:20)(cid:19)3*6,.9(cid:0)(cid:19)./(cid:0)0(cid:21)(cid:20)0,.9(cid:0)*(cid:21)+4(cid:22)+3(cid:21)/(cid:18)(cid:0)(cid:19)./(cid:0),.0(cid:21)+(cid:29),(cid:21)7(cid:20)(cid:0)(cid:28)(cid:22)./5(cid:28)0(cid:21)/;(cid:0)(cid:21)@(cid:19)3,.(cid:21)/(cid:0)0(cid:22)(cid:0)3(cid:19)?(cid:21)(cid:0)(cid:20)5(cid:28)2(cid:0) (cid:0)(cid:26)%(cid:0) /(cid:21)0(cid:21)+3,.(cid:19)0,(cid:22).(cid:20)(cid:18)(cid:0)(cid:19)(cid:20)(cid:20)(cid:21)(cid:20)(cid:20)3(cid:21).0(cid:20)(cid:18)(cid:0)(cid:19)./(cid:0),/(cid:21).0,4,(cid:28)(cid:19)0,(cid:22).(cid:20)(cid:18)(cid:0)(cid:19)./(cid:0)(cid:21)@*6(cid:19),.(cid:0)72-(cid:0)02(cid:21)(cid:0)(cid:21)(cid:29),/(cid:21).(cid:28)(cid:21)(cid:0)02(cid:19)0(cid:0)02(cid:21)(cid:0)(cid:8)(cid:20)(cid:20)(cid:21)(cid:20)(cid:20)(cid:22)+(cid:0) (cid:0)(cid:26)(cid:26)(cid:0) (cid:21)@(cid:19)3,.(cid:21)/(cid:0),(cid:20)(cid:25)(cid:0):(cid:19);(cid:0)(cid:19)**+(cid:22)*+,(cid:19)0(cid:21)(cid:0)4(cid:22)+(cid:0)(cid:19)(cid:20)(cid:20)(cid:21)(cid:20)(cid:20),.9(cid:0)(cid:19).(cid:0)(cid:21).0(cid:21)+*+,(cid:20)(cid:21)(cid:0)(cid:22)4(cid:0)(cid:10)(cid:21)4(cid:21)./(cid:19).0>(cid:20)(cid:0)(cid:20),A(cid:21)(cid:18)(cid:0)(cid:28)(cid:22)3*6(cid:21)@,0-(cid:18)(cid:0)(cid:19)./(cid:0)+,(cid:20)?(cid:0) (cid:0)(cid:26)(cid:24)(cid:0) *+(cid:22)4,6(cid:21)<(cid:0)(cid:19)./(cid:0):=;(cid:0)(cid:20)544,(cid:28),(cid:21).0(cid:0)0(cid:22)(cid:0)B5(cid:20)0,4-(cid:0)02(cid:21)(cid:0)(cid:8)(cid:20)(cid:20)(cid:21)(cid:20)(cid:20)(cid:22)+>(cid:20)(cid:0)4,./,.9(cid:20)(cid:23)(cid:0)(cid:0)(cid:15)(cid:22)(cid:0)4,./,.9(cid:0)(cid:22)4(cid:0)(cid:19).-(cid:0)(cid:8)(cid:20)(cid:20)(cid:21)(cid:20)(cid:20)3(cid:21).0(cid:0)(cid:20)2(cid:19)66(cid:0) (cid:0)(cid:26)(cid:30)(cid:0) +(cid:21)6-(cid:0)(cid:20)(cid:22)6(cid:21)6-(cid:0)(cid:22).(cid:0)(cid:19)(cid:20)(cid:20)(cid:21)+0,(cid:22).(cid:20)(cid:0)(cid:22)+(cid:0)(cid:19)00(cid:21)(cid:20)0(cid:19)0,(cid:22).(cid:20)(cid:0)=-(cid:0)(cid:10)(cid:21)4(cid:21)./(cid:19).0(cid:18)(cid:0)(cid:10)(cid:21)4(cid:21)./(cid:19).0>(cid:20)(cid:0)3(cid:19).(cid:19)9(cid:21)3(cid:21).0(cid:18)(cid:0)(cid:22)+(cid:0)(cid:19)(cid:0)(cid:17)(cid:22)(cid:29)(cid:21)+(cid:21)/(cid:0) (cid:0)(cid:26)’(cid:0) 15(cid:20),.(cid:21)(cid:20)(cid:20)>(cid:20)(cid:0)3(cid:19).(cid:19)9(cid:21)3(cid:21).0(cid:23)(cid:0)(cid:0)(cid:3)2(cid:21)(cid:0)(cid:8)(cid:20)(cid:20)(cid:21)(cid:20)(cid:20)3(cid:21).0(cid:0)35(cid:20)0(cid:0)=(cid:21)(cid:0)(cid:20),9.(cid:21)/(cid:0)=-(cid:0)02(cid:21)(cid:0)(cid:8)(cid:20)(cid:20)(cid:21)(cid:20)(cid:20)(cid:22)+(cid:18)(cid:0)(cid:20)0(cid:19)0(cid:21)(cid:0)02(cid:19)0(cid:0)02(cid:21)(cid:0) (cid:0)(cid:26)(cid:31)(cid:0) (cid:8)(cid:20)(cid:20)(cid:21)(cid:20)(cid:20)(cid:22)+(cid:0)(cid:28)(cid:22)./5(cid:28)0(cid:21)/(cid:0)(cid:19).(cid:0),./(cid:21)*(cid:21)./(cid:21).0(cid:0)+(cid:21)(cid:29),(cid:21)7(cid:0)(cid:22)4(cid:0)02(cid:21)(cid:0)(cid:5)+,(cid:29)(cid:19)(cid:28)-(cid:0)(cid:5)+(cid:22)9+(cid:19)3(cid:0)(cid:19)./(cid:0)/,/(cid:0).(cid:22)0(cid:0)+(cid:21)6-(cid:0)(cid:20)(cid:22)6(cid:21)6-(cid:0)(cid:22).(cid:0) (cid:0)(cid:26)((cid:0) (cid:19)(cid:20)(cid:20)(cid:21)+0,(cid:22).(cid:20)(cid:0)(cid:22)+(cid:0)(cid:19)00(cid:21)(cid:20)0(cid:19)0,(cid:22).(cid:20)(cid:0)=-(cid:0)(cid:10)(cid:21)4(cid:21)./(cid:19).0(cid:18)(cid:0)(cid:10)(cid:21)4(cid:21)./(cid:19).0>(cid:20)(cid:0)3(cid:19).(cid:19)9(cid:21)3(cid:21).0(cid:18)(cid:0)(cid:22)+(cid:0)(cid:19)(cid:0)(cid:17)(cid:22)(cid:29)(cid:21)+(cid:21)/(cid:0)15(cid:20),.(cid:21)(cid:20)(cid:20)>(cid:20)(cid:0) (cid:0)(cid:26))(cid:0) 3(cid:3)(cid:19)(cid:4).(cid:5)(cid:19)(cid:6)9(cid:7)(cid:21)(cid:8)3(cid:3)(cid:9)(cid:21).(cid:10)0(cid:0)(cid:0)(cid:19).(cid:12)/(cid:10)(cid:0)(cid:9)(cid:20)(cid:12)0(cid:19)(cid:0)(cid:13)0(cid:21)(cid:11)(cid:0)0(cid:12)2(cid:0)(cid:21)(cid:0)(cid:9).(cid:12)5(cid:14)3(cid:8)=(cid:15)(cid:21)(cid:9)+(cid:0)(cid:15)(cid:22)(cid:3)4(cid:0)(cid:0)2(cid:15)(cid:22)(cid:16)5(cid:6)+(cid:15)(cid:20)(cid:0)(cid:17)02(cid:3)(cid:19)(cid:4)(cid:11)0(cid:0)(cid:21)(cid:15)(cid:19)(cid:28)2(cid:0)(cid:0)(cid:0)3(cid:0)(cid:0)(cid:0)(cid:0)(cid:21)3=(cid:21)+(cid:0)(cid:22)4(cid:0)02(cid:21)(cid:0)(cid:0)(cid:8)(cid:20)(cid:20)(cid:21)(cid:20)(cid:20)(cid:22)+>(cid:20)(cid:0)(cid:19)(cid:20)(cid:20)(cid:21)(cid:20)(cid:20)3(cid:21).0(cid:0)0(cid:21)(cid:19)3(cid:0) (cid:4)!(cid:4)(cid:7)(cid:0)(cid:9)(cid:15)(cid:8)(cid:7)(cid:3)\"(cid:0)(cid:6)(cid:10)#(cid:14)(cid:9)(cid:15)(cid:3)(cid:0)(cid:8)(cid:15)(cid:10)(cid:0)(cid:3)$(cid:9)(cid:12)(cid:0)(cid:9)(cid:7)(cid:4)(cid:9)(cid:13) (cid:2) (cid:11) (cid:5) (cid:4) (cid:18)(cid:0) (cid:0) (cid:0) (cid:17)(cid:19)(cid:20)(cid:21)(cid:0)(cid:15)(cid:22)(cid:23)(cid:0)(cid:24)(cid:25)(cid:26)(cid:24)(cid:27)(cid:28)(cid:29)(cid:27)(cid:30)(cid:31) (cid:0) (cid:17) (cid:5) (cid:16) (cid:18) (cid:11) (cid:12) (cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0) %&(cid:0) (cid:0) (cid:0) TUVW(cid:0)XYZ[\\]^\\__X‘_\\abc(cid:0)(cid:0)(cid:0)ad]efWgh(cid:0)ij(cid:0)(cid:0)(cid:0)klmWn(cid:0)_ZoipoZ[(cid:0)(cid:0)(cid:0)qUrW(cid:0)Z_(cid:0)ds(cid:0)[[ (cid:0) (cid:0)%(cid:0) *(cid:22)+,(cid:21)-(cid:0)(cid:22).(cid:0)/0(cid:21)(cid:0)(cid:8)(cid:20)(cid:20)(cid:21)(cid:20)(cid:20)1(cid:21)./(cid:23)(cid:0)(cid:0)(cid:3)(cid:22)(cid:0)/0(cid:21)(cid:0)(cid:21)2/(cid:21)./(cid:0)(cid:10)(cid:21)3(cid:21).-(cid:19)./(cid:0)+(cid:21)(cid:29)4(cid:20)(cid:21)(cid:20)(cid:18)(cid:0)56-(cid:19)/(cid:21)(cid:20)(cid:18)(cid:0)(cid:22)+(cid:0)(cid:19)--(cid:20)(cid:0)(cid:22).(cid:21)(cid:0)(cid:22)+(cid:0)1(cid:22)+(cid:21)(cid:0) (cid:0)(cid:26)(cid:0) (cid:20)(cid:19)3(cid:21)75(cid:19)+-(cid:20)(cid:0)+(cid:21)854+(cid:21)-(cid:0)5.-(cid:21)+(cid:0)(cid:2)59(cid:20)(cid:21)(cid:28)/4(cid:22).(cid:0)!(cid:4)(cid:4):(cid:9);(cid:0)4.(cid:0)/0(cid:21)(cid:0)14--<(cid:21)(cid:0)(cid:22)3(cid:0)(cid:19).(cid:0)(cid:8)(cid:20)(cid:20)(cid:21)(cid:20)(cid:20)1(cid:21)./(cid:0)6(cid:21)+4(cid:22)-(cid:18)(cid:0)/0(cid:21)(cid:0) (cid:0)(cid:24)(cid:0) (cid:8)(cid:20)(cid:20)(cid:21)(cid:20)(cid:20)1(cid:21)./(cid:0)15(cid:20)/(cid:0)(cid:19)(cid:20)(cid:20)(cid:21)(cid:20)(cid:20)(cid:0)/0(cid:21)(cid:0)(cid:21)33(cid:21)(cid:28)/4(cid:29)(cid:21).(cid:21)(cid:20)(cid:20)(cid:0)(cid:22)3(cid:0)/0(cid:21)(cid:0)+(cid:21)(cid:29)4(cid:20)(cid:21)-(cid:18)(cid:0)56-(cid:19)/(cid:21)-(cid:18)(cid:0)(cid:22)+(cid:0)(cid:19)--(cid:21)-(cid:0)(cid:20)(cid:19)3(cid:21)75(cid:19)+-:(cid:20);(cid:0)3(cid:22)+(cid:0)/0(cid:21)(cid:0) (cid:0)(cid:30)(cid:0) /41(cid:21)(cid:0)6(cid:21)+4(cid:22)-(cid:0)4.(cid:0)*04(cid:28)0(cid:0)4/(cid:0)*(cid:19)(cid:20)(cid:0)4.(cid:0)(cid:21)33(cid:21)(cid:28)/(cid:18)(cid:0)(cid:19).-(cid:0)6+(cid:22)(cid:29)4-(cid:21)(cid:0)(cid:19)(cid:0)(cid:20)(cid:21)6(cid:19)+(cid:19)/(cid:21)(cid:0)(cid:20)/(cid:19)/(cid:21)1(cid:21)./(cid:0)-(cid:21)/(cid:19)4<4.7(cid:0)/0(cid:21)(cid:0)9(cid:19)(cid:20)4(cid:20)(cid:0)3(cid:22)+(cid:0)(cid:21)(cid:19)(cid:28)0(cid:0) (cid:0)&(cid:0) +(cid:21)(cid:29)4(cid:20)(cid:21)-(cid:18)(cid:0)56-(cid:19)/(cid:21)-(cid:18)(cid:0)(cid:22)+(cid:0)(cid:19)--4/4(cid:22).(cid:19)<(cid:0)(cid:20)(cid:19)3(cid:21)75(cid:19)+-(cid:23)(cid:0) (cid:0)(cid:31)(cid:0) (cid:16)(cid:23)(cid:0) (cid:9)(cid:19)(cid:28)0(cid:0)(cid:8)(cid:20)(cid:20)(cid:21)(cid:20)(cid:20)1(cid:21)./(cid:0)15(cid:20)/(cid:0)9(cid:21)(cid:0)(cid:28)(cid:22)16<(cid:21)/(cid:21)-(cid:0)*4/04.(cid:0)(cid:20)42/=(cid:0):(cid:31) ;(cid:0)-(cid:19)=(cid:20)(cid:0)(cid:19)3/(cid:21)+(cid:0)/0(cid:21)(cid:0)(cid:21).-(cid:0)(cid:22)3(cid:0)/0(cid:21)(cid:0) (cid:0)’(cid:0) +(cid:21)6(cid:22)+/4.7(cid:0)6(cid:21)+4(cid:22)-(cid:0)/(cid:22)(cid:0)*04(cid:28)0(cid:0)/0(cid:21)(cid:0)(cid:8)(cid:20)(cid:20)(cid:21)(cid:20)(cid:20)1(cid:21)./(cid:0)(cid:19)66<4(cid:21)(cid:20)(cid:23)(cid:0)(cid:0)(cid:6).<(cid:21)(cid:20)(cid:20)(cid:0)(cid:22)/0(cid:21)+*4(cid:20)(cid:21)(cid:0)-4+(cid:21)(cid:28)/(cid:21)-(cid:0)9=(cid:0)(cid:19)(cid:0)(cid:17)(cid:22)114(cid:20)(cid:20)4(cid:22).(cid:0) (cid:0)((cid:0) +(cid:21)6+(cid:21)(cid:20)(cid:21)./(cid:19)/4(cid:29)(cid:21)(cid:0)4.(cid:0)*+4/4.7(cid:18)(cid:0)(cid:10)(cid:21)3(cid:21).-(cid:19)./(cid:0)15(cid:20)/(cid:0)(cid:20)5914/(cid:0)/0(cid:21)(cid:0)4.4/4(cid:19)<(cid:0)(cid:8)(cid:20)(cid:20)(cid:21)(cid:20)(cid:20)1(cid:21)./(cid:0)/(cid:22)(cid:0)/0(cid:21)(cid:0)(cid:17)(cid:22)114(cid:20)(cid:20)4(cid:22).(cid:0) (cid:0))(cid:0) *4/04.(cid:0)/(cid:21).(cid:0):% ;(cid:0)-(cid:19)=(cid:20)(cid:0)(cid:19)3/(cid:21)+(cid:0)/0(cid:21)(cid:0)(cid:8)(cid:20)(cid:20)(cid:21)(cid:20)(cid:20)1(cid:21)./(cid:0)0(cid:19)(cid:20)(cid:0)9(cid:21)(cid:21).(cid:0)(cid:28)(cid:22)16<(cid:21)/(cid:21)-(cid:0)(cid:29)4(cid:19)(cid:0)(cid:21)1(cid:19)4<(cid:0)/(cid:22)(cid:0)(cid:10)(cid:9)9+4(cid:21)3>3/(cid:28)(cid:23)7(cid:22)(cid:29)(cid:0)(cid:22)+(cid:0) (cid:0)% (cid:0) 9=(cid:0)(cid:22)(cid:29)(cid:21)+.470/(cid:0)(cid:28)(cid:22)5+4(cid:21)+(cid:0):.(cid:22)/(cid:0)/0(cid:21)(cid:0)(cid:6)(cid:23)(cid:2)(cid:23)(cid:0)(cid:5)(cid:22)(cid:20)/(cid:19)<(cid:0)(cid:2)(cid:21)+(cid:29)4(cid:28)(cid:21);(cid:0)/(cid:22)(cid:25)(cid:0)(cid:8)(cid:20)(cid:20)(cid:22)(cid:28)4(cid:19)/(cid:21)(cid:0)(cid:10)4+(cid:21)(cid:28)/(cid:22)+(cid:0)3(cid:22)+(cid:0)(cid:9).3(cid:22)+(cid:28)(cid:21)1(cid:21)./(cid:18)(cid:0) (cid:0)%%(cid:0) ?5+(cid:21)(cid:19)5(cid:0)(cid:22)3(cid:0)(cid:17)(cid:22).(cid:20)51(cid:21)+(cid:0)(cid:5)+(cid:22)/(cid:21)(cid:28)/4(cid:22).(cid:18)(cid:0)(cid:13)(cid:21)-(cid:21)+(cid:19)<(cid:0)(cid:3)+(cid:19)-(cid:21)(cid:0)(cid:17)(cid:22)114(cid:20)(cid:20)4(cid:22).(cid:18)(cid:0)(cid:31) (cid:0)(cid:5)(cid:21)..(cid:20)=<(cid:29)(cid:19).4(cid:19)(cid:0)(cid:8)(cid:29)(cid:21).5(cid:21)(cid:0)(cid:15)@(cid:18)(cid:0) (cid:0)%(cid:26)(cid:0) @(cid:19)(cid:20)04.7/(cid:22).(cid:18)(cid:0)(cid:10)(cid:17)(cid:0)(cid:26) &( (cid:23)(cid:0)(cid:0)(cid:3)0(cid:21)(cid:0)(cid:20)59A(cid:21)(cid:28)/(cid:0)<4.(cid:21)(cid:0)15(cid:20)/(cid:0)9(cid:21)74.(cid:18)(cid:0)B(cid:6)(cid:23)(cid:2)(cid:23)(cid:0)(cid:29)(cid:23)(cid:0)#(cid:22)(cid:22)-(cid:12)2(cid:0)$(cid:22)<-4.7(cid:20)(cid:18)(cid:0)(cid:4).(cid:28)(cid:23)C(cid:0)(cid:0)(cid:8)<<(cid:0) (cid:0)%(cid:24)(cid:0) (cid:20)59(cid:20)(cid:21)85(cid:21)./(cid:0)94(cid:21)..4(cid:19)<(cid:0)(cid:8)(cid:20)(cid:20)(cid:21)(cid:20)(cid:20)1(cid:21)./(cid:20)(cid:0)15(cid:20)/(cid:0)9(cid:21)(cid:0)+(cid:21)/(cid:19)4.(cid:21)-(cid:0)9=(cid:0)(cid:10)(cid:21)3(cid:21).-(cid:19)./(cid:0)5./4<(cid:0)/0(cid:21)(cid:0)(cid:11)+-(cid:21)+(cid:0)4(cid:20)(cid:0)/(cid:21)+14.(cid:19)/(cid:21)-(cid:0) (cid:0)%(cid:30)(cid:0) (cid:19).-(cid:0)6+(cid:22)(cid:29)4-(cid:21)-(cid:0)/(cid:22)(cid:0)/0(cid:21)(cid:0)(cid:8)(cid:20)(cid:20)(cid:22)(cid:28)4(cid:19)/(cid:21)(cid:0)(cid:10)4+(cid:21)(cid:28)/(cid:22)+(cid:0)3(cid:22)+(cid:0)(cid:9).3(cid:22)+(cid:28)(cid:21)1(cid:21)./(cid:0)*4/04.(cid:0)/(cid:21).(cid:0):% ;(cid:0)-(cid:19)=(cid:20)(cid:0)(cid:22)3(cid:0)+(cid:21)85(cid:21)(cid:20)/(cid:23)(cid:0)(cid:0)(cid:0)\n\n(cid:0)%&(cid:0) DEF(cid:0) GHHIJKLMDHN(cid:0)ODMP(cid:0)LQQJQQHK(cid:0) (cid:0)%(cid:31)(cid:0) (cid:4)(cid:3)(cid:0)(cid:4)(cid:2)(cid:0)(cid:13)(cid:6)(cid:12)(cid:3)$(cid:9)(cid:12)(cid:0)(cid:11)(cid:12)(cid:10)(cid:9)(cid:12)(cid:9)(cid:10)(cid:0)/0(cid:19)/(cid:0)(cid:10)(cid:21)3(cid:21).-(cid:19)./(cid:18)(cid:0)*0(cid:21)/0(cid:21)+(cid:0)(cid:19)(cid:28)/4.7(cid:0)-4+(cid:21)(cid:28)/<=(cid:0)(cid:22)+(cid:0)4.-4+(cid:21)(cid:28)/<=(cid:18)(cid:0)4.(cid:0) (cid:0)%’(cid:0) (cid:28)(cid:22)..(cid:21)(cid:28)/4(cid:22).(cid:0)*4/0(cid:0)/0(cid:21)(cid:0)(cid:8)(cid:20)(cid:20)(cid:21)(cid:20)(cid:20)1(cid:21)./(cid:20)(cid:0)+(cid:21)854+(cid:21)-(cid:0)9=(cid:0)(cid:2)(cid:21)(cid:28)/4(cid:22).(cid:0)!(cid:4)(cid:4)(cid:4)(cid:18)(cid:0)15(cid:20)/(cid:25)(cid:0) (cid:0)%((cid:0) (cid:8)(cid:23)(cid:0) 6+(cid:22)(cid:29)4-(cid:21)(cid:0)(cid:22)+(cid:0)(cid:22)/0(cid:21)+*4(cid:20)(cid:21)(cid:0)1(cid:19),(cid:21)(cid:0)(cid:19)(cid:29)(cid:19)4<(cid:19)9<(cid:21)(cid:0)/(cid:22)(cid:0)/0(cid:21)(cid:0)(cid:8)(cid:20)(cid:20)(cid:21)(cid:20)(cid:20)(cid:22)+(cid:0)(cid:19)<<(cid:0)4.3(cid:22)+1(cid:19)/4(cid:22).(cid:0)(cid:19).-(cid:0)1(cid:19)/(cid:21)+4(cid:19)<(cid:0) (cid:0)%)(cid:0) 4.(cid:0)/0(cid:21)4+(cid:0)6(cid:22)(cid:20)(cid:20)(cid:21)(cid:20)(cid:20)4(cid:22).(cid:18)(cid:0)(cid:28)5(cid:20)/(cid:22)-=(cid:18)(cid:0)(cid:22)+(cid:0)(cid:28)(cid:22)./+(cid:22)<(cid:0)/0(cid:19)/(cid:0)4(cid:20)(cid:0)+(cid:21)<(cid:21)(cid:29)(cid:19)./(cid:0)/(cid:22)(cid:0)/0(cid:21)(cid:0)(cid:8)(cid:20)(cid:20)(cid:21)(cid:20)(cid:20)1(cid:21)./(cid:0)3(cid:22)+(cid:0)*04(cid:28)0(cid:0)/0(cid:21)+(cid:21)(cid:0)4(cid:20)(cid:0).(cid:22)(cid:0) (cid:0)(cid:26) (cid:0) +(cid:21)(cid:19)(cid:20)(cid:22).(cid:19)9<(cid:21)(cid:0)(cid:28)<(cid:19)41(cid:0)(cid:22)3(cid:0)6+4(cid:29)4<(cid:21)7(cid:21)R(cid:0)(cid:0) (cid:0)(cid:26)%(cid:0) ?(cid:23)(cid:0) 6+(cid:22)(cid:29)4-(cid:21)(cid:0)(cid:22)+(cid:0)(cid:22)/0(cid:21)+*4(cid:20)(cid:21)(cid:0)1(cid:19),(cid:21)(cid:0)(cid:19)(cid:29)(cid:19)4<(cid:19)9<(cid:21)(cid:0)/(cid:22)(cid:0)/0(cid:21)(cid:0)(cid:8)(cid:20)(cid:20)(cid:21)(cid:20)(cid:20)(cid:22)+(cid:0)4.3(cid:22)+1(cid:19)/4(cid:22).(cid:0)(cid:19)9(cid:22)5/(cid:0)(cid:19)<<(cid:0) (cid:0)(cid:26)(cid:26)(cid:0) (cid:17)(cid:22)(cid:29)(cid:21)+(cid:21)-(cid:0)(cid:4).3(cid:22)+1(cid:19)/4(cid:22).(cid:0)4.(cid:0)(cid:10)(cid:21)3(cid:21).-(cid:19)./S(cid:20)(cid:0)(cid:28)5(cid:20)/(cid:22)-=(cid:0)(cid:22)+(cid:0)(cid:28)(cid:22)./+(cid:22)<(cid:0)(cid:20)(cid:22)(cid:0)/0(cid:19)/(cid:0)/0(cid:21)(cid:0)(cid:8)(cid:20)(cid:20)(cid:21)(cid:20)(cid:20)(cid:22)+(cid:0)(cid:28)(cid:19).(cid:0)-(cid:21)/(cid:21)+14.(cid:21)(cid:0)/0(cid:21)(cid:0) (cid:0)(cid:26)(cid:24)(cid:0) (cid:20)(cid:28)(cid:22)6(cid:21)(cid:0)(cid:22)3(cid:0)/0(cid:21)(cid:0)(cid:8)(cid:20)(cid:20)(cid:21)(cid:20)(cid:20)1(cid:21)./R(cid:0)(cid:19).-(cid:0) (cid:0)(cid:26)(cid:30)(cid:0) (cid:17)(cid:23)(cid:0) -4(cid:20)(cid:28)<(cid:22)(cid:20)(cid:21)(cid:0)(cid:19)<<(cid:0)1(cid:19)/(cid:21)+4(cid:19)<(cid:0)3(cid:19)(cid:28)/(cid:20)(cid:0)/(cid:22)(cid:0)/0(cid:21)(cid:0)(cid:8)(cid:20)(cid:20)(cid:21)(cid:20)(cid:20)(cid:22)+(cid:18)(cid:0)(cid:19).-(cid:0).(cid:22)/(cid:0)14(cid:20)+(cid:21)6+(cid:21)(cid:20)(cid:21)./(cid:0)4.(cid:0)(cid:19).=(cid:0)1(cid:19)..(cid:21)+(cid:18)(cid:0) (cid:0)(cid:26)&(cid:0) (cid:21)26+(cid:21)(cid:20)(cid:20)<=(cid:0)(cid:22)+(cid:0)9=(cid:0)416<4(cid:28)(cid:19)/4(cid:22).(cid:18)(cid:0)(cid:19).=(cid:0)3(cid:19)(cid:28)/(cid:0)1(cid:19)/(cid:21)+4(cid:19)<(cid:0)/(cid:22)(cid:0)/0(cid:21)(cid:0)(cid:8)(cid:20)(cid:20)(cid:21)(cid:20)(cid:20)(cid:22)+S(cid:20)(cid:25)(cid:0):%;(cid:0)-(cid:21)/(cid:21)+14.(cid:19)/4(cid:22).(cid:0)(cid:22)3(cid:0)*0(cid:21)/0(cid:21)+(cid:0) (cid:0)(cid:26)(cid:31)(cid:0) (cid:10)(cid:21)3(cid:21).-(cid:19)./(cid:0)0(cid:19)(cid:20)(cid:0)416<(cid:21)1(cid:21)./(cid:21)-(cid:0)(cid:19).-(cid:0)1(cid:19)4./(cid:19)4.(cid:21)-(cid:0)/0(cid:21)(cid:0)(cid:5)+4(cid:29)(cid:19)(cid:28)=(cid:0)(cid:5)+(cid:22)7+(cid:19)1(cid:0)+(cid:21)854+(cid:21)-(cid:0)9=(cid:0)(cid:2)(cid:21)(cid:28)/4(cid:22).(cid:0)!(cid:4)(cid:4)R(cid:0):(cid:26);(cid:0) (cid:0)(cid:26)’(cid:0) (cid:19)(cid:20)(cid:20)(cid:21)(cid:20)(cid:20)1(cid:21)./(cid:0)(cid:22)3(cid:0)/0(cid:21)(cid:0)(cid:21)33(cid:21)(cid:28)/4(cid:29)(cid:21).(cid:21)(cid:20)(cid:20)(cid:0)(cid:22)3(cid:0)/0(cid:21)(cid:0)416<(cid:21)1(cid:21)./(cid:19)/4(cid:22).(cid:0)(cid:19).-(cid:0)1(cid:19)4./(cid:21).(cid:19).(cid:28)(cid:21)(cid:0)(cid:22)3(cid:0)(cid:2)59(cid:20)(cid:21)(cid:28)/4(cid:22).(cid:20)(cid:0)!(cid:4)(cid:4):(cid:8);(cid:27) (cid:0)(cid:26)((cid:0) :(cid:4)(cid:3);R(cid:4)(cid:0)(cid:5)(cid:22)(cid:6)+(cid:7)(cid:0):(cid:8)(cid:24)(cid:3);(cid:0)(cid:9)4-(cid:10)(cid:21)(cid:0)./(cid:12)43(cid:10)4(cid:28)(cid:9)(cid:19)(cid:12)/(cid:0)4(cid:13)(cid:22)(cid:11).(cid:12)(cid:0)(cid:22)(cid:0)3(cid:9)(cid:0)(cid:19)(cid:12).(cid:14)=(cid:0)(cid:8)7(cid:15)(cid:19)(cid:9)6(cid:15)(cid:20)(cid:0)(cid:3)(cid:22)(cid:0)+(cid:0)(cid:15)*(cid:16)(cid:6)(cid:21)(cid:19)(cid:15),(cid:17).(cid:3)(cid:21)(cid:4)(cid:20)(cid:11)(cid:20)(cid:15)(cid:21)(cid:20)(cid:0)4.(cid:0)(cid:0)(cid:18)(cid:0)(cid:0)(cid:0)(cid:22)(cid:0)(cid:0)+(cid:0)4.(cid:20)/(cid:19).(cid:28)(cid:21)(cid:20)(cid:0)(cid:22)(cid:0)3(cid:0)1(cid:19)/(cid:21)+4(cid:19)<(cid:0).(cid:22).(cid:28)(cid:22)16<4(cid:19).(cid:28)(cid:21)(cid:0) (cid:4)!(cid:4)(cid:7)(cid:0)(cid:9)(cid:15)(cid:8)(cid:7)(cid:3)\"(cid:0)(cid:6)(cid:10)#(cid:14)(cid:9)(cid:15)(cid:3)(cid:0)(cid:8)(cid:15)(cid:10)(cid:0)(cid:3)$(cid:9)(cid:12)(cid:0)(cid:9)(cid:7)(cid:4)(cid:9)(cid:13) (cid:2) (cid:11) (cid:5) (cid:4) (cid:18)(cid:0) (cid:0) (cid:0) (cid:17)(cid:19)(cid:20)(cid:21)(cid:0)(cid:15)(cid:22)(cid:23)(cid:0)(cid:24)(cid:25)(cid:26)(cid:24)(cid:27)(cid:28)(cid:29)(cid:27)(cid:30)(cid:31) (cid:0) (cid:17) (cid:5) (cid:16) (cid:18) (cid:11) (cid:12) (cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0) (cid:26) (cid:0) (cid:0) (cid:0) VWXY(cid:0)Z[\\]^_‘^aaZba^cde(cid:0)(cid:0)(cid:0)cf_ghYij(cid:0)kl(cid:0)(cid:0)(cid:0)mnoYp(cid:0)a\\qkrq\\](cid:0)(cid:0)(cid:0)sWtY(cid:0)\\k(cid:0)fu(cid:0)]] (cid:0) (cid:0)%(cid:0) *+,-(cid:18)(cid:0),-(cid:21)(cid:0)(cid:5).+(cid:29)(cid:19)(cid:28)/(cid:0)(cid:5).(cid:22)0.(cid:19)1(cid:0).(cid:21)23+.(cid:21)4(cid:0)5/(cid:0)(cid:2)(cid:21)(cid:28),+(cid:22)6(cid:0)!(cid:4)(cid:4)(cid:23)(cid:0)",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Third-Party Assessment"
      ],
      "case_id": "02.23_goodrx_holdings",
      "company_name": "GoodRx Holdings, Inc.",
      "date_issued": "2023-02-15",
      "year": 2023,
      "administration": "Biden",
      "legal_authority": "Sections 5(a)(1), 5(m)(1)(A), 13(b), 16(a)(1), and 19 of the Federal Trade Commission Act, 15 U.S.C. §§ 45(a)(1), 45(m)(1)(A), 53(b), 56(a)(1), 57b, and the Health Breach Notification Rule, 16 C.F.R. § 318",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/2023090-goodrx-holdings-inc",
      "docket_number": "23-cv-460"
    },
    {
      "provision_number": "VII",
      "title": "Annual Certification",
      "category": "compliance_reporting",
      "summary": "One year after entry of the Order and each year thereafter, a senior corporate manager must submit a certification to the FTC confirming compliance with the Order.",
      "verbatim_text": "(cid:0)(cid:26)(cid:0) 78(cid:0) 9::;9<(cid:0)=>?@ABA=9@AC:(cid:0) (cid:0)(cid:24)(cid:0) (cid:4)(cid:3)(cid:0)(cid:4)(cid:2)(cid:0)(cid:13)(cid:6)(cid:12)(cid:3)$(cid:9)(cid:12)(cid:0)(cid:11)(cid:12)(cid:10)(cid:9)(cid:12)(cid:9)(cid:10)(cid:0),-(cid:19),(cid:0)(cid:10)(cid:21)D(cid:21)64(cid:19)6,(cid:0)13(cid:20),(cid:25)(cid:0) (cid:0)(cid:30)(cid:0) (cid:8)(cid:23)(cid:0) (cid:11)6(cid:21)(cid:0)/(cid:21)(cid:19).(cid:0)(cid:19)D,(cid:21).(cid:0),-(cid:21)(cid:0)(cid:21)6,./(cid:0)(cid:22)D(cid:0),-+(cid:20)(cid:0)(cid:11).4(cid:21).(cid:18)(cid:0)(cid:19)64(cid:0)(cid:21)(cid:19)(cid:28)-(cid:0)/(cid:21)(cid:19).(cid:0),-(cid:21).(cid:21)(cid:19)D,(cid:21).(cid:18)(cid:0)E.(cid:22)(cid:29)+4(cid:21)(cid:0),-(cid:21)(cid:0) (cid:0)&(cid:0) (cid:17)(cid:22)11+(cid:20)(cid:20)+(cid:22)6(cid:0)*+,-(cid:0)(cid:19)(cid:0)(cid:28)(cid:21).,+D+(cid:28)(cid:19),+(cid:22)6(cid:0)D.(cid:22)1(cid:0)(cid:19)(cid:0)(cid:20)(cid:21)6+(cid:22).(cid:0)(cid:28)(cid:22).E(cid:22).(cid:19),(cid:21)(cid:0)1(cid:19)6(cid:19)0(cid:21).(cid:18)(cid:0)(cid:22).(cid:18)(cid:0)+D(cid:0)6(cid:22)(cid:0)(cid:20)3(cid:28)-(cid:0)(cid:20)(cid:21)6+(cid:22).(cid:0)(cid:28)(cid:22).E(cid:22).(cid:19),(cid:21)(cid:0) (cid:0)(cid:31)(cid:0) 1(cid:19)6(cid:19)0(cid:21).(cid:0)(cid:21)F+(cid:20),(cid:20)(cid:18)(cid:0)(cid:19)(cid:0)(cid:20)(cid:21)6+(cid:22).(cid:0)(cid:22)DD+(cid:28)(cid:21).(cid:0)(cid:22)D(cid:0)(cid:21)(cid:19)(cid:28)-(cid:0)(cid:17)(cid:22)(cid:29)(cid:21).(cid:21)4(cid:0)G3(cid:20)+6(cid:21)(cid:20)(cid:20)(cid:0),-(cid:19),(cid:25)(cid:0)H%I(cid:0),-(cid:21)(cid:0)(cid:17)(cid:22)(cid:29)(cid:21).(cid:21)4(cid:0)G3(cid:20)+6(cid:21)(cid:20)(cid:20)(cid:0)-(cid:19)(cid:20)(cid:0) (cid:0)’(cid:0) (cid:21)(cid:20),(cid:19)5J+(cid:20)-(cid:21)4(cid:18)(cid:0)+1EJ(cid:21)1(cid:21)6,(cid:21)4(cid:18)(cid:0)(cid:19)64(cid:0)1(cid:19)+6,(cid:19)+6(cid:21)4(cid:0),-(cid:21)(cid:0).(cid:21)23+.(cid:21)1(cid:21)6,(cid:20)(cid:0)(cid:22)D(cid:0),-+(cid:20)(cid:0)(cid:11).4(cid:21).K(cid:0)H(cid:26)I(cid:0),-(cid:21)(cid:0)(cid:17)(cid:22)(cid:29)(cid:21).(cid:21)4(cid:0) (cid:0)((cid:0) G3(cid:20)+6(cid:21)(cid:20)(cid:20)(cid:0)+(cid:20)(cid:0)6(cid:22),(cid:0)(cid:19)*(cid:19).(cid:21)(cid:0)(cid:22)D(cid:0)(cid:19)6/(cid:0)1(cid:19),(cid:21).+(cid:19)J(cid:0)6(cid:22)6(cid:28)(cid:22)1EJ+(cid:19)6(cid:28)(cid:21)(cid:0),-(cid:19),(cid:0)-(cid:19)(cid:20)(cid:0)6(cid:22),(cid:0)5(cid:21)(cid:21)6(cid:25)(cid:0)H(cid:19)I(cid:0)(cid:28)(cid:22)..(cid:21)(cid:28),(cid:21)4(cid:18)(cid:0)(cid:22).(cid:0)H5I(cid:0) (cid:0))(cid:0) 4+(cid:20)(cid:28)J(cid:22)(cid:20)(cid:21)4(cid:0),(cid:22)(cid:0),-(cid:21)(cid:0)(cid:17)(cid:22)11+(cid:20)(cid:20)+(cid:22)6K(cid:0)(cid:19)64(cid:0)H(cid:24)I(cid:0)+6(cid:28)J34(cid:21)(cid:20)(cid:0)(cid:19)(cid:0)5.+(cid:21)D(cid:0)4(cid:21)(cid:20)(cid:28).+E,+(cid:22)6(cid:0)(cid:22)D(cid:0)(cid:19)6/(cid:0)(cid:17)(cid:22)(cid:29)(cid:21).(cid:21)4(cid:0)(cid:4)6(cid:28)+4(cid:21)6,(cid:23)(cid:0)(cid:0)(cid:3)-(cid:21)(cid:0) (cid:0)% (cid:0) (cid:28)(cid:21).,+D+(cid:28)(cid:19),+(cid:22)6(cid:0)13(cid:20),(cid:0)5(cid:21)(cid:0)5(cid:19)(cid:20)(cid:21)4(cid:0)(cid:22)6(cid:0),-(cid:21)(cid:0)E(cid:21).(cid:20)(cid:22)6(cid:19)J(cid:0)L6(cid:22)*J(cid:21)40(cid:21)(cid:0)(cid:22)D(cid:0),-(cid:21)(cid:0)(cid:20)(cid:21)6+(cid:22).(cid:0)(cid:28)(cid:22).E(cid:22).(cid:19),(cid:21)(cid:0)1(cid:19)6(cid:19)0(cid:21).(cid:18)(cid:0)(cid:20)(cid:21)6+(cid:22).(cid:0) (cid:0)%%(cid:0) (cid:22)DD+(cid:28)(cid:21).(cid:18)(cid:0)(cid:22).(cid:0)(cid:20)35M(cid:21)(cid:28),(cid:0)1(cid:19),,(cid:21).(cid:0)(cid:21)FE(cid:21).,(cid:20)(cid:0)3E(cid:22)6(cid:0)*-(cid:22)1(cid:0),-(cid:21)(cid:0)(cid:20)(cid:21)6+(cid:22).(cid:0)(cid:28)(cid:22).E(cid:22).(cid:19),(cid:21)(cid:0)1(cid:19)6(cid:19)0(cid:21).(cid:0)(cid:22).(cid:0)(cid:20)(cid:21)6+(cid:22).(cid:0)(cid:22)DD+(cid:28)(cid:21).(cid:0) (cid:0)%(cid:26)(cid:0) .(cid:21)(cid:19)(cid:20)(cid:22)6(cid:19)5J/(cid:0).(cid:21)J+(cid:21)(cid:20)(cid:0)+6(cid:0)1(cid:19)L+60(cid:0),-(cid:21)(cid:0)(cid:28)(cid:21).,+D+(cid:28)(cid:19),+(cid:22)6(cid:23)(cid:0) (cid:0)%(cid:24)(cid:0) G(cid:23)(cid:0) (cid:6)6J(cid:21)(cid:20)(cid:20)(cid:0)(cid:22),-(cid:21).*+(cid:20)(cid:21)(cid:0)4+.(cid:21)(cid:28),(cid:21)4(cid:0)5/(cid:0)(cid:19)(cid:0)(cid:17)(cid:22)11+(cid:20)(cid:20)+(cid:22)6(cid:0).(cid:21)E.(cid:21)(cid:20)(cid:21)6,(cid:19),+(cid:29)(cid:21)(cid:0)+6(cid:0)*.+,+60(cid:18)(cid:0)(cid:20)351+,(cid:0)(cid:19)JJ(cid:0) (cid:0)%(cid:30)(cid:0) (cid:19)663(cid:19)J(cid:0)(cid:28)(cid:21).,+D+(cid:28)(cid:19),+(cid:22)6(cid:20)(cid:0),(cid:22)(cid:0),-(cid:21)(cid:0)(cid:17)(cid:22)11+(cid:20)(cid:20)+(cid:22)6(cid:0)E3.(cid:20)3(cid:19)6,(cid:0),(cid:22)(cid:0),-+(cid:20)(cid:0)(cid:11).4(cid:21).(cid:0)(cid:29)+(cid:19)(cid:0)(cid:21)1(cid:19)+J(cid:0),(cid:22)(cid:0)(cid:10)(cid:9)5.+(cid:21)DND,(cid:28)(cid:23)0(cid:22)(cid:29)(cid:0)(cid:22).(cid:0) (cid:0)%&(cid:0) 5/(cid:0)(cid:22)(cid:29)(cid:21).6+0-,(cid:0)(cid:28)(cid:22)3.+(cid:21).(cid:0)H6(cid:22),(cid:0),-(cid:21)(cid:0)(cid:6)(cid:23)(cid:2)(cid:23)(cid:0)(cid:5)(cid:22)(cid:20),(cid:19)J(cid:0)(cid:2)(cid:21).(cid:29)+(cid:28)(cid:21)I(cid:0),(cid:22)(cid:0)(cid:8)(cid:20)(cid:20)(cid:22)(cid:28)+(cid:19),(cid:21)(cid:0)(cid:10)+.(cid:21)(cid:28),(cid:22).(cid:0)D(cid:22).(cid:0)(cid:9)6D(cid:22).(cid:28)(cid:21)1(cid:21)6,(cid:18)(cid:0)G3.(cid:21)(cid:19)3(cid:0) (cid:0)%(cid:31)(cid:0) (cid:22)D(cid:0)(cid:17)(cid:22)6(cid:20)31(cid:21).(cid:0)(cid:5).(cid:22),(cid:21)(cid:28),+(cid:22)6(cid:18)(cid:0)(cid:13)(cid:21)4(cid:21).(cid:19)J(cid:0)(cid:3).(cid:19)4(cid:21)(cid:0)(cid:17)(cid:22)11+(cid:20)(cid:20)+(cid:22)6(cid:18)(cid:0)(cid:31) (cid:0)(cid:5)(cid:21)66(cid:20)/J(cid:29)(cid:19)6+(cid:19)(cid:0)(cid:8)(cid:29)(cid:21)63(cid:21)(cid:0)(cid:15)O(cid:18)(cid:0) (cid:0)%’(cid:0) O(cid:19)(cid:20)-+60,(cid:22)6(cid:18)(cid:0)(cid:10)(cid:23)(cid:17)(cid:23)(cid:0)(cid:26) &( (cid:23)(cid:0)(cid:0)(cid:3)-(cid:21)(cid:0)(cid:20)35M(cid:21)(cid:28),(cid:0)J+6(cid:21)(cid:0)13(cid:20),(cid:0)5(cid:21)0+6(cid:18)(cid:0)P(cid:6)(cid:23)(cid:2)(cid:23)(cid:0)(cid:29)(cid:23)(cid:0)#(cid:22)(cid:22)4(cid:12)F(cid:0)$(cid:22)J4+60(cid:20)(cid:18)(cid:0)(cid:4)6(cid:28)(cid:23)Q(cid:0)\n\n(cid:0)%((cid:0) 7A8(cid:0) =CR>?>S(cid:0)A:=AS>:@(cid:0)?>TC?@U(cid:0)(cid:0) (cid:0)%)(cid:0) (cid:4)(cid:3)(cid:0)(cid:4)(cid:2)(cid:0)(cid:13)(cid:6)(cid:12)(cid:3)$(cid:9)(cid:12)(cid:0)(cid:11)(cid:12)(cid:10)(cid:9)(cid:12)(cid:9)(cid:10)(cid:0),-(cid:19),(cid:0)(cid:10)(cid:21)D(cid:21)64(cid:19)6,(cid:18)(cid:0)*+,-+6(cid:0),-+.,/(cid:0)H(cid:24) I(cid:0)4(cid:19)/(cid:20)(cid:0)(cid:19)D,(cid:21).(cid:0)4+(cid:20)(cid:28)(cid:22)(cid:29)(cid:21)./(cid:0)(cid:22)D(cid:0)(cid:19)(cid:0) (cid:0)(cid:26) (cid:0) (cid:17)(cid:22)(cid:29)(cid:21).(cid:21)4(cid:0)(cid:4)6(cid:28)+4(cid:21)6,(cid:18)(cid:0)13(cid:20),(cid:0)(cid:20)351+,(cid:0)(cid:19)(cid:0).(cid:21)E(cid:22).,(cid:0),(cid:22)(cid:0),-(cid:21)(cid:0)(cid:17)(cid:22)11+(cid:20)(cid:20)+(cid:22)6(cid:18)(cid:0)36J(cid:21)(cid:20)(cid:20)(cid:0),-(cid:21)(cid:0)(cid:17)(cid:22)(cid:29)(cid:21).(cid:21)4(cid:0)(cid:4)6(cid:28)+4(cid:21)6,(cid:0)(cid:19)J(cid:20)(cid:22)(cid:0) (cid:0)(cid:26)%(cid:0) (cid:28)(cid:22)6(cid:20),+,3,(cid:21)(cid:20)(cid:0)(cid:19)(cid:0)G.(cid:21)(cid:19)(cid:28)-(cid:0)(cid:22)D(cid:0)(cid:2)(cid:21)(cid:28)3.+,/(cid:0)+6(cid:29)(cid:22)J(cid:29)+60(cid:0),-(cid:21)(cid:0)(cid:6)6(cid:20)(cid:21)(cid:28)3.(cid:21)4(cid:0)(cid:5)$(cid:12)(cid:0)(cid:4)4(cid:21)6,+D+(cid:19)5J(cid:21)(cid:0)$(cid:21)(cid:19)J,-(cid:0)(cid:4)6D(cid:22).1(cid:19),+(cid:22)6(cid:0)(cid:22)D(cid:0) (cid:0)(cid:26)(cid:26)(cid:0) & (cid:0)(cid:22).(cid:0)1(cid:22).(cid:21)(cid:0)+64+(cid:29)+43(cid:19)J(cid:20)(cid:0)(cid:19)64(cid:0),-(cid:21).(cid:21)D(cid:22).(cid:21)(cid:0).(cid:21)23+.+60(cid:0)6(cid:22),+(cid:28)(cid:21)(cid:0)364(cid:21).(cid:0)(cid:2)(cid:21)(cid:28),+(cid:22)6(cid:0)(cid:4)!(cid:0)(cid:22)D(cid:0),-+(cid:20)(cid:0)(cid:11).4(cid:21).(cid:23)(cid:0)(cid:0)(cid:3)-(cid:21)(cid:0) (cid:0)(cid:26)(cid:24)(cid:0) .(cid:21)E(cid:22).,(cid:0)13(cid:20),(cid:0)+6(cid:28)J34(cid:21)(cid:18)(cid:0),(cid:22)(cid:0),-(cid:21)(cid:0)(cid:21)F,(cid:21)6,(cid:0)E(cid:22)(cid:20)(cid:20)+5J(cid:21)(cid:25)(cid:0) (cid:0)(cid:26)(cid:30)(cid:0) (cid:8)(cid:23)(cid:0) ,-(cid:21)(cid:0)4(cid:19),(cid:21)(cid:18)(cid:0)(cid:21)(cid:20),+1(cid:19),(cid:21)4(cid:0)4(cid:19),(cid:21)(cid:18)(cid:0)(cid:22).(cid:0)(cid:21)(cid:20),+1(cid:19),(cid:21)4(cid:0)4(cid:19),(cid:21)(cid:0).(cid:19)60(cid:21)(cid:0)*-(cid:21)6(cid:0),-(cid:21)(cid:0)(cid:17)(cid:22)(cid:29)(cid:21).(cid:21)4(cid:0)(cid:4)6(cid:28)+4(cid:21)6,(cid:0) (cid:0)(cid:26)&(cid:0) (cid:22)(cid:28)(cid:28)3..(cid:21)4K(cid:0) (cid:0)(cid:26)(cid:31)(cid:0) G(cid:23)(cid:0) (cid:19)(cid:0)4(cid:21)(cid:20)(cid:28).+E,+(cid:22)6(cid:0)(cid:22)D(cid:0),-(cid:21)(cid:0)D(cid:19)(cid:28),(cid:20)(cid:0).(cid:21)J(cid:19),+60(cid:0),(cid:22)(cid:0),-(cid:21)(cid:0)(cid:17)(cid:22)(cid:29)(cid:21).(cid:21)4(cid:0)(cid:4)6(cid:28)+4(cid:21)6,(cid:18)(cid:0)+6(cid:28)J34+60(cid:0),-(cid:21)(cid:0)(cid:28)(cid:19)3(cid:20)(cid:21)(cid:20)(cid:0) (cid:0)(cid:26)’(cid:0) (cid:19)64(cid:0)(cid:20)(cid:28)(cid:22)E(cid:21)(cid:0)(cid:22)D(cid:0),-(cid:21)(cid:0)(cid:17)(cid:22)(cid:29)(cid:21).(cid:21)4(cid:0)(cid:4)6(cid:28)+4(cid:21)6,(cid:18)(cid:0)+D(cid:0)L6(cid:22)*6K(cid:0)(cid:0) (cid:0)(cid:26)((cid:0) (cid:3)(cid:4)(cid:5)(cid:6)(cid:7)(cid:8)(cid:17)(cid:3)(cid:23)(cid:9)(cid:0)(cid:10)(cid:0)(cid:12),-(cid:10)(cid:21)(cid:9)(cid:0)(cid:12)6(cid:0)3(cid:13)1(cid:11)(cid:12)5(cid:0)(cid:21).(cid:9)(cid:0)(cid:22)(cid:12)D(cid:14)(cid:0)(cid:28)(cid:8)(cid:22)(cid:15)6(cid:9)(cid:20)3(cid:15)1(cid:3)(cid:0)(cid:21)(cid:15).(cid:20)(cid:16)(cid:0)(cid:6)*(cid:15)-(cid:17)(cid:22)(cid:3)(cid:20)(cid:4)(cid:21)(cid:11)(cid:0)+(cid:15)6D(cid:22).(cid:0)1(cid:0)(cid:0)(cid:0)(cid:0)(cid:19)(cid:0),+(cid:22)6(cid:0)*(cid:19)(cid:20)(cid:0)(cid:19)DD(cid:0)(cid:21)(cid:28),(cid:21)4K(cid:0)(cid:0) (cid:4)!(cid:4)(cid:7)(cid:0)(cid:9)(cid:15)(cid:8)(cid:7)(cid:3)\"(cid:0)(cid:6)(cid:10)#(cid:14)(cid:9)(cid:15)(cid:3)(cid:0)(cid:8)(cid:15)(cid:10)(cid:0)(cid:3)$(cid:9)(cid:12)(cid:0)(cid:9)(cid:7)(cid:4)(cid:9)(cid:13) (cid:2) (cid:11) (cid:5) (cid:4) (cid:18)(cid:0) (cid:0) (cid:0) (cid:17)(cid:19)(cid:20)(cid:21)(cid:0)(cid:15)(cid:22)(cid:23)(cid:0)(cid:24)(cid:25)(cid:26)(cid:24)(cid:27)(cid:28)(cid:29)(cid:27)(cid:30)(cid:31) (cid:0) (cid:17) (cid:5) (cid:16) (cid:18) (cid:11) (cid:12) (cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0) (cid:26)%(cid:0) (cid:0) (cid:0) [\\]^(cid:0)_‘abcdecff_gfchij(cid:0)(cid:0)(cid:0)hkdlm^no(cid:0)pq(cid:0)(cid:0)(cid:0)rst^u(cid:0)favpwvab(cid:0)(cid:0)(cid:0)x\\y^(cid:0)aa(cid:0)kz(cid:0)bb (cid:0) (cid:0)%(cid:0) (cid:10)(cid:23)(cid:0) *+(cid:21)(cid:0)(cid:19)(cid:28)*(cid:20)(cid:0)*+(cid:19)*(cid:0)(cid:10)(cid:21),(cid:21)-.(cid:19)-*(cid:0)+(cid:19)(cid:20)(cid:0)*(cid:19)/(cid:21)-(cid:0)*(cid:22)(cid:0).(cid:19)*(cid:21)(cid:0)*(cid:22)(cid:0)0(cid:21)1(cid:21).2(cid:19)*(cid:21)(cid:0)*+(cid:21)(cid:0)(cid:17)(cid:22)(cid:29)(cid:21)0(cid:21).(cid:0)(cid:4)-(cid:28)2.(cid:21)-*3(cid:0) (cid:0)(cid:26)(cid:0) 40(cid:22)*(cid:21)(cid:28)*(cid:0)(cid:17)(cid:22)(cid:29)(cid:21)0(cid:21).(cid:0)(cid:4)-,(cid:22)01(cid:19)*2(cid:22)-(cid:0),0(cid:22)1(cid:0),50*+(cid:21)0(cid:0).2(cid:20)(cid:28)6(cid:22)(cid:20)50(cid:21)(cid:18)(cid:0)(cid:21)74(cid:22)(cid:20)50(cid:21)(cid:18)(cid:0)(cid:22)0(cid:0)(cid:19)(cid:28)(cid:28)(cid:21)(cid:20)(cid:20)3(cid:0)(cid:19)-.(cid:0)40(cid:22)*(cid:21)(cid:28)*(cid:0)(cid:19),,(cid:21)(cid:28)*(cid:21).(cid:0) (cid:0)(cid:24)(cid:0) 2-.2(cid:29)2.5(cid:19)6(cid:20)(cid:0),0(cid:22)1(cid:0)2.(cid:21)-*2*8(cid:0)*+(cid:21),*(cid:0)(cid:22)0(cid:0)(cid:22)*+(cid:21)0(cid:0)+(cid:19)01(cid:0)*+(cid:19)*(cid:0)1(cid:19)8(cid:0)0(cid:21)(cid:20)56*(cid:0),0(cid:22)1(cid:0)*+(cid:21)(cid:0)(cid:17)(cid:22)(cid:29)(cid:21)0(cid:21).(cid:0)(cid:4)-(cid:28)2.(cid:21)-*3(cid:0)(cid:19)-.(cid:0)(cid:0) (cid:0)(cid:30)(cid:0) (cid:9)(cid:23)(cid:0) (cid:19)(cid:0)0(cid:21)40(cid:21)(cid:20)(cid:21)-*(cid:19)*2(cid:29)(cid:21)(cid:0)(cid:28)(cid:22)48(cid:0)(cid:22),(cid:0)(cid:19)-8(cid:0)1(cid:19)*(cid:21)02(cid:19)668(cid:0).2,,(cid:21)0(cid:21)-*(cid:0)-(cid:22)*2(cid:28)(cid:21)(cid:0)(cid:20)(cid:21)-*(cid:0)98(cid:0)(cid:10)(cid:21),(cid:21)-.(cid:19)-*(cid:0)*(cid:22)(cid:0) (cid:0)&(cid:0) (cid:28)(cid:22)-(cid:20)51(cid:21)0(cid:20)(cid:0)(cid:22)0(cid:0)*(cid:22)(cid:0)(cid:19)-8(cid:0)(cid:6)(cid:23)(cid:2)(cid:23)(cid:0),(cid:21).(cid:21)0(cid:19)6(cid:18)(cid:0)(cid:20)*(cid:19)*(cid:21)(cid:18)(cid:0)(cid:22)0(cid:0)6(cid:22)(cid:28)(cid:19)6(cid:0):(cid:22)(cid:29)(cid:21)0-1(cid:21)-*(cid:0)(cid:21)-*2*8(cid:23)(cid:0) (cid:0)(cid:31)(cid:0) (cid:6)-6(cid:21)(cid:20)(cid:20)(cid:0)(cid:22)*+(cid:21)0;2(cid:20)(cid:21)(cid:0).20(cid:21)(cid:28)*(cid:21).(cid:0)98(cid:0)(cid:19)(cid:0)(cid:17)(cid:22)112(cid:20)(cid:20)2(cid:22)-(cid:0)0(cid:21)40(cid:21)(cid:20)(cid:21)-*(cid:19)*2(cid:29)(cid:21)(cid:0)2-(cid:0);02*2-:(cid:18)(cid:0)(cid:19)66(cid:0)(cid:17)(cid:22)(cid:29)(cid:21)0(cid:21).(cid:0) (cid:0)’(cid:0) (cid:4)-(cid:28)2.(cid:21)-*(cid:0)0(cid:21)4(cid:22)0*(cid:20)(cid:0)*(cid:22)(cid:0)*+(cid:21)(cid:0)(cid:17)(cid:22)112(cid:20)(cid:20)2(cid:22)-(cid:0)450(cid:20)5(cid:19)-*(cid:0)*(cid:22)(cid:0)*+2(cid:20)(cid:0)(cid:11)0.(cid:21)0(cid:0)15(cid:20)*(cid:0)9(cid:21)(cid:0)(cid:21)1(cid:19)26(cid:21).(cid:0)*(cid:22)(cid:0)(cid:10)(cid:9)902(cid:21),<,*(cid:28)(cid:23):(cid:22)(cid:29)(cid:0) (cid:0)((cid:0) (cid:22)0(cid:0)(cid:20)(cid:21)-*(cid:0)98(cid:0)(cid:22)(cid:29)(cid:21)0-2:+*(cid:0)(cid:28)(cid:22)502(cid:21)0(cid:0)=-(cid:22)*(cid:0)*+(cid:21)(cid:0)(cid:6)(cid:23)(cid:2)(cid:23)(cid:0)(cid:5)(cid:22)(cid:20)*(cid:19)6(cid:0)(cid:2)(cid:21)0(cid:29)2(cid:28)(cid:21)>(cid:0)*(cid:22)(cid:25)(cid:0)(cid:8)(cid:20)(cid:20)(cid:22)(cid:28)2(cid:19)*(cid:21)(cid:0)(cid:10)20(cid:21)(cid:28)*(cid:22)0(cid:0),(cid:22)0(cid:0)(cid:9)-,(cid:22)0(cid:28)(cid:21)1(cid:21)-*(cid:18)(cid:0) (cid:0))(cid:0) ?50(cid:21)(cid:19)5(cid:0)(cid:22),(cid:0)(cid:17)(cid:22)-(cid:20)51(cid:21)0(cid:0)(cid:5)0(cid:22)*(cid:21)(cid:28)*2(cid:22)-(cid:18)(cid:0)(cid:13)(cid:21).(cid:21)0(cid:19)6(cid:0)(cid:3)0(cid:19).(cid:21)(cid:0)(cid:17)(cid:22)112(cid:20)(cid:20)2(cid:22)-(cid:18)(cid:0)(cid:31) (cid:0)(cid:5)(cid:21)--(cid:20)86(cid:29)(cid:19)-2(cid:19)(cid:0)(cid:8)(cid:29)(cid:21)-5(cid:21)(cid:0)(cid:15)@(cid:18)(cid:0) (cid:0)% (cid:0) @(cid:19)(cid:20)+2-:*(cid:22)-(cid:18)(cid:0)(cid:10)(cid:17)(cid:0)(cid:26) &( (cid:23)(cid:0)(cid:0)(cid:3)+(cid:21)(cid:0)(cid:20)59A(cid:21)(cid:28)*(cid:0)62-(cid:21)(cid:0)15(cid:20)*(cid:0)9(cid:21):2-(cid:25)(cid:0)B(cid:6)(cid:23)(cid:2)(cid:23)(cid:0)(cid:29)(cid:23)(cid:0)#(cid:22)(cid:22).(cid:12)7(cid:0)$(cid:22)6.2-:(cid:20)(cid:18)(cid:0)(cid:4)-(cid:28)(cid:23)C(cid:0)",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Compliance Monitoring"
      ],
      "case_id": "02.23_goodrx_holdings",
      "company_name": "GoodRx Holdings, Inc.",
      "date_issued": "2023-02-15",
      "year": 2023,
      "administration": "Biden",
      "legal_authority": "Sections 5(a)(1), 5(m)(1)(A), 13(b), 16(a)(1), and 19 of the Federal Trade Commission Act, 15 U.S.C. §§ 45(a)(1), 45(m)(1)(A), 53(b), 56(a)(1), 57b, and the Health Breach Notification Rule, 16 C.F.R. § 318",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/2023090-goodrx-holdings-inc",
      "docket_number": "23-cv-460"
    },
    {
      "provision_number": "VIII",
      "title": "Civil Penalty",
      "category": "affirmative_obligation",
      "summary": "Defendant must pay a civil penalty of $1,500,000 to the United States Treasury within 7 days of entry of the Order.",
      "verbatim_text": "(cid:0)%%(cid:0) DEEF(cid:0) GHIJKLMN(cid:0)OPQRGJIK(cid:0)SHM(cid:0)TEUEV(cid:0)WJILVKN(cid:0) (cid:0)%(cid:26)(cid:0) (cid:0) (cid:4)(cid:3)(cid:0)(cid:4)(cid:2)(cid:0)(cid:13)(cid:6)(cid:12)(cid:3)$(cid:9)(cid:12)(cid:0)(cid:11)(cid:12)(cid:10)(cid:9)(cid:12)(cid:9)(cid:10)(cid:0)*+(cid:19)*(cid:25)(cid:0)(cid:0) (cid:0)%(cid:24)(cid:0) (cid:8)(cid:23)(cid:0) (cid:16)5.:1(cid:21)-*(cid:0)2-(cid:0)*+(cid:21)(cid:0)(cid:19)1(cid:22)5-*(cid:0)(cid:22),(cid:0)X%(cid:18)& (cid:18) (cid:0)2(cid:20)(cid:0)(cid:21)-*(cid:21)0(cid:21).(cid:0)2-(cid:0),(cid:19)(cid:29)(cid:22)0(cid:0)(cid:22),(cid:0)(cid:5)6(cid:19)2-*2,,(cid:0)(cid:19):(cid:19)2-(cid:20)*(cid:0) (cid:0)%(cid:30)(cid:0) (cid:10)(cid:21),(cid:21)-.(cid:19)-*(cid:0)(cid:19)(cid:20)(cid:0)(cid:19)(cid:0)(cid:28)2(cid:29)26(cid:0)4(cid:21)-(cid:19)6*8(cid:23)(cid:0) (cid:0)%&(cid:0) ?(cid:23)(cid:0) (cid:10)(cid:21),(cid:21)-.(cid:19)-*(cid:0)2(cid:20)(cid:0)(cid:22)0.(cid:21)0(cid:21).(cid:0)*(cid:22)(cid:0)4(cid:19)8(cid:0)*(cid:22)(cid:0)(cid:5)6(cid:19)2-*2,,(cid:18)(cid:0)98(cid:0)1(cid:19)/2-:(cid:0)4(cid:19)81(cid:21)-*(cid:0)*(cid:22)(cid:0)*+(cid:21)(cid:0)(cid:3)0(cid:21)(cid:19)(cid:20)50(cid:21)0(cid:0)(cid:22),(cid:0) (cid:0)%(cid:31)(cid:0) *+(cid:21)(cid:0)(cid:6)-2*(cid:21).(cid:0)(cid:2)*(cid:19)*(cid:21)(cid:20)(cid:18)(cid:0)X%(cid:18)& (cid:18) (cid:18)(cid:0);+2(cid:28)+(cid:18)(cid:0)(cid:19)(cid:20)(cid:0)(cid:10)(cid:21),(cid:21)-.(cid:19)-*(cid:0)(cid:20)*2456(cid:19)*(cid:21)(cid:20)(cid:18)(cid:0)*+(cid:21)20(cid:0)5-.(cid:21)0(cid:20)2:-(cid:21).(cid:0)(cid:28)(cid:22)5-(cid:20)(cid:21)6(cid:0)+(cid:22)6.(cid:20)(cid:0)2-(cid:0) (cid:0)%’(cid:0) (cid:21)(cid:20)(cid:28)0(cid:22);(cid:0),(cid:22)0(cid:0)-(cid:22)(cid:0)4504(cid:22)(cid:20)(cid:21)(cid:0)(cid:22)*+(cid:21)0(cid:0)*+(cid:19)-(cid:0)4(cid:19)81(cid:21)-*(cid:0)*(cid:22)(cid:0)(cid:5)6(cid:19)2-*2,,(cid:23)(cid:0)(cid:0)(cid:2)5(cid:28)+(cid:0)4(cid:19)81(cid:21)-*(cid:0)15(cid:20)*(cid:0)9(cid:21)(cid:0)1(cid:19).(cid:21)(cid:0);2*+2-(cid:0)’(cid:0) (cid:0)%((cid:0) .(cid:19)8(cid:20)(cid:0)(cid:22),(cid:0)(cid:21)-*08(cid:0)(cid:22),(cid:0)*+2(cid:20)(cid:0)(cid:11)0.(cid:21)0(cid:0)98(cid:0)(cid:21)6(cid:21)(cid:28)*0(cid:22)-2(cid:28)(cid:0),5-.(cid:0)*0(cid:19)-(cid:20),(cid:21)0(cid:0)2-(cid:0)(cid:19)(cid:28)(cid:28)(cid:22)0.(cid:19)-(cid:28)(cid:21)(cid:0);2*+(cid:0)2-(cid:20)*05(cid:28)*2(cid:22)-(cid:20)(cid:0)40(cid:21)(cid:29)2(cid:22)5(cid:20)68(cid:0) (cid:0)%)(cid:0) 40(cid:22)(cid:29)2.(cid:21).(cid:0)98(cid:0)(cid:19)(cid:0)0(cid:21)40(cid:21)(cid:20)(cid:21)-*(cid:19)*2(cid:29)(cid:21)(cid:0)(cid:22),(cid:0)(cid:5)6(cid:19)2-*2,,(cid:23)(cid:0)(cid:0)",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Monetary Penalty"
      ],
      "case_id": "02.23_goodrx_holdings",
      "company_name": "GoodRx Holdings, Inc.",
      "date_issued": "2023-02-15",
      "year": 2023,
      "administration": "Biden",
      "legal_authority": "Sections 5(a)(1), 5(m)(1)(A), 13(b), 16(a)(1), and 19 of the Federal Trade Commission Act, 15 U.S.C. §§ 45(a)(1), 45(m)(1)(A), 53(b), 56(a)(1), 57b, and the Health Breach Notification Rule, 16 C.F.R. § 318",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/2023090-goodrx-holdings-inc",
      "docket_number": "23-cv-460"
    },
    {
      "provision_number": "IX",
      "title": "Additional Monetary Provisions",
      "category": "affirmative_obligation",
      "summary": "Defendant relinquishes all dominion and control over funds paid; the facts in the Complaint are taken as true and cannot be contested in any subsequent civil litigation by the FTC; and Defendant must provide its Taxpayer Identification Number.",
      "verbatim_text": "(cid:0)(cid:26) (cid:0) DEEEF(cid:0) LQQEKEHILV(cid:0)GHIJKLMN(cid:0)WMHUEYEHIY(cid:0) (cid:0)(cid:26)%(cid:0) (cid:0) (cid:4)(cid:3)(cid:0)(cid:4)(cid:2)(cid:0)(cid:13)(cid:6)(cid:12)(cid:3)$(cid:9)(cid:12)(cid:0)(cid:11)(cid:12)(cid:10)(cid:9)(cid:12)(cid:9)(cid:10)(cid:0)*+(cid:19)*(cid:25)(cid:0)(cid:0) (cid:0)(cid:26)(cid:26)(cid:0) (cid:8)(cid:23)(cid:0) (cid:10)(cid:21),(cid:21)-.(cid:19)-*(cid:0)0(cid:21)62-Z52(cid:20)+(cid:21)(cid:20)(cid:0).(cid:22)12-2(cid:22)-(cid:0)(cid:19)-.(cid:0)(cid:19)66(cid:0)6(cid:21):(cid:19)6(cid:0)(cid:19)-.(cid:0)(cid:21)Z52*(cid:19)96(cid:21)(cid:0)02:+*(cid:18)(cid:0)*2*6(cid:21)(cid:18)(cid:0)(cid:19)-.(cid:0) (cid:0)(cid:26)(cid:24)(cid:0) 2-*(cid:21)0(cid:21)(cid:20)*(cid:0)2-(cid:0)(cid:19)66(cid:0)(cid:19)(cid:20)(cid:20)(cid:21)*(cid:20)(cid:0)*0(cid:19)-(cid:20),(cid:21)00(cid:21).(cid:0)450(cid:20)5(cid:19)-*(cid:0)*(cid:22)(cid:0)*+2(cid:20)(cid:0)(cid:11)0.(cid:21)0(cid:0)(cid:19)-.(cid:0)1(cid:19)8(cid:0)-(cid:22)*(cid:0)(cid:20)(cid:21)(cid:21)/(cid:0)*+(cid:21)(cid:0)0(cid:21)*50-(cid:0)(cid:22),(cid:0)(cid:19)-8(cid:0)(cid:19)(cid:20)(cid:20)(cid:21)*(cid:20)(cid:23)(cid:0) (cid:0)(cid:26)(cid:30)(cid:0) ?(cid:23)(cid:0) (cid:3)+(cid:21)(cid:0),(cid:19)(cid:28)*(cid:20)(cid:0)(cid:19)66(cid:21):(cid:21).(cid:0)2-(cid:0)*+(cid:21)(cid:0)(cid:17)(cid:22)146(cid:19)2-*(cid:0);266(cid:0)9(cid:21)(cid:0)*(cid:19)/(cid:21)-(cid:0)(cid:19)(cid:20)(cid:0)*05(cid:21)(cid:18)(cid:0);2*+(cid:22)5*(cid:0),50*+(cid:21)0(cid:0)40(cid:22)(cid:22),(cid:18)(cid:0)2-(cid:0) (cid:0)(cid:26)&(cid:0) (cid:19)-8(cid:0)(cid:20)59(cid:20)(cid:21)Z5(cid:21)-*(cid:0)(cid:28)2(cid:29)26(cid:0)62*2:(cid:19)*2(cid:22)-(cid:0)98(cid:0)(cid:22)0(cid:0)(cid:22)-(cid:0)9(cid:21)+(cid:19)6,(cid:0)(cid:22),(cid:0)*+(cid:21)(cid:0)(cid:17)(cid:22)112(cid:20)(cid:20)2(cid:22)-(cid:18)(cid:0)2-(cid:28)65.2-:(cid:0)2-(cid:0)(cid:19)(cid:0)40(cid:22)(cid:28)(cid:21)(cid:21).2-:(cid:0)*(cid:22)(cid:0) (cid:0)(cid:26)(cid:31)(cid:0) (cid:21)-,(cid:22)0(cid:28)(cid:21)(cid:0)2*(cid:20)(cid:0)02:+*(cid:20)(cid:0)*(cid:22)(cid:0)(cid:19)-8(cid:0)4(cid:19)81(cid:21)-*(cid:0)(cid:22)0(cid:0)1(cid:22)-(cid:21)*(cid:19)08(cid:0)A5.:1(cid:21)-*(cid:0)450(cid:20)5(cid:19)-*(cid:0)*(cid:22)(cid:0)*+2(cid:20)(cid:0)(cid:11)0.(cid:21)0(cid:23)(cid:0) (cid:0)(cid:26)’(cid:0) (cid:17)(cid:23)(cid:0) (cid:10)(cid:21),(cid:21)-.(cid:19)-*(cid:0)(cid:19)(cid:28)/-(cid:22);6(cid:21).:(cid:21)(cid:20)(cid:0)*+(cid:19)*(cid:0)2*(cid:20)(cid:0)(cid:3)(cid:19)74(cid:19)8(cid:21)0(cid:0)(cid:4).(cid:21)-*2,2(cid:28)(cid:19)*2(cid:22)-(cid:0)(cid:15)519(cid:21)0(cid:20)(cid:18)(cid:0)(cid:22)0(cid:0)(cid:9)146(cid:22)8(cid:21)0(cid:0) (cid:0)(cid:26)((cid:0) (cid:4).(cid:3)(cid:21)(cid:4)-(cid:5)(cid:6)*2(cid:7),2(cid:8)(cid:28)(cid:3)(cid:19)*(cid:9)2(cid:10)(cid:22)-(cid:0)(cid:0)(cid:15)(cid:12)(cid:10)51(cid:9)(cid:12)9(cid:0)(cid:13)(cid:21)(cid:11)0(cid:20)(cid:12)(cid:18)(cid:0)(cid:0);(cid:9)+(cid:12)2(cid:28)(cid:14)+(cid:8)(cid:0)(cid:10)(cid:15)(cid:21)(cid:9),(cid:15)(cid:21)(cid:3)-(cid:0).(cid:15)(cid:19)-(cid:16)(cid:6)*(cid:0)(cid:15)4(cid:17)0(cid:21)(cid:3)(cid:29)(cid:4)(cid:11)2(cid:22)(cid:15)5(cid:20)68(cid:0)(cid:0)(cid:0)(cid:20)(cid:0)(cid:0)5(cid:0)(cid:0)912**(cid:21).(cid:0)*(cid:22)(cid:0)*+(cid:0)(cid:21)(cid:0)(cid:17)(cid:22)112(cid:20)(cid:20)2(cid:22)-(cid:18)(cid:0)1(cid:19)8(cid:0)9(cid:21)(cid:0)5(cid:20)(cid:21).(cid:0)\n\n(cid:0)(cid:26) (cid:0) DEEEF(cid:0) LQQEKEHILV(cid:0)GHIJKLMN(cid:0)WMHUEYEHIY(cid:0) (cid:0)(cid:26)%(cid:0) (cid:0) (cid:4)(cid:3)(cid:0)(cid:4)(cid:2)(cid:0)(cid:13)(cid:6)(cid:12)(cid:3)$(cid:9)(cid:12)(cid:0)(cid:11)(cid:12)(cid:10)(cid:9)(cid:12)(cid:9)(cid:10)(cid:0)*+(cid:19)*(cid:25)(cid:0)(cid:0) (cid:0)(cid:26)(cid:26)(cid:0) (cid:8)(cid:23)(cid:0) (cid:10)(cid:21),(cid:21)-.(cid:19)-*(cid:0)0(cid:21)62-Z52(cid:20)+(cid:21)(cid:20)(cid:0).(cid:22)12-2(cid:22)-(cid:0)(cid:19)-.(cid:0)(cid:19)66(cid:0)6(cid:21):(cid:19)6(cid:0)(cid:19)-.(cid:0)(cid:21)Z52*(cid:19)96(cid:21)(cid:0)02:+*(cid:18)(cid:0)*2*6(cid:21)(cid:18)(cid:0)(cid:19)-.(cid:0) (cid:0)(cid:26)(cid:24)(cid:0) 2-*(cid:21)0(cid:21)(cid:20)*(cid:0)2-(cid:0)(cid:19)66(cid:0)(cid:19)(cid:20)(cid:20)(cid:21)*(cid:20)(cid:0)*0(cid:19)-(cid:20),(cid:21)00(cid:21).(cid:0)450(cid:20)5(cid:19)-*(cid:0)*(cid:22)(cid:0)*+2(cid:20)(cid:0)(cid:11)0.(cid:21)0(cid:0)(cid:19)-.(cid:0)1(cid:19)8(cid:0)-(cid:22)*(cid:0)(cid:20)(cid:21)(cid:21)/(cid:0)*+(cid:21)(cid:0)0(cid:21)*50-(cid:0)(cid:22),(cid:0)(cid:19)-8(cid:0)(cid:19)(cid:20)(cid:20)(cid:21)*(cid:20)(cid:23)(cid:0) (cid:0)(cid:26)(cid:30)(cid:0) ?(cid:23)(cid:0) (cid:3)+(cid:21)(cid:0),(cid:19)(cid:28)*(cid:20)(cid:0)(cid:19)66(cid:21):(cid:21).(cid:0)2-(cid:0)*+(cid:21)(cid:0)(cid:17)(cid:22)146(cid:19)2-*(cid:0);266(cid:0)9(cid:21)(cid:0)*(cid:19)/(cid:21)-(cid:0)(cid:19)(cid:20)(cid:0)*05(cid:21)(cid:18)(cid:0);2*+(cid:22)5*(cid:0),50*+(cid:21)0(cid:0)40(cid:22)(cid:22),(cid:18)(cid:0)2-(cid:0) (cid:0)(cid:26)&(cid:0) (cid:19)-8(cid:0)(cid:20)59(cid:20)(cid:21)Z5(cid:21)-*(cid:0)(cid:28)2(cid:29)26(cid:0)62*2:(cid:19)*2(cid:22)-(cid:0)98(cid:0)(cid:22)0(cid:0)(cid:22)-(cid:0)9(cid:21)+(cid:19)6,(cid:0)(cid:22),(cid:0)*+(cid:21)(cid:0)(cid:17)(cid:22)112(cid:20)(cid:20)2(cid:22)-(cid:18)(cid:0)2-(cid:28)65.2-:(cid:0)2-(cid:0)(cid:19)(cid:0)40(cid:22)(cid:28)(cid:21)(cid:21).2-:(cid:0)*(cid:22)(cid:0) (cid:0)(cid:26)(cid:31)(cid:0) (cid:21)-,(cid:22)0(cid:28)(cid:21)(cid:0)2*(cid:20)(cid:0)02:+*(cid:20)(cid:0)*(cid:22)(cid:0)(cid:19)-8(cid:0)4(cid:19)81(cid:21)-*(cid:0)(cid:22)0(cid:0)1(cid:22)-(cid:21)*(cid:19)08(cid:0)A5.:1(cid:21)-*(cid:0)450(cid:20)5(cid:19)-*(cid:0)*(cid:22)(cid:0)*+2(cid:20)(cid:0)(cid:11)0.(cid:21)0(cid:23)(cid:0) (cid:0)(cid:26)’(cid:0) (cid:17)(cid:23)(cid:0) (cid:10)(cid:21),(cid:21)-.(cid:19)-*(cid:0)(cid:19)(cid:28)/-(cid:22);6(cid:21).:(cid:21)(cid:20)(cid:0)*+(cid:19)*(cid:0)2*(cid:20)(cid:0)(cid:3)(cid:19)74(cid:19)8(cid:21)0(cid:0)(cid:4).(cid:21)-*2,2(cid:28)(cid:19)*2(cid:22)-(cid:0)(cid:15)519(cid:21)0(cid:20)(cid:18)(cid:0)(cid:22)0(cid:0)(cid:9)146(cid:22)8(cid:21)0(cid:0) (cid:0)(cid:26)((cid:0) (cid:4).(cid:3)(cid:21)(cid:4)-(cid:5)(cid:6)*2(cid:7),2(cid:8)(cid:28)(cid:3)(cid:19)*(cid:9)2(cid:10)(cid:22)-(cid:0)(cid:0)(cid:15)(cid:12)(cid:10)51(cid:9)(cid:12)9(cid:0)(cid:13)(cid:21)(cid:11)0(cid:20)(cid:12)(cid:18)(cid:0)(cid:0);(cid:9)+(cid:12)2(cid:28)(cid:14)+(cid:8)(cid:0)(cid:10)(cid:15)(cid:21)(cid:9),(cid:15)(cid:21)(cid:3)-(cid:0).(cid:15)(cid:19)-(cid:16)(cid:6)*(cid:0)(cid:15)4(cid:17)0(cid:21)(cid:3)(cid:29)(cid:4)(cid:11)2(cid:22)(cid:15)5(cid:20)68(cid:0)(cid:0)(cid:0)(cid:20)(cid:0)(cid:0)5(cid:0)(cid:0)912**(cid:21).(cid:0)*(cid:22)(cid:0)*+(cid:0)(cid:21)(cid:0)(cid:17)(cid:22)112(cid:20)(cid:20)2(cid:22)-(cid:18)(cid:0)1(cid:19)8(cid:0)9(cid:21)(cid:0)5(cid:20)(cid:21).(cid:0) (cid:4)!(cid:4)(cid:7)(cid:0)(cid:9)(cid:15)(cid:8)(cid:7)(cid:3)\"(cid:0)(cid:6)(cid:10)#(cid:14)(cid:9)(cid:15)(cid:3)(cid:0)(cid:8)(cid:15)(cid:10)(cid:0)(cid:3)$(cid:9)(cid:12)(cid:0)(cid:9)(cid:7)(cid:4)(cid:9)(cid:13) (cid:2) (cid:11) (cid:5) (cid:4) (cid:18)(cid:0) (cid:0) (cid:0) (cid:17)(cid:19)(cid:20)(cid:21)(cid:0)(cid:15)(cid:22)(cid:23)(cid:0)(cid:24)(cid:25)(cid:26)(cid:24)(cid:27)(cid:28)(cid:29)(cid:27)(cid:30)(cid:31) (cid:0) (cid:17) (cid:5) (cid:16) (cid:18) (cid:11) (cid:12) (cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0) (cid:26)(cid:26)(cid:0) (cid:0) (cid:0) UVWX(cid:0)YZ[\\]^_]‘‘Ya‘]bcd(cid:0)(cid:0)(cid:0)be^fgXhi(cid:0)jk(cid:0)(cid:0)(cid:0)lmnXo(cid:0)‘[pjqp[\\(cid:0)(cid:0)(cid:0)rVsX(cid:0)[\\(cid:0)et(cid:0)\\\\ (cid:0) (cid:0)%(cid:0) *(cid:22)+(cid:0)(cid:28)(cid:22),,(cid:21)(cid:28)-./0(cid:0)(cid:19)/1(cid:0)+(cid:21)2(cid:22)+-./0(cid:0)(cid:22)/(cid:0)(cid:19)/3(cid:0)1(cid:21),./45(cid:21)/-(cid:0)(cid:19)6(cid:22)5/-(cid:0)(cid:19)+.(cid:20)./0(cid:0)(cid:22)5-(cid:0)(cid:22)*(cid:0)-7.(cid:20)(cid:0)(cid:11)+1(cid:21)+(cid:18)(cid:0)./(cid:0)(cid:19)(cid:28)(cid:28)(cid:22)+1(cid:19)/(cid:28)(cid:21)(cid:0) (cid:0)(cid:26)(cid:0) 8.-7(cid:0)(cid:24)%(cid:0)(cid:6)(cid:23)(cid:2)(cid:23)(cid:17)(cid:23)(cid:0)9(cid:0)’’ %(cid:23)(cid:0)\n\n(cid:4).(cid:3)(cid:21)(cid:4)-(cid:5)(cid:6)*2(cid:7),2(cid:8)(cid:28)(cid:3)(cid:19)*(cid:9)2(cid:10)(cid:22)-(cid:0)(cid:0)(cid:15)(cid:12)(cid:10)51(cid:9)(cid:12)9(cid:0)(cid:13)(cid:21)(cid:11)0(cid:20)(cid:12)(cid:18)(cid:0)(cid:0);(cid:9)+(cid:12)2(cid:28)(cid:14)+(cid:8)(cid:0)(cid:10)(cid:15)(cid:21)(cid:9),(cid:15)(cid:21)(cid:3)-(cid:0).(cid:15)(cid:19)-(cid:16)(cid:6)*(cid:0)(cid:15)4(cid:17)0(cid:21)(cid:3)(cid:29)(cid:4)(cid:11)2(cid:22)(cid:15)5(cid:20)68(cid:0)(cid:0)(cid:0)(cid:20)(cid:0)(cid:0)5(cid:0)(cid:0)912**(cid:21).(cid:0)*(cid:22)(cid:0)*+(cid:0)(cid:21)(cid:0)(cid:17)(cid:22)112(cid:20)(cid:20)2(cid:22)-(cid:18)(cid:0)1(cid:19)8(cid:0)9(cid:21)(cid:0)5(cid:20)(cid:21).(cid:0) (cid:4)!(cid:4)(cid:7)(cid:0)(cid:9)(cid:15)(cid:8)(cid:7)(cid:3)\"(cid:0)(cid:6)(cid:10)#(cid:14)(cid:9)(cid:15)(cid:3)(cid:0)(cid:8)(cid:15)(cid:10)(cid:0)(cid:3)$(cid:9)(cid:12)(cid:0)(cid:9)(cid:7)(cid:4)(cid:9)(cid:13) (cid:2) (cid:11) (cid:5) (cid:4) (cid:18)(cid:0) (cid:0) (cid:0) (cid:17)(cid:19)(cid:20)(cid:21)(cid:0)(cid:15)(cid:22)(cid:23)(cid:0)(cid:24)(cid:25)(cid:26)(cid:24)(cid:27)(cid:28)(cid:29)(cid:27)(cid:30)(cid:31) (cid:0) (cid:17) (cid:5) (cid:16) (cid:18) (cid:11) (cid:12) (cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0)(cid:0) (cid:26)(cid:26)(cid:0) (cid:0) (cid:0) UVWX(cid:0)YZ[\\]^_]‘‘Ya‘]bcd(cid:0)(cid:0)(cid:0)be^fgXhi(cid:0)jk(cid:0)(cid:0)(cid:0)lmnXo(cid:0)‘[pjqp[\\(cid:0)(cid:0)(cid:0)rVsX(cid:0)[\\(cid:0)et(cid:0)\\\\ (cid:0) (cid:0)%(cid:0) *(cid:22)+(cid:0)(cid:28)(cid:22),,(cid:21)(cid:28)-./0(cid:0)(cid:19)/1(cid:0)+(cid:21)2(cid:22)+-./0(cid:0)(cid:22)/(cid:0)(cid:19)/3(cid:0)1(cid:21),./45(cid:21)/-(cid:0)(cid:19)6(cid:22)5/-(cid:0)(cid:19)+.(cid:20)./0(cid:0)(cid:22)5-(cid:0)(cid:22)*(cid:0)-7.(cid:20)(cid:0)(cid:11)+1(cid:21)+(cid:18)(cid:0)./(cid:0)(cid:19)(cid:28)(cid:28)(cid:22)+1(cid:19)/(cid:28)(cid:21)(cid:0) (cid:0)(cid:26)(cid:0) 8.-7(cid:0)(cid:24)%(cid:0)(cid:6)(cid:23)(cid:2)(cid:23)(cid:17)(cid:23)(cid:0)9(cid:0)’’ %(cid:23)(cid:0)",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Consumer Redress"
      ],
      "case_id": "02.23_goodrx_holdings",
      "company_name": "GoodRx Holdings, Inc.",
      "date_issued": "2023-02-15",
      "year": 2023,
      "administration": "Biden",
      "legal_authority": "Sections 5(a)(1), 5(m)(1)(A), 13(b), 16(a)(1), and 19 of the Federal Trade Commission Act, 15 U.S.C. §§ 45(a)(1), 45(m)(1)(A), 53(b), 56(a)(1), 57b, and the Health Breach Notification Rule, 16 C.F.R. § 318",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/2023090-goodrx-holdings-inc",
      "docket_number": "23-cv-460"
    },
    {
      "provision_number": "X",
      "title": "Order Acknowledgment",
      "category": "acknowledgment",
      "summary": "Defendant must deliver copies of the Order and obtain signed acknowledgments from its principals, officers, directors, and certain employees and service providers.",
      "verbatim_text": "(cid:0)(cid:24)(cid:0) :;<=(cid:0) >?@A?(cid:0)BCDE>FGA@HIAEJK(cid:0) (cid:0)(cid:30)(cid:0) (cid:0) (cid:4)(cid:3)(cid:0)(cid:4)(cid:2)(cid:0)(cid:13)(cid:6)(cid:12)(cid:3)$(cid:9)(cid:12)(cid:0)(cid:11)(cid:12)(cid:10)(cid:9)(cid:12)(cid:9)(cid:10)(cid:0)-7(cid:19)-(cid:0)(cid:10)(cid:21)*(cid:21)/1(cid:19)/-(cid:0)(cid:22)L-(cid:19)./(cid:0)(cid:19)(cid:28)M/(cid:22)8,(cid:21)106(cid:21)/-(cid:20)(cid:0)(cid:22)*(cid:0)+(cid:21)(cid:28)(cid:21).2-(cid:0)(cid:22)*(cid:0)-7.(cid:20)(cid:0) (cid:0)&(cid:0) (cid:11)+1(cid:21)+(cid:25)(cid:0)\n\n(cid:0)(cid:31)(cid:0) (cid:8)(cid:23)(cid:0) (cid:10)(cid:21)*(cid:21)/1(cid:19)/-(cid:18)(cid:0)8.-7./(cid:0)(cid:20)(cid:21)(cid:29)(cid:21)/(cid:0)N’O(cid:0)1(cid:19)3(cid:20)(cid:0)(cid:22)*(cid:0)(cid:21)/-+3(cid:0)(cid:22)*(cid:0)-7.(cid:20)(cid:0)(cid:11)+1(cid:21)+(cid:18)(cid:0)65(cid:20)-(cid:0)(cid:20)5L6.-(cid:0)-(cid:22)(cid:0)-7(cid:21)(cid:0) (cid:0)’(cid:0) (cid:17)(cid:22)66.(cid:20)(cid:20).(cid:22)/(cid:0)(cid:19)/(cid:0)(cid:19)(cid:28)M/(cid:22)8,(cid:21)106(cid:21)/-(cid:0)(cid:22)*(cid:0)+(cid:21)(cid:28)(cid:21).2-(cid:0)(cid:22)*(cid:0)-7.(cid:20)(cid:0)(cid:11)+1(cid:21)+(cid:0)(cid:20)8(cid:22)+/(cid:0)5/1(cid:21)+(cid:0)2(cid:21)/(cid:19),-3(cid:0)(cid:22)*(cid:0)2(cid:21)+P5+3(cid:23)(cid:0) (cid:0)((cid:0) Q(cid:23)(cid:0) (cid:13)(cid:22)+(cid:0)(cid:26) (cid:0)3(cid:21)(cid:19)+(cid:20)(cid:0)(cid:19)*-(cid:21)+(cid:0)(cid:21)/-+3(cid:0)(cid:22)*(cid:0)-7.(cid:20)(cid:0)(cid:11)+1(cid:21)+(cid:18)(cid:0)*(cid:22)+(cid:0)(cid:19)/3(cid:0)L5(cid:20)./(cid:21)(cid:20)(cid:20)(cid:0)-7(cid:19)-(cid:0)(cid:10)(cid:21)*(cid:21)/1(cid:19)/-(cid:0).(cid:20)(cid:0)-7(cid:21)(cid:0) (cid:0))(cid:0) 6(cid:19)P(cid:22)+.-3(cid:0)(cid:22)8/(cid:21)+(cid:0)(cid:22)+(cid:0)(cid:28)(cid:22)/-+(cid:22),(cid:20)(cid:0)1.+(cid:21)(cid:28)-,3(cid:0)(cid:22)+(cid:0)./1.+(cid:21)(cid:28)-,3(cid:18)(cid:0)(cid:10)(cid:21)*(cid:21)/1(cid:19)/-(cid:0)65(cid:20)-(cid:0)1(cid:21),.(cid:29)(cid:21)+(cid:0)(cid:19)(cid:0)(cid:28)(cid:22)23(cid:0)(cid:22)*(cid:0)-7.(cid:20)(cid:0)(cid:11)+1(cid:21)+(cid:0)-(cid:22)(cid:25)(cid:0) (cid:0)% (cid:0) N%O(cid:0)(cid:19),,(cid:0)2+./(cid:28).2(cid:19),(cid:20)(cid:18)(cid:0)(cid:22)**.(cid:28)(cid:21)+(cid:20)(cid:18)(cid:0)1.+(cid:21)(cid:28)-(cid:22)+(cid:20)(cid:18)(cid:0)(cid:19)/1(cid:0)(cid:7)(cid:7)(cid:17)(cid:0)6(cid:19)/(cid:19)0(cid:21)+(cid:20)(cid:0)(cid:19)/1(cid:0)6(cid:21)6L(cid:21)+(cid:20)R(cid:0)N(cid:26)O(cid:0)(cid:19),,(cid:0)(cid:21)62,(cid:22)3(cid:21)(cid:21)(cid:20)(cid:0)7(cid:19)(cid:29)./0(cid:0) (cid:0)%%(cid:0) 6(cid:19)/(cid:19)0(cid:21)+.(cid:19),(cid:0)+(cid:21)(cid:20)2(cid:22)/(cid:20).L.,.-.(cid:21)(cid:20)(cid:0)*(cid:22)+(cid:0)(cid:28)(cid:22)/15(cid:28)-(cid:0)+(cid:21),(cid:19)-(cid:21)1(cid:0)-(cid:22)(cid:0)-7(cid:21)(cid:0)(cid:20)5LP(cid:21)(cid:28)-(cid:0)6(cid:19)--(cid:21)+(cid:0)(cid:22)*(cid:0)-7(cid:21)(cid:0)(cid:11)+1(cid:21)+(cid:0)(cid:19)/1(cid:0)(cid:19),,(cid:0)(cid:19)0(cid:21)/-(cid:20)(cid:0) (cid:0)%(cid:26)(cid:0) (cid:19)/1(cid:0)+(cid:21)2+(cid:21)(cid:20)(cid:21)/-(cid:19)-.(cid:29)(cid:21)(cid:20)(cid:0)87(cid:22)(cid:0)2(cid:19)+-.(cid:28).2(cid:19)-(cid:21)(cid:0)./(cid:0)(cid:28)(cid:22)/15(cid:28)-(cid:0)+(cid:21),(cid:19)-(cid:21)1(cid:0)-(cid:22)(cid:0)-7(cid:21)(cid:0)(cid:20)5LP(cid:21)(cid:28)-(cid:0)6(cid:19)--(cid:21)+(cid:0)(cid:22)*(cid:0)-7(cid:21)(cid:0)(cid:11)+1(cid:21)+R(cid:0)(cid:19)/1(cid:0)N(cid:24)O(cid:0) (cid:0)%(cid:24)(cid:0) (cid:19)/3(cid:0)L5(cid:20)./(cid:21)(cid:20)(cid:20)(cid:0)(cid:21)/-.-3(cid:0)+(cid:21)(cid:20)5,-./0(cid:0)*+(cid:22)6(cid:0)(cid:19)/3(cid:0)(cid:28)7(cid:19)/0(cid:21)(cid:0)./(cid:0)(cid:20)-+5(cid:28)-5+(cid:21)(cid:0)(cid:19)(cid:20)(cid:0)(cid:20)(cid:21)-(cid:0)*(cid:22)+-7(cid:0)./(cid:0)-7(cid:21)(cid:0)(cid:2)(cid:21)(cid:28)-.(cid:22)/(cid:0)-.-,(cid:21)1(cid:0) (cid:0)%(cid:30)(cid:0) (cid:17)(cid:22)62,.(cid:19)/(cid:28)(cid:21)(cid:0)(cid:12)(cid:21)2(cid:22)+-./0(cid:23)(cid:0)(cid:0)(cid:10)(cid:21),.(cid:29)(cid:21)+3(cid:0)65(cid:20)-(cid:0)(cid:22)(cid:28)(cid:28)5+(cid:0)8.-7./(cid:0)(cid:20)(cid:21)(cid:29)(cid:21)/(cid:0)N’O(cid:0)1(cid:19)3(cid:20)(cid:0)(cid:22)*(cid:0)(cid:21)/-+3(cid:0)(cid:22)*(cid:0)-7.(cid:20)(cid:0)(cid:11)+1(cid:21)+(cid:0)*(cid:22)+(cid:0) (cid:0)%&(cid:0) (cid:28)5++(cid:21)/-(cid:0)2(cid:21)+(cid:20)(cid:22)//(cid:21),(cid:23)(cid:0)(cid:0)(cid:13)(cid:22)+(cid:0)(cid:19),,(cid:0)(cid:22)-7(cid:21)+(cid:20)(cid:18)(cid:0)1(cid:21),.(cid:29)(cid:21)+3(cid:0)65(cid:20)-(cid:0)(cid:22)(cid:28)(cid:28)5+(cid:0)L(cid:21)*(cid:22)+(cid:21)(cid:0)-7(cid:21)3(cid:0)(cid:19)(cid:20)(cid:20)56(cid:21)(cid:0)-7(cid:21).+(cid:0)+(cid:21)(cid:20)2(cid:22)/(cid:20).L.,.-.(cid:21)(cid:20)(cid:23)(cid:0) (cid:0)%(cid:31)(cid:0) (cid:17)(cid:23)(cid:0) (cid:13)+(cid:22)6(cid:0)(cid:21)(cid:19)(cid:28)7(cid:0)./1.(cid:29).15(cid:19),(cid:0)(cid:22)+(cid:0)(cid:21)/-.-3(cid:0)-(cid:22)(cid:0)87.(cid:28)7(cid:0)(cid:10)(cid:21)*(cid:21)/1(cid:19)/-(cid:0)1(cid:21),.(cid:29)(cid:21)+(cid:21)1(cid:0)(cid:19)(cid:0)(cid:28)(cid:22)23(cid:0)(cid:22)*(cid:0)-7.(cid:20)(cid:0)(cid:11)+1(cid:21)+(cid:18)(cid:0)(cid:0) (cid:0)%’(cid:0) (cid:10)(cid:21)*(cid:21)/1(cid:19)/-(cid:0)65(cid:20)-(cid:0)(cid:22)L-(cid:19)./(cid:18)(cid:0)8.-7./(cid:0)-7.+-3(cid:0)N(cid:24) O(cid:0)1(cid:19)3(cid:20)(cid:18)(cid:0)(cid:19)(cid:0)(cid:20).0/(cid:21)1(cid:0)(cid:19)/1(cid:0)1(cid:19)-(cid:21)1(cid:0)(cid:19)(cid:28)M/(cid:22)8,(cid:21)106(cid:21)/-(cid:0)(cid:22)*(cid:0)+(cid:21)(cid:28)(cid:21).2-(cid:0)(cid:22)*(cid:0) (cid:0)%((cid:0) -7.(cid:20)(cid:0)(cid:11)+1(cid:21)+(cid:23)(cid:0)\n\n(cid:0)((cid:0) Q(cid:23)(cid:0) (cid:13)(cid:22)+(cid:0)(cid:26) (cid:0)3(cid:21)(cid:19)+(cid:20)(cid:0)(cid:19)*-(cid:21)+(cid:0)(cid:21)/-+3(cid:0)(cid:22)*(cid:0)-7.(cid:20)(cid:0)(cid:11)+1(cid:21)+(cid:18)(cid:0)*(cid:22)+(cid:0)(cid:19)/3(cid:0)L5(cid:20)./(cid:21)(cid:20)(cid:20)(cid:0)-7(cid:19)-(cid:0)(cid:10)(cid:21)*(cid:21)/1(cid:19)/-(cid:0).(cid:20)(cid:0)-7(cid:21)(cid:0) (cid:0))(cid:0) 6(cid:19)P(cid:22)+.-3(cid:0)(cid:22)8/(cid:21)+(cid:0)(cid:22)+(cid:0)(cid:28)(cid:22)/-+(cid:22),(cid:20)(cid:0)1.+(cid:21)(cid:28)-,3(cid:0)(cid:22)+(cid:0)./1.+(cid:21)(cid:28)-,3(cid:18)(cid:0)(cid:10)(cid:21)*(cid:21)/1(cid:19)/-(cid:0)65(cid:20)-(cid:0)1(cid:21),.(cid:29)(cid:21)+(cid:0)(cid:19)(cid:0)(cid:28)(cid:22)23(cid:0)(cid:22)*(cid:0)-7.(cid:20)(cid:0)(cid:11)+1(cid:21)+(cid:0)-(cid:22)(cid:25)(cid:0) (cid:0)% (cid:0) N%O(cid:0)(cid:19),,(cid:0)2+./(cid:28).2(cid:19),(cid:20)(cid:18)(cid:0)(cid:22)**.(cid:28)(cid:21)+(cid:20)(cid:18)(cid:0)1.+(cid:21)(cid:28)-(cid:22)+(cid:20)(cid:18)(cid:0)(cid:19)/1(cid:0)(cid:7)(cid:7)(cid:17)(cid:0)6(cid:19)/(cid:19)0(cid:21)+(cid:20)(cid:0)(cid:19)/1(cid:0)6(cid:21)6L(cid:21)+(cid:20)R(cid:0)N(cid:26)O(cid:0)(cid:19),,(cid:0)(cid:21)62,(cid:22)3(cid:21)(cid:21)(cid:20)(cid:0)7(cid:19)(cid:29)./0(cid:0) (cid:0)%%(cid:0) 6(cid:19)/(cid:19)0(cid:21)+.(cid:19),(cid:0)+(cid:21)(cid:20)2(cid:22)/(cid:20).L.,.-.(cid:21)(cid:20)(cid:0)*(cid:22)+(cid:0)(cid:28)(cid:22)/15(cid:28)-(cid:0)+(cid:21),(cid:19)-(cid:21)1(cid:0)-(cid:22)(cid:0)-7(cid:21)(cid:0)(cid:20)5LP(cid:21)(cid:28)-(cid:0)6(cid:19)--(cid:21)+(cid:0)(cid:22)*(cid:0)-7(cid:21)(cid:0)(cid:11)+1(cid:21)+(cid:0)(cid:19)/1(cid:0)(cid:19),,(cid:0)(cid:19)0(cid:21)/-(cid:20)(cid:0) (cid:0)%(cid:26)(cid:0) (cid:19)/1(cid:0)+(cid:21)2+(cid:21)(cid:20)(cid:21)/-(cid:19)-.(cid:29)(cid:21)(cid:20)(cid:0)87(cid:22)(cid:0)2(cid:19)+-.(cid:28).2(cid:19)-(cid:21)(cid:0)./(cid:0)(cid:28)(cid:22)/15(cid:28)-(cid:0)+(cid:21),(cid:19)-(cid:21)1(cid:0)-(cid:22)(cid:0)-7(cid:21)(cid:0)(cid:20)5LP(cid:21)(cid:28)-(cid:0)6(cid:19)--(cid:21)+(cid:0)(cid:22)*(cid:0)-7(cid:21)(cid:0)(cid:11)+1(cid:21)+R(cid:0)(cid:19)/1(cid:0)N(cid:24)O(cid:0) (cid:0)%(cid:24)(cid:0) (cid:19)/3(cid:0)L5(cid:20)./(cid:21)(cid:20)(cid:20)(cid:0)(cid:21)/-.-3(cid:0)+(cid:21)(cid:20)5,-./0(cid:0)*+(cid:22)6(cid:0)(cid:19)/3(cid:0)(cid:28)7(cid:19)/0(cid:21)(cid:0)./(cid:0)(cid:20)-+5(cid:28)-5+(cid:21)(cid:0)(cid:19)(cid:20)(cid:0)(cid:20)(cid:21)-(cid:0)*(cid:22)+-7(cid:0)./(cid:0)-7(cid:21)(cid:0)(cid:2)(cid:21)(cid:28)-.(cid:22)/(cid:0)-.-,(cid:21)1(cid:0) (cid:0)%(cid:30)(cid:0) (cid:17)(cid:22)62,.(cid:19)/(cid:28)(cid:21)(cid:0)(cid:12)(cid:21)2(cid:22)+-./0(cid:23)(cid:0)(cid:0)(cid:10)(cid:21),.(cid:29)(cid:21)+3(cid:0)65(cid:20)-(cid:0)(cid:22)(cid:28)(cid:28)5+(cid:0)8.-7./(cid:0)(cid:20)(cid:21)(cid:29)(cid:21)/(cid:0)N’O(cid:0)1(cid:19)3(cid:20)(cid:0)(cid:22)*(cid:0)(cid:21)/-+3(cid:0)(cid:22)*(cid:0)-7.(cid:20)(cid:0)(cid:11)+1(cid:21)+(cid:0)*(cid:22)+(cid:0) (cid:0)%&(cid:0) (cid:28)5++(cid:21)/-(cid:0)2(cid:21)+(cid:20)(cid:22)//(cid:21),(cid:23)(cid:0)(cid:0)(cid:13)(cid:22)+(cid:0)(cid:19),,(cid:0)(cid:22)-7(cid:21)+(cid:20)(cid:18)(cid:0)1(cid:21),.(cid:29)(cid:21)+3(cid:0)65(cid:20)-(cid:0)(cid:22)(cid:28)(cid:28)5+(cid:0)L(cid:21)*(cid:22)+(cid:21)(cid:0)-7(cid:21)3(cid:0)(cid:19)(cid:20)(cid:20)56(cid:21)(cid:0)-7(cid:21).+(cid:0)+(cid:21)(cid:20)2(cid:22)/(cid:20).L.,.-.(cid:21)(cid:20)(cid:23)(cid:0) (cid:0)%(cid:31)(cid:0) (cid:17)(cid:23)(cid:0) (cid:13)+(cid:22)6(cid:0)(cid:21)(cid:19)(cid:28)7(cid:0)./1.(cid:29).15(cid:19),(cid:0)(cid:22)+(cid:0)(cid:21)/-.-3(cid:0)-(cid:22)(cid:0)87.(cid:28)7(cid:0)(cid:10)(cid:21)*(cid:21)/1(cid:19)/-(cid:0)1(cid:21),.(cid:29)(cid:21)+(cid:21)1(cid:0)(cid:19)(cid:0)(cid:28)(cid:22)23(cid:0)(cid:22)*(cid:0)-7.(cid:20)(cid:0)(cid:11)+1(cid:21)+(cid:18)(cid:0)(cid:0) (cid:0)%’(cid:0) (cid:10)(cid:21)*(cid:21)/1(cid:19)/-(cid:0)65(cid:20)-(cid:0)(cid:22)L-(cid:19)./(cid:18)(cid:0)8.-7./(cid:0)-7.+-3(cid:0)N(cid:24) O(cid:0)1(cid:19)3(cid:20)(cid:18)(cid:0)(cid:19)(cid:0)(cid:20).0/(cid:21)1(cid:0)(cid:19)/1(cid:0)1(cid:19)-(cid:21)1(cid:0)(cid:19)(cid:28)M/(cid:22)8,(cid:21)106(cid:21)/-(cid:0)(cid:22)*(cid:0)+(cid:21)(cid:28)(cid:21).2-(cid:0)(cid:22)*(cid:0) (cid:0)%((cid:0) -7.(cid:20)(cid:0)(cid:11)+1(cid:21)+(cid:23)(cid:0)",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Order Administration"
      ],
      "case_id": "02.23_goodrx_holdings",
      "company_name": "GoodRx Holdings, Inc.",
      "date_issued": "2023-02-15",
      "year": 2023,
      "administration": "Biden",
      "legal_authority": "Sections 5(a)(1), 5(m)(1)(A), 13(b), 16(a)(1), and 19 of the Federal Trade Commission Act, 15 U.S.C. §§ 45(a)(1), 45(m)(1)(A), 53(b), 56(a)(1), 57b, and the Health Breach Notification Rule, 16 C.F.R. § 318",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/2023090-goodrx-holdings-inc",
      "docket_number": "23-cv-460"
    },
    {
      "provision_number": "XI",
      "title": "Compliance Reporting",
      "category": "compliance_reporting",
      "summary": "Defendant must file compliance reports with the FTC one year after entry of the Order and annually thereafter, and must notify the FTC of changes to its corporate structure within 14 days.",
      "verbatim_text": "(cid:0)%(cid:0) *+(cid:28),-.*+/(cid:0)01(cid:21)(cid:0)/(cid:22)(cid:22).(cid:20)(cid:0)(cid:19)+.(cid:0)(cid:20)(cid:21)2(cid:29)*(cid:28)(cid:21)(cid:20)(cid:0)(cid:22)33(cid:21)2(cid:21).(cid:18)(cid:0)(cid:19)+.(cid:0)01(cid:21)(cid:0)4(cid:21)(cid:19)+(cid:20)(cid:0)(cid:22)3(cid:0)(cid:19).(cid:29)(cid:21)20*(cid:20)*+/(cid:18)(cid:0)4(cid:19)25(cid:21)0*+/(cid:18)(cid:0)(cid:19)+.(cid:0) (cid:0)(cid:26)(cid:0) (cid:20)(cid:19),(cid:21)(cid:20)6(cid:0)7.8(cid:0).(cid:21)(cid:20)(cid:28)2*9(cid:21)(cid:0)*+(cid:0).(cid:21)0(cid:19)*,(cid:0):1(cid:21)01(cid:21)2(cid:0)(cid:19)+.(cid:0)1(cid:22):(cid:0)(cid:10)(cid:21)3(cid:21)+.(cid:19)+0(cid:0)*(cid:20)(cid:0)*+(cid:0)(cid:28)(cid:22)4;,*(cid:19)+(cid:28)(cid:21)(cid:0):*01(cid:0)(cid:21)(cid:19)(cid:28)1(cid:0) (cid:0)(cid:24)(cid:0) (cid:2)(cid:21)(cid:28)0*(cid:22)+(cid:0)(cid:22)3(cid:0)01*(cid:20)(cid:0)(cid:11)2.(cid:21)26(cid:0)(cid:19)+.(cid:0)7(cid:21)8(cid:0);2(cid:22)(cid:29)*.(cid:21)(cid:0)(cid:19)(cid:0)(cid:28)(cid:22);<(cid:0)(cid:22)3(cid:0)(cid:21)(cid:19)(cid:28)1(cid:0)(cid:11)2.(cid:21)2(cid:0)(cid:8)(cid:28)5+(cid:22):,(cid:21)./4(cid:21)+0(cid:0)(cid:22)90(cid:19)*+(cid:21).(cid:0) (cid:0)(cid:30)(cid:0) ;-2(cid:20)-(cid:19)+0(cid:0)0(cid:22)(cid:0)01*(cid:20)(cid:0)(cid:11)2.(cid:21)2(cid:18)(cid:0)-+,(cid:21)(cid:20)(cid:20)(cid:0);2(cid:21)(cid:29)*(cid:22)-(cid:20),<(cid:0)(cid:20)-94*00(cid:21).(cid:0)0(cid:22)(cid:0)01(cid:21)(cid:0)(cid:17)(cid:22)44*(cid:20)(cid:20)*(cid:22)+(cid:23)(cid:0)(cid:0)(cid:0)(cid:0) =(cid:23)(cid:0) (cid:0)&(cid:0) (cid:11)+(cid:21)(cid:0)<(cid:21)(cid:19)2(cid:0)(cid:19)30(cid:21)2(cid:0)(cid:21)+02<(cid:0)(cid:22)3(cid:0)01*(cid:20)(cid:0)(cid:11)2.(cid:21)2(cid:0)(cid:19)+.(cid:0)(cid:19)++-(cid:19),,<(cid:0)01(cid:21)2(cid:21)(cid:19)30(cid:21)2(cid:0)3(cid:22)2(cid:0)&(cid:0)<(cid:21)(cid:19)2(cid:20)(cid:18)(cid:0)(cid:10)(cid:21)3(cid:21)+.(cid:19)+0(cid:0) (cid:0)(cid:31)(cid:0) 4-(cid:20)0(cid:0)(cid:20)-94*0(cid:0)(cid:19)(cid:0)(cid:20)-;;,(cid:21)4(cid:21)+0(cid:19),(cid:0)(cid:28)(cid:22)4;,*(cid:19)+(cid:28)(cid:21)(cid:0)2(cid:21);(cid:22)20(cid:18)(cid:0)(cid:20):(cid:22)2+(cid:0)-+.(cid:21)2(cid:0);(cid:21)+(cid:19),0<(cid:0)(cid:22)3(cid:0);(cid:21)2>-2<(cid:18)(cid:0)(cid:21)?;,(cid:19)*+*+/(cid:0)(cid:19)+<(cid:0) (cid:0)’(cid:0) .*(cid:20)(cid:28),(cid:22)(cid:20)-2(cid:21)(cid:0)(cid:22)3(cid:0)$(cid:21)(cid:19),01(cid:0)(cid:4)+3(cid:22)24(cid:19)0*(cid:22)+(cid:0)0(cid:22)(cid:0)(cid:3)1*2.(cid:0)(cid:5)(cid:19)20*(cid:21)(cid:20)(cid:0)3(cid:22)2(cid:0)(cid:15)(cid:22)+(cid:27)(cid:8).(cid:29)(cid:21)20*(cid:20)*+/(cid:0)(cid:5)-2;(cid:22)(cid:20)(cid:21)(cid:20)(cid:0)01(cid:19)0(cid:0):(cid:19)(cid:20)(cid:0)4(cid:19).(cid:21)(cid:0) (cid:0)((cid:0) :*01(cid:22)-0(cid:0)3*2(cid:20)0(cid:0)(cid:22)90(cid:19)*+*+/(cid:0)(cid:8)33*24(cid:19)0*(cid:29)(cid:21)(cid:0)(cid:9)?;2(cid:21)(cid:20)(cid:20)(cid:0)(cid:17)(cid:22)+(cid:20)(cid:21)+0(cid:0)*+(cid:0)(cid:29)*(cid:22),(cid:19)0*(cid:22)+(cid:0)(cid:22)3(cid:0)(cid:2)(cid:21)(cid:28)0*(cid:22)+(cid:0)(cid:4)(cid:4)(cid:4)(cid:0)(cid:22)3(cid:0)01*(cid:20)(cid:0)(cid:11)2.(cid:21)2(cid:0)(cid:19)+.(cid:0) (cid:0))(cid:0) +(cid:22)0(cid:0)*+(cid:0)2(cid:21),*(cid:19)+(cid:28)(cid:21)(cid:0)(cid:22)+(cid:0)(cid:2)-9(cid:20)(cid:21)(cid:28)0*(cid:22)+(cid:0)(cid:4)(cid:4)(cid:4)(cid:23)(cid:9)(cid:0)(cid:22)3(cid:0)01*(cid:20)(cid:0)(cid:11)2.(cid:21)2(cid:18)(cid:0)*+(cid:28),-.*+/(cid:25)(cid:0)01(cid:21)(cid:0)0<;(cid:21)(cid:0)(cid:22)3(cid:0)*+3(cid:22)24(cid:19)0*(cid:22)+(cid:0).*(cid:20)(cid:28),(cid:22)(cid:20)(cid:21).6(cid:0)01(cid:21)(cid:0) (cid:0)% (cid:0) ;-2;(cid:22)(cid:20)(cid:21)(cid:0)3(cid:22)2(cid:0)(cid:21)(cid:19)(cid:28)1(cid:0)(cid:20)-(cid:28)1(cid:0).*(cid:20)(cid:28),(cid:22)(cid:20)-2(cid:21)6(cid:0)01(cid:21)(cid:0);(cid:19)20(cid:0)(cid:22)3(cid:0)01(cid:21)(cid:0)(cid:17)(cid:22)(cid:29)(cid:21)2(cid:21).(cid:0)=-(cid:20)*+(cid:21)(cid:20)(cid:20)(cid:0)01(cid:19)0(cid:0)4(cid:19).(cid:21)(cid:0)01(cid:21)(cid:0).*(cid:20)(cid:28),(cid:22)(cid:20)-2(cid:21)(cid:18)(cid:0)01(cid:21)(cid:0) (cid:0)%%(cid:0) 2(cid:21)(cid:19)(cid:20)(cid:22)+(cid:0)01(cid:21)(cid:0).*(cid:20)(cid:28),(cid:22)(cid:20)-2(cid:21)(cid:0):(cid:19)(cid:20)(cid:0)*+(cid:0)(cid:28)(cid:22)4;,*(cid:19)+(cid:28)(cid:21)(cid:0):*01(cid:0)01(cid:21)(cid:0)$(cid:4)(cid:5)(cid:8)(cid:8)(cid:0)(cid:5)2*(cid:29)(cid:19)(cid:28)<(cid:0)(cid:12)-,(cid:21)6(cid:0)(cid:19)+.(cid:0)01(cid:21)(cid:0).(cid:19)0(cid:21)(cid:20)(cid:0)(cid:22)3(cid:0)01(cid:21)(cid:0) (cid:0) (cid:0)%(cid:26)(cid:0) .*(cid:20)(cid:28),(cid:22)(cid:20)-2(cid:21)(cid:23)(cid:0)(cid:0)\n\n(cid:0)%(cid:24)(cid:0) (cid:17)(cid:23)(cid:0) (cid:13)(cid:22)2(cid:0)(cid:26) (cid:0)<(cid:21)(cid:19)2(cid:20)(cid:0)(cid:19)30(cid:21)2(cid:0)(cid:21)+02<(cid:0)(cid:22)3(cid:0)01*(cid:20)(cid:0)(cid:11)2.(cid:21)2(cid:18)(cid:0)(cid:10)(cid:21)3(cid:21)+.(cid:19)+0(cid:0)4-(cid:20)0(cid:0)(cid:20)-94*0(cid:0)(cid:19)(cid:0)(cid:28)(cid:22)4;,*(cid:19)+(cid:28)(cid:21)(cid:0) (cid:0)%(cid:30)(cid:0) +(cid:22)0*(cid:28)(cid:21)(cid:18)(cid:0)(cid:20):(cid:22)2+(cid:0)-+.(cid:21)2(cid:0);(cid:21)+(cid:19),0<(cid:0)(cid:22)3(cid:0);(cid:21)2>-2<(cid:18)(cid:0):*01*+(cid:0)3(cid:22)-20(cid:21)(cid:21)+(cid:0)7%(cid:30)8(cid:0).(cid:19)<(cid:20)(cid:0)(cid:22)3(cid:0)(cid:19)+<(cid:0)(cid:28)1(cid:19)+/(cid:21)(cid:0)*+(cid:0)01(cid:21)(cid:0)3(cid:22),,(cid:22):*+/(cid:25)(cid:0)(cid:0) (cid:0)%&(cid:0) 7(cid:19)8(cid:0)(cid:19)+<(cid:0).(cid:21)(cid:20)*/+(cid:19)0(cid:21).(cid:0);(cid:22)*+0(cid:0)(cid:22)3(cid:0)(cid:28)(cid:22)+0(cid:19)(cid:28)06(cid:0)(cid:22)2(cid:0)798(cid:0)01(cid:21)(cid:0)(cid:20)02-(cid:28)0-2(cid:21)(cid:0)(cid:22)3(cid:0)(cid:10)(cid:21)3(cid:21)+.(cid:19)+0(cid:0)(cid:22)2(cid:0)(cid:19)+<(cid:0)(cid:21)+0*0<(cid:0)01(cid:19)0(cid:0) (cid:0)%(cid:31)(cid:0) (cid:10)(cid:21)3(cid:21)+.(cid:19)+0(cid:0)1(cid:19)(cid:20)(cid:0)(cid:19)+<(cid:0)(cid:22):+(cid:21)2(cid:20)1*;(cid:0)*+0(cid:21)2(cid:21)(cid:20)0(cid:0)*+(cid:0)(cid:22)2(cid:0)(cid:28)(cid:22)+02(cid:22),(cid:20)(cid:0).*2(cid:21)(cid:28)0,<(cid:0)(cid:22)2(cid:0)*+.*2(cid:21)(cid:28)0,<(cid:0)01(cid:19)0(cid:0)4(cid:19)<(cid:0)(cid:19)33(cid:21)(cid:28)0(cid:0) (cid:0)%’(cid:0) (cid:28)(cid:22)4;,*(cid:19)+(cid:28)(cid:21)(cid:0)(cid:22)9,*/(cid:19)0*(cid:22)+(cid:20)(cid:0)(cid:19)2*(cid:20)*+/(cid:0)-+.(cid:21)2(cid:0)01*(cid:20)(cid:0)(cid:11)2.(cid:21)2(cid:18)(cid:0)*+(cid:28),-.*+/(cid:25)(cid:0)(cid:28)2(cid:21)(cid:19)0*(cid:22)+(cid:18)(cid:0)4(cid:21)2/(cid:21)2(cid:18)(cid:0)(cid:20)(cid:19),(cid:21)(cid:18)(cid:0)(cid:22)2(cid:0) (cid:0)%((cid:0) .*(cid:20)(cid:20)(cid:22),-0*(cid:22)+(cid:0)(cid:22)3(cid:0)01(cid:21)(cid:0)(cid:21)+0*0<(cid:0)(cid:22)2(cid:0)(cid:19)+<(cid:0)(cid:20)-9(cid:20)*.*(cid:19)2<(cid:18)(cid:0);(cid:19)2(cid:21)+0(cid:18)(cid:0)(cid:22)2(cid:0)(cid:19)33*,*(cid:19)0(cid:21)(cid:0)01(cid:19)0(cid:0)(cid:21)+/(cid:19)/(cid:21)(cid:20)(cid:0)*+(cid:0)(cid:19)+<(cid:0)(cid:19)(cid:28)0(cid:20)(cid:0)(cid:22)2(cid:0) (cid:0)%)(cid:0) ;2(cid:19)(cid:28)0*(cid:28)(cid:21)(cid:20)(cid:0)(cid:20)-9>(cid:21)(cid:28)0(cid:0)0(cid:22)(cid:0)01*(cid:20)(cid:0)(cid:11)2.(cid:21)2(cid:23)(cid:0) (cid:0)(cid:26) (cid:0) (cid:10)(cid:23)(cid:0) (cid:10)(cid:21)3(cid:21)+.(cid:19)+0(cid:0)4-(cid:20)0(cid:0)(cid:20)-94*0(cid:0)0(cid:22)(cid:0)01(cid:21)(cid:0)(cid:17)(cid:22)44*(cid:20)(cid:20)*(cid:22)+(cid:0)+(cid:22)0*(cid:28)(cid:21)(cid:0)(cid:22)3(cid:0)01(cid:21)(cid:0)3*,*+/(cid:0)(cid:22)3(cid:0)(cid:19)+<(cid:0)9(cid:19)+52-;0(cid:28)<(cid:0) (cid:0)(cid:26)%(cid:0) ;(cid:21)0*0*(cid:22)+(cid:18)(cid:0)*+(cid:20)(cid:22),(cid:29)(cid:21)+(cid:28)<(cid:0);2(cid:22)(cid:28)(cid:21)(cid:21).*+/(cid:18)(cid:0)(cid:22)2(cid:0)(cid:20)*4*,(cid:19)2(cid:0);2(cid:22)(cid:28)(cid:21)(cid:21).*+/(cid:0)9<(cid:0)(cid:22)2(cid:0)(cid:19)/(cid:19)*+(cid:20)0(cid:0)(cid:10)(cid:21)3(cid:21)+.(cid:19)+0(cid:0):*01*+(cid:0)3(cid:22)-20(cid:21)(cid:21)+(cid:0) (cid:0)(cid:26)(cid:26)(cid:0) 7%(cid:30)8(cid:0).(cid:19)<(cid:20)(cid:0)(cid:22)3(cid:0)*0(cid:20)(cid:0)3*,*+/(cid:23)(cid:0) (cid:0)(cid:26)(cid:24)(cid:0) (cid:9)(cid:23)(cid:0) (cid:8)+<(cid:0)(cid:20)-94*(cid:20)(cid:20)*(cid:22)+(cid:0)0(cid:22)(cid:0)01(cid:21)(cid:0)(cid:17)(cid:22)44*(cid:20)(cid:20)*(cid:22)+(cid:0)2(cid:21)@-*2(cid:21).(cid:0)9<(cid:0)01*(cid:20)(cid:0)(cid:11)2.(cid:21)2(cid:0)0(cid:22)(cid:0)9(cid:21)(cid:0)(cid:20):(cid:22)2+(cid:0)-+.(cid:21)2(cid:0) (cid:0)(cid:26)(cid:30)(cid:0) ;(cid:21)+(cid:19),0<(cid:0)(cid:22)3(cid:0);(cid:21)2>-2<(cid:0)4-(cid:20)0(cid:0)9(cid:21)(cid:0)02-(cid:21)(cid:0)(cid:19)+.(cid:0)(cid:19)(cid:28)(cid:28)-2(cid:19)0(cid:21)(cid:0)(cid:19)+.(cid:0)(cid:28)(cid:22)4;,<(cid:0):*01(cid:0)(cid:26)((cid:0)(cid:6)(cid:23)(cid:2)(cid:23)(cid:17)(cid:23)(cid:0)A(cid:0)%’(cid:30)(cid:31)(cid:18)(cid:0)(cid:20)-(cid:28)1(cid:0)(cid:19)(cid:20)(cid:0)9<(cid:0) (cid:0)(cid:26)&(cid:0) (cid:28)(cid:22)+(cid:28),-.*+/(cid:25)(cid:0)B(cid:4)(cid:0).(cid:21)(cid:28),(cid:19)2(cid:21)(cid:0)-+.(cid:21)2(cid:0);(cid:21)+(cid:19),0<(cid:0)(cid:22)3(cid:0);(cid:21)2>-2<(cid:0)-+.(cid:21)2(cid:0)01(cid:21)(cid:0),(cid:19):(cid:20)(cid:0)(cid:22)3(cid:0)01(cid:21)(cid:0)(cid:6)+*0(cid:21).(cid:0)(cid:2)0(cid:19)0(cid:21)(cid:20)(cid:0)(cid:22)3(cid:0)(cid:8)4(cid:21)2*(cid:28)(cid:19)(cid:0) (cid:0)(cid:26)(cid:31)(cid:0) 01(cid:19)0(cid:0)01(cid:21)(cid:0)3(cid:22)2(cid:21)/(cid:22)*+/(cid:0)*(cid:20)(cid:0)02-(cid:21)(cid:0)(cid:19)+.(cid:0)(cid:28)(cid:22)22(cid:21)(cid:28)0(cid:23)(cid:0)(cid:0)(cid:9)?(cid:21)(cid:28)-0(cid:21).(cid:0)(cid:22)+(cid:25)(cid:0)CCCCCD(cid:0)(cid:19)+.(cid:0)(cid:20)-;;,<*+/(cid:0)01(cid:21)(cid:0).(cid:19)0(cid:21)(cid:18)(cid:0)(cid:20)*/+(cid:19)0(cid:22)2<E(cid:20)(cid:0) (cid:0)(cid:26)’(cid:0) 3-,,(cid:0)+(cid:19)4(cid:21)(cid:18)(cid:0)0*0,(cid:21)(cid:0)7*3(cid:0)(cid:19);;,*(cid:28)(cid:19)9,(cid:21)8(cid:18)(cid:0)(cid:19)+.(cid:0)(cid:20)*/+(cid:19)0-2(cid:21)(cid:23)(cid:0) (cid:0)(cid:26)((cid:0)\n\n(cid:0)(cid:26) (cid:0) (cid:10)(cid:23)(cid:0) (cid:10)(cid:21)3(cid:21)+.(cid:19)+0(cid:0)4-(cid:20)0(cid:0)(cid:20)-94*0(cid:0)0(cid:22)(cid:0)01(cid:21)(cid:0)(cid:17)(cid:22)44*(cid:20)(cid:20)*(cid:22)+(cid:0)+(cid:22)0*(cid:28)(cid:21)(cid:0)(cid:22)3(cid:0)01(cid:21)(cid:0)3*,*+/(cid:0)(cid:22)3(cid:0)(cid:19)+<(cid:0)9(cid:19)+52-;0(cid:28)<(cid:0) (cid:0)(cid:26)%(cid:0) ;(cid:21)0*0*(cid:22)+(cid:18)(cid:0)*+(cid:20)(cid:22),(cid:29)(cid:21)+(cid:28)<(cid:0);2(cid:22)(cid:28)(cid:21)(cid:21).*+/(cid:18)(cid:0)(cid:22)2(cid:0)(cid:20)*4*,(cid:19)2(cid:0);2(cid:22)(cid:28)(cid:21)(cid:21).*+/(cid:0)9<(cid:0)(cid:22)2(cid:0)(cid:19)/(cid:19)*+(cid:20)0(cid:0)(cid:10)(cid:21)3(cid:21)+.(cid:19)+0(cid:0):*01*+(cid:0)3(cid:22)-20(cid:21)(cid:21)+(cid:0) (cid:0)(cid:26)(cid:26)(cid:0) 7%(cid:30)8(cid:0).(cid:19)<(cid:20)(cid:0)(cid:22)3(cid:0)*0(cid:20)(cid:0)3*,*+/(cid:23)(cid:0)\n\n(cid:0)(cid:26)(cid:24)(cid:0) (cid:9)(cid:23)(cid:0) (cid:8)+<(cid:0)(cid:20)-94*(cid:20)(cid:20)*(cid:22)+(cid:0)0(cid:22)(cid:0)01(cid:21)(cid:0)(cid:17)(cid:22)44*(cid:20)(cid:20)*(cid:22)+(cid:0)2(cid:21)@-*2(cid:21).(cid:0)9<(cid:0)01*(cid:20)(cid:0)(cid:11)2.(cid:21)2(cid:0)0(cid:22)(cid:0)9(cid:21)(cid:0)(cid:20):(cid:22)2+(cid:0)-+.(cid:21)2(cid:0) (cid:0)(cid:26)(cid:30)(cid:0) ;(cid:21)+(cid:19),0<(cid:0)(cid:22)3(cid:0);(cid:21)2>-2<(cid:0)4-(cid:20)0(cid:0)9(cid:21)(cid:0)02-(cid:21)(cid:0)(cid:19)+.(cid:0)(cid:19)(cid:28)(cid:28)-2(cid:19)0(cid:21)(cid:0)(cid:19)+.(cid:0)(cid:28)(cid:22)4;,<(cid:0):*01(cid:0)(cid:26)((cid:0)(cid:6)(cid:23)(cid:2)(cid:23)(cid:17)(cid:23)(cid:0)A(cid:0)%’(cid:30)(cid:31)(cid:18)(cid:0)(cid:20)-(cid:28)1(cid:0)(cid:19)(cid:20)(cid:0)9<(cid:0) (cid:0)(cid:26)&(cid:0) (cid:28)(cid:22)+(cid:28),-.*+/(cid:25)(cid:0)B(cid:4)(cid:0).(cid:21)(cid:28),(cid:19)2(cid:21)(cid:0)-+.(cid:21)2(cid:0);(cid:21)+(cid:19),0<(cid:0)(cid:22)3(cid:0);(cid:21)2>-2<(cid:0)-+.(cid:21)2(cid:0)01(cid:21)(cid:0),(cid:19):(cid:20)(cid:0)(cid:22)3(cid:0)01(cid:21)(cid:0)(cid:6)+*0(cid:21).(cid:0)(cid:2)0(cid:19)0(cid:21)(cid:20)(cid:0)(cid:22)3(cid:0)(cid:8)4(cid:21)2*(cid:28)(cid:19)(cid:0) (cid:0)(cid:26)(cid:31)(cid:0) 01(cid:19)0(cid:0)01(cid:21)(cid:0)3(cid:22)2(cid:21)/(cid:22)*+/(cid:0)*(cid:20)(cid:0)02-(cid:21)(cid:0)(cid:19)+.(cid:0)(cid:28)(cid:22)22(cid:21)(cid:28)0(cid:23)(cid:0)(cid:0)(cid:9)?(cid:21)(cid:28)-0(cid:21).(cid:0)(cid:22)+(cid:25)(cid:0)CCCCCD(cid:0)(cid:19)+.(cid:0)(cid:20)-;;,<*+/(cid:0)01(cid:21)(cid:0).(cid:19)0(cid:21)(cid:18)(cid:0)(cid:20)*/+(cid:19)0(cid:22)2<E(cid:20)(cid:0) (cid:0)(cid:26)’(cid:0) 3-,,(cid:0)+(cid:19)4(cid:21)(cid:18)(cid:0)0*0,(cid:21)(cid:0)7*3(cid:0)(cid:19);;,*(cid:28)(cid:19)9,(cid:21)8(cid:18)(cid:0)(cid:19)+.(cid:0)(cid:20)*/+(cid:19)0-2(cid:21)(cid:23)(cid:0) (cid:0)(cid:26)((cid:0)",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Compliance Monitoring"
      ],
      "case_id": "02.23_goodrx_holdings",
      "company_name": "GoodRx Holdings, Inc.",
      "date_issued": "2023-02-15",
      "year": 2023,
      "administration": "Biden",
      "legal_authority": "Sections 5(a)(1), 5(m)(1)(A), 13(b), 16(a)(1), and 19 of the Federal Trade Commission Act, 15 U.S.C. §§ 45(a)(1), 45(m)(1)(A), 53(b), 56(a)(1), 57b, and the Health Breach Notification Rule, 16 C.F.R. § 318",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/2023090-goodrx-holdings-inc",
      "docket_number": "23-cv-460"
    },
    {
      "provision_number": "XII",
      "title": "Recordkeeping",
      "category": "recordkeeping",
      "summary": "Defendant must create and retain certain records for 20 years after entry of the Order, retaining each such record for 5 years.",
      "verbatim_text": "(cid:0)(cid:31)(cid:0) (cid:0) (cid:4)(cid:3)(cid:0)(cid:4)(cid:2)(cid:0)(cid:13)(cid:6)(cid:12)(cid:3)$(cid:9)(cid:12)(cid:0)(cid:11)(cid:12)(cid:10)(cid:9)(cid:12)(cid:9)(cid:10)(cid:0)/0(cid:19)/(cid:0)(cid:10)(cid:21)5(cid:21).3(cid:19)./(cid:0),*(cid:20)/(cid:0)(cid:28)2(cid:21)(cid:19)/(cid:21)(cid:0)(cid:28)(cid:21)2/(cid:19)-.(cid:0)2(cid:21)(cid:28)(cid:22)23(cid:20)(cid:0)5(cid:22)2(cid:0)/N(cid:21)./8(cid:0)9(cid:26) :(cid:0) (cid:0)’(cid:0) 8(cid:21)(cid:19)2(cid:20)(cid:0)(cid:19)5/(cid:21)2(cid:0)(cid:21)./28(cid:0)(cid:22)5(cid:0)/0(cid:21)(cid:0)(cid:11)23(cid:21)2(cid:18)(cid:0)(cid:19).3(cid:0)2(cid:21)/(cid:19)-.(cid:0)(cid:21)(cid:19)(cid:28)0(cid:0)(cid:20)*(cid:28)0(cid:0)2(cid:21)(cid:28)(cid:22)23(cid:0)5(cid:22)2(cid:0)5-(cid:29)(cid:21)(cid:0)9%:(cid:0)8(cid:21)(cid:19)2(cid:20)(cid:23)(cid:0)(cid:0)(cid:2)1(cid:21)(cid:28)-5-(cid:28)(cid:19)448(cid:18)(cid:0) (cid:0)((cid:0) (cid:10)(cid:21)5(cid:21).3(cid:19)./(cid:0),*(cid:20)/(cid:0)(cid:28)2(cid:21)(cid:19)/(cid:21)(cid:0)(cid:19).3(cid:0)2(cid:21)/(cid:19)-.(cid:0)/0(cid:21)(cid:0)5(cid:22)44(cid:22)N-.7(cid:0)2(cid:21)(cid:28)(cid:22)23(cid:20)(cid:25)(cid:0) (cid:0))(cid:0) (cid:8)(cid:23)(cid:0) (cid:19)(cid:28)(cid:28)(cid:22)*./-.7(cid:0)2(cid:21)(cid:28)(cid:22)23(cid:20)(cid:0)(cid:20)0(cid:22)N-.7(cid:0)/0(cid:21)(cid:0)2(cid:21)(cid:29)(cid:21).*(cid:21)(cid:20)(cid:0)52(cid:22),(cid:0)(cid:19)44(cid:0)7(cid:22)(cid:22)3(cid:20)(cid:0)(cid:22)2(cid:0)(cid:20)(cid:21)2(cid:29)-(cid:28)(cid:21)(cid:20)(cid:0)(cid:20)(cid:22)43O(cid:0) (cid:0)& (cid:0) ;(cid:23)(cid:0) 1(cid:21)2(cid:20)(cid:22)..(cid:21)4(cid:0)2(cid:21)(cid:28)(cid:22)23(cid:20)(cid:0)(cid:20)0(cid:22)N-.7(cid:18)(cid:0)5(cid:22)2(cid:0)(cid:21)(cid:19)(cid:28)0(cid:0)1(cid:21)2(cid:20)(cid:22).(cid:0)12(cid:22)(cid:29)-3-.7(cid:0)(cid:20)(cid:21)2(cid:29)-(cid:28)(cid:21)(cid:20)(cid:18)(cid:0)N0(cid:21)/0(cid:21)2(cid:0)(cid:19)(cid:20)(cid:0)(cid:19).(cid:0) (cid:0)&&(cid:0) (cid:21),14(cid:22)8(cid:21)(cid:21)(cid:0)(cid:22)2(cid:0)(cid:22)/0(cid:21)2N-(cid:20)(cid:21)(cid:18)(cid:0)/0(cid:19)/(cid:0)1(cid:21)2(cid:20)(cid:22).P(cid:20)(cid:25)(cid:0).(cid:19),(cid:21)O(cid:0)(cid:19)332(cid:21)(cid:20)(cid:20)(cid:21)(cid:20)O(cid:0)/(cid:21)4(cid:21)10(cid:22).(cid:21)(cid:0).*,+(cid:21)2(cid:20)O(cid:0)=(cid:22)+(cid:0)/-/4(cid:21)(cid:0)(cid:22)2(cid:0)1(cid:22)(cid:20)-/-(cid:22).O(cid:0) (cid:0)&(cid:26)(cid:0) 3(cid:19)/(cid:21)(cid:20)(cid:0)(cid:22)5(cid:0)(cid:20)(cid:21)2(cid:29)-(cid:28)(cid:21)O(cid:0)(cid:19).3(cid:0)9-5(cid:0)(cid:19)114-(cid:28)(cid:19)+4(cid:21):(cid:0)/0(cid:21)(cid:0)2(cid:21)(cid:19)(cid:20)(cid:22).(cid:0)5(cid:22)2(cid:0)/(cid:21)2,-.(cid:19)/-(cid:22).O(cid:0) (cid:0)&(cid:24)(cid:0) (cid:17)(cid:23)(cid:0) 2(cid:21)(cid:28)(cid:22)23(cid:20)(cid:0)(cid:22)5(cid:0)(cid:19)44(cid:0)(cid:28)(cid:22).(cid:20)*,(cid:21)2(cid:0)(cid:28)(cid:22),14(cid:19)-./(cid:20)(cid:0)(cid:19).3(cid:0)2(cid:21)5*.3(cid:0)2(cid:21)Q*(cid:21)(cid:20)/(cid:20)(cid:18)(cid:0)N0(cid:21)/0(cid:21)2(cid:0)2(cid:21)(cid:28)(cid:21)-(cid:29)(cid:21)3(cid:0)3-2(cid:21)(cid:28)/48(cid:0) (cid:0)&(cid:30)(cid:0) (cid:22)2(cid:0)-.3-2(cid:21)(cid:28)/48(cid:18)(cid:0)(cid:20)*(cid:28)0(cid:0)(cid:19)(cid:20)(cid:0)/02(cid:22)*70(cid:0)(cid:19)(cid:0)/0-23(cid:0)1(cid:19)2/8(cid:18)(cid:0)(cid:19).3(cid:0)(cid:19).8(cid:0)2(cid:21)(cid:20)1(cid:22).(cid:20)(cid:21)O(cid:0) (cid:0)&%(cid:0) (cid:10)(cid:23)(cid:0) 2(cid:21)(cid:28)(cid:22)23(cid:20)(cid:0)3(cid:21)(cid:20)(cid:28)2-+-.7(cid:0)(cid:19)44(cid:0)3-(cid:20)(cid:28)4(cid:22)(cid:20)*2(cid:21)(cid:20)(cid:0)(cid:22)5(cid:0)$(cid:21)(cid:19)4/0(cid:0)(cid:4).5(cid:22)2,(cid:19)/-(cid:22).(cid:0)(cid:22)2(cid:0)(cid:5)$(cid:12)(cid:0)(cid:4)3(cid:21)./-5-(cid:19)+4(cid:21)(cid:0) (cid:0)&(cid:31)(cid:0) $(cid:21)(cid:19)4/0(cid:0)(cid:4).5(cid:22)2,(cid:19)/-(cid:22).(cid:0)/(cid:22)(cid:0)(cid:3)0-23(cid:0)(cid:5)(cid:19)2/-(cid:21)(cid:20)O(cid:0) (cid:0)&’(cid:0) (cid:9)(cid:23)(cid:0) 2(cid:21)(cid:28)(cid:22)23(cid:20)(cid:0)3(cid:21)(cid:20)(cid:28)2-+-.7(cid:0)(cid:19)44(cid:0)3-(cid:20)(cid:28)4(cid:22)(cid:20)*2(cid:21)(cid:20)(cid:0)(cid:22)5(cid:0)(cid:8)11(cid:0)(cid:9)(cid:29)(cid:21)./(cid:20)(cid:0)/(cid:22)(cid:0)(cid:3)0-23(cid:0)(cid:5)(cid:19)2/-(cid:21)(cid:20)O(cid:0) (cid:0)&((cid:0) (cid:13)(cid:23)(cid:0) (cid:19)44(cid:0)2(cid:21)(cid:28)(cid:22)23(cid:20)(cid:0).(cid:21)(cid:28)(cid:21)(cid:20)(cid:20)(cid:19)28(cid:0)/(cid:22)(cid:0)3(cid:21),(cid:22).(cid:20)/2(cid:19)/(cid:21)(cid:0)5*44(cid:0)(cid:28)(cid:22),14-(cid:19).(cid:28)(cid:21)(cid:0)N-/0(cid:0)(cid:21)(cid:19)(cid:28)0(cid:0)12(cid:22)(cid:29)-(cid:20)-(cid:22).(cid:0)(cid:22)5(cid:0)/0-(cid:20)(cid:0) (cid:0)&)(cid:0) (cid:11)23(cid:21)2(cid:18)(cid:0)-.(cid:28)4*3-.7(cid:0)(cid:19)44(cid:0)(cid:20)*+,-(cid:20)(cid:20)-(cid:22).(cid:20)(cid:0)/(cid:22)(cid:0)/0(cid:21)(cid:0)(cid:17)(cid:22),,-(cid:20)(cid:20)-(cid:22).O(cid:0)(cid:19).3(cid:0) (cid:0)(cid:26) (cid:0) #(cid:23)(cid:0) (cid:19)(cid:0)(cid:28)(cid:22)18(cid:0)(cid:22)5(cid:0)(cid:21)(cid:19)(cid:28)0(cid:0)*.-Q*(cid:21)(cid:0)(cid:19)3(cid:29)(cid:21)2/-(cid:20)(cid:21),(cid:21)./(cid:0)(cid:22)2(cid:0)(cid:22)/0(cid:21)2(cid:0),(cid:19)2R(cid:21)/-.7(cid:0),(cid:19)/(cid:21)2-(cid:19)4(cid:0)1(cid:21)2/(cid:19)-.-.7(cid:0)/(cid:22)(cid:0)(cid:19)(cid:0) (cid:0)(cid:26)&(cid:0) (cid:20)1(cid:21)(cid:28)-5-(cid:28)(cid:0)32*7(cid:0)(cid:22)2(cid:0),(cid:21)3-(cid:28)(cid:19)4(cid:0)(cid:28)(cid:22).3-/-(cid:22).(cid:18)(cid:0)(cid:19).3(cid:0)(cid:19).8(cid:0)(cid:19)3(cid:29)(cid:21)2/-(cid:20)(cid:21),(cid:21)./(cid:0)/0(cid:19)/(cid:0),(cid:19)R(cid:21)(cid:20)(cid:0)(cid:28)4(cid:19)-,(cid:20)(cid:0)(cid:19)+(cid:22)*/(cid:0)/0(cid:21)(cid:0)12-(cid:29)(cid:19)(cid:28)8(cid:0)(cid:22)2(cid:0) (cid:0)(cid:26)(cid:26)(cid:0) (cid:20)(cid:21)(cid:28)*2-/8(cid:0)(cid:22)5(cid:0)(cid:28)(cid:22).(cid:20)*,(cid:21)2(cid:20)P(cid:0)$(cid:21)(cid:19)4/0(cid:0)(cid:4).5(cid:22)2,(cid:19)/-(cid:22).(cid:23)(cid:0) (cid:0)(cid:26)(cid:24)(cid:0) $(cid:23)(cid:0) (cid:21)(cid:29)(cid:21)28(cid:0)(cid:20)-?(cid:0),(cid:22)./0(cid:20)(cid:18)(cid:0)(cid:19)(cid:0)(cid:20)(cid:28)2(cid:21)(cid:21).(cid:0)(cid:28)(cid:19)1/*2(cid:21)(cid:0)(cid:22)5(cid:0)(cid:10)(cid:21)5(cid:21).3(cid:19)./P(cid:20)(cid:0)N(cid:21)+(cid:20)-/(cid:21)(cid:0)(cid:19).3(cid:0),(cid:22)+-4(cid:21)(cid:0)(cid:19)114-(cid:28)(cid:19)/-(cid:22).(cid:0) (cid:0)(cid:26)(cid:30)(cid:0) 54(cid:22)N(cid:20)(cid:0)2(cid:21)4(cid:19)/-.7(cid:0)/(cid:22)(cid:0)*(cid:20)(cid:21)2(cid:20)(cid:0)-.1*//-.7(cid:0)(cid:17)(cid:22)(cid:29)(cid:21)2(cid:21)3(cid:0)(cid:4).5(cid:22)2,(cid:19)/-(cid:22).(cid:23)(cid:0)(cid:0)",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Recordkeeping"
      ],
      "case_id": "02.23_goodrx_holdings",
      "company_name": "GoodRx Holdings, Inc.",
      "date_issued": "2023-02-15",
      "year": 2023,
      "administration": "Biden",
      "legal_authority": "Sections 5(a)(1), 5(m)(1)(A), 13(b), 16(a)(1), and 19 of the Federal Trade Commission Act, 15 U.S.C. §§ 45(a)(1), 45(m)(1)(A), 53(b), 56(a)(1), 57b, and the Health Breach Notification Rule, 16 C.F.R. § 318",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/2023090-goodrx-holdings-inc",
      "docket_number": "23-cv-460"
    },
    {
      "provision_number": "XIII",
      "title": "Commission Monitoring",
      "category": "monitoring",
      "summary": "The Commission and Plaintiff are authorized to monitor Defendant's compliance through various means including inspections, interviews, and discovery.",
      "verbatim_text": "(cid:10)%(cid:10) *+(cid:21)(cid:10)(cid:17)(cid:22),,-(cid:20)(cid:20)-(cid:22).(cid:10)(cid:22)/(cid:10)(cid:4)0(cid:19)-.*-11(cid:18)(cid:10)(cid:9)(cid:21)1(cid:21).2(cid:19).*(cid:10),3(cid:20)*(cid:25)(cid:10)(cid:20)34,-*(cid:10)(cid:19)22-*-(cid:22).(cid:19)0(cid:10)(cid:28)(cid:22),50-(cid:19).(cid:28)(cid:21)(cid:10)/(cid:21)5(cid:22)/*(cid:20)(cid:10)(cid:22)/(cid:10)(cid:22)*+(cid:21)/(cid:10) (cid:10)(cid:26)(cid:10) /(cid:21)63(cid:21)(cid:20)*(cid:21)2(cid:10)-.1(cid:22)/,(cid:19)*-(cid:22).(cid:18)(cid:10)7+-(cid:28)+(cid:10),3(cid:20)*(cid:10)4(cid:21)(cid:10)(cid:20)7(cid:22)/.(cid:10)3.2(cid:21)/(cid:10)5(cid:21).(cid:19)0*8(cid:10)(cid:22)1(cid:10)5(cid:21)/93/8:(cid:10)(cid:19)55(cid:21)(cid:19)/(cid:10)1(cid:22)/(cid:10)2(cid:21)5(cid:22)(cid:20)-*-(cid:22).(cid:20):(cid:10) (cid:10)(cid:24)(cid:10) (cid:19).2(cid:10)5/(cid:22)23(cid:28)(cid:21)(cid:10)2(cid:22)(cid:28)3,(cid:21).*(cid:20)(cid:10)1(cid:22)/(cid:10)-.(cid:20)5(cid:21)(cid:28)*-(cid:22).(cid:10)(cid:19).2(cid:10)(cid:28)(cid:22)58-.;(cid:23)(cid:10)(cid:10)(cid:2)+(cid:21)(cid:10)(cid:17)(cid:22),,-(cid:20)(cid:20)-(cid:22).(cid:10)(cid:19).2(cid:10)(cid:4)0(cid:19)-.*-11(cid:10)(cid:19)/(cid:21)(cid:10)(cid:19)0(cid:20)(cid:22)(cid:10) (cid:10)(cid:30)(cid:10) (cid:19)3*+(cid:22)/-<(cid:21)2(cid:10)*(cid:22)(cid:10)(cid:22)4*(cid:19)-.(cid:10)2-(cid:20)(cid:28)(cid:22)(cid:29)(cid:21)/8(cid:18)(cid:10)7-*+(cid:22)3*(cid:10)13/*+(cid:21)/(cid:10)0(cid:21)(cid:19)(cid:29)(cid:21)(cid:10)(cid:22)1(cid:10)(cid:28)(cid:22)3/*(cid:18)(cid:10)3(cid:20)-.;(cid:10)(cid:19).8(cid:10)(cid:22)1(cid:10)*+(cid:21)(cid:10)5/(cid:22)(cid:28)(cid:21)23/(cid:21)(cid:20)(cid:10) (cid:10)&(cid:10) 5/(cid:21)(cid:20)(cid:28)/-4(cid:21)2(cid:10)48(cid:10)(cid:13)(cid:21)2(cid:21)/(cid:19)0(cid:10)(cid:12)30(cid:21)(cid:20)(cid:10)(cid:22)1(cid:10)(cid:17)-(cid:29)-0(cid:10)(cid:4)/(cid:22)(cid:28)(cid:21)23/(cid:21)(cid:10)(cid:26))(cid:18)(cid:10)(cid:24) (cid:10)=-.(cid:28)032-.;(cid:10)*(cid:21)0(cid:21)5+(cid:22).-(cid:28)(cid:10)2(cid:21)5(cid:22)(cid:20)-*-(cid:22).(cid:20)>(cid:18)(cid:10)(cid:24)%(cid:18)(cid:10)(cid:24)(cid:24)(cid:18)(cid:10) (cid:10)(cid:31)(cid:10) (cid:24)(cid:30)(cid:18)(cid:10)(cid:24)(cid:31)(cid:18)(cid:10)(cid:30)&(cid:18)(cid:10)(cid:19).2(cid:10)(cid:31))(cid:23)(cid:10) (cid:10)’(cid:10) ?(cid:23) (cid:13)(cid:22)/(cid:10),(cid:19)**(cid:21)/(cid:20)(cid:10)(cid:28)(cid:22).(cid:28)(cid:21)/.-.;(cid:10)*+-(cid:20)(cid:10)(cid:11)/2(cid:21)/(cid:18)(cid:10)*+(cid:21)(cid:10)(cid:17)(cid:22),,-(cid:20)(cid:20)-(cid:22).(cid:10)(cid:19).2(cid:10)(cid:4)0(cid:19)-.*-11(cid:10)(cid:19)/(cid:21)(cid:10)(cid:19)3*+(cid:22)/-<(cid:21)2(cid:10)*(cid:22) (cid:10)((cid:10) (cid:28)(cid:22),,3.-(cid:28)(cid:19)*(cid:21)(cid:10)2-/(cid:21)(cid:28)*08(cid:10)7-*+(cid:10)(cid:9)(cid:21)1(cid:21).2(cid:19).*(cid:23)(cid:10)(cid:10)(cid:9)(cid:21)1(cid:21).2(cid:19).*(cid:10),3(cid:20)*(cid:10)5(cid:21)/,-*(cid:10)/(cid:21)5/(cid:21)(cid:20)(cid:21).*(cid:19)*-(cid:29)(cid:21)(cid:20)(cid:10)(cid:22)1(cid:10)*+(cid:21)(cid:10) (cid:10))(cid:10) (cid:17)(cid:22),,-(cid:20)(cid:20)-(cid:22).(cid:10)(cid:19).2(cid:10)(cid:4)0(cid:19)-.*-11(cid:10)*(cid:22)(cid:10)-.*(cid:21)/(cid:29)-(cid:21)7(cid:10)(cid:19).8(cid:10)(cid:21),50(cid:22)8(cid:21)(cid:21)(cid:10)(cid:22)/(cid:10)(cid:22)*+(cid:21)/(cid:10)5(cid:21)/(cid:20)(cid:22).(cid:10)(cid:19)11-0-(cid:19)*(cid:21)2(cid:10)7-*+(cid:10)(cid:19).8(cid:10) (cid:10)% (cid:10) (cid:9)(cid:21)1(cid:21).2(cid:19).*(cid:10)7+(cid:22)(cid:10)+(cid:19)(cid:20)(cid:10)(cid:19);/(cid:21)(cid:21)2(cid:10)*(cid:22)(cid:10)(cid:20)3(cid:28)+(cid:10)(cid:19).(cid:10)-.*(cid:21)/(cid:29)-(cid:21)7(cid:23)(cid:10)(cid:10)(cid:2)+(cid:21)(cid:10)5(cid:21)/(cid:20)(cid:22).(cid:10)-.*(cid:21)/(cid:29)-(cid:21)7(cid:21)2(cid:10),(cid:19)8(cid:10)+(cid:19)(cid:29)(cid:21)(cid:10)(cid:28)(cid:22)3.(cid:20)(cid:21)0(cid:10) (cid:10)%%(cid:10) 5/(cid:21)(cid:20)(cid:21).*(cid:23)(cid:10)\n\n(cid:10)%(cid:26)(cid:10) (cid:17)(cid:23) (cid:2)+(cid:21)(cid:10)(cid:17)(cid:22),,-(cid:20)(cid:20)-(cid:22).(cid:10)(cid:19).2(cid:10)(cid:4)0(cid:19)-.*-11(cid:10),(cid:19)8(cid:10)3(cid:20)(cid:21)(cid:10)(cid:19)00(cid:10)(cid:22)*+(cid:21)/(cid:10)0(cid:19)7130(cid:10),(cid:21)(cid:19).(cid:20)(cid:18)(cid:10)-.(cid:28)032-.;(cid:10)5(cid:22)(cid:20)-.;(cid:18) (cid:10)%(cid:24)(cid:10) *+/(cid:22)3;+(cid:10)-*(cid:20)(cid:10)/(cid:21)5/(cid:21)(cid:20)(cid:21).*(cid:19)*-(cid:29)(cid:21)(cid:20)(cid:10)(cid:19)(cid:20)(cid:10)(cid:28)(cid:22).(cid:20)3,(cid:21)/(cid:20)(cid:18)(cid:10)(cid:20)3550-(cid:21)/(cid:20)(cid:18)(cid:10)(cid:22)/(cid:10)(cid:22)*+(cid:21)/(cid:10)-.2-(cid:29)-23(cid:19)0(cid:20)(cid:10)(cid:22)/(cid:10)(cid:21).*-*-(cid:21)(cid:20)(cid:18)(cid:10)*(cid:22)(cid:10)(cid:9)(cid:21)1(cid:21).2(cid:19).*(cid:10) (cid:10)%(cid:30)(cid:10) (cid:22)/(cid:10)(cid:19).8(cid:10)-.2-(cid:29)-23(cid:19)0(cid:10)(cid:22)/(cid:10)(cid:21).*-*8(cid:10)(cid:19)11-0-(cid:19)*(cid:21)2(cid:10)7-*+(cid:10)(cid:9)(cid:21)1(cid:21).2(cid:19).*(cid:18)(cid:10)7-*+(cid:22)3*(cid:10)*+(cid:21)(cid:10).(cid:21)(cid:28)(cid:21)(cid:20)(cid:20)-*8(cid:10)(cid:22)1(cid:10)-2(cid:21).*-1-(cid:28)(cid:19)*-(cid:22).(cid:10)(cid:22)/(cid:10) (cid:10)%&(cid:10) 5/-(cid:22)/(cid:10).(cid:22)*-(cid:28)(cid:21)(cid:23)(cid:10)(cid:10)(cid:15)(cid:22)*+-.;(cid:10)-.(cid:10)*+-(cid:20)(cid:10)(cid:11)/2(cid:21)/(cid:10)0-,-*(cid:20)(cid:10)*+(cid:21)(cid:10)(cid:17)(cid:22),,-(cid:20)(cid:20)-(cid:22).@(cid:20)(cid:10)0(cid:19)7130(cid:10)3(cid:20)(cid:21)(cid:10)(cid:22)1(cid:10)(cid:28)(cid:22),530(cid:20)(cid:22)/8(cid:10)5/(cid:22)(cid:28)(cid:21)(cid:20)(cid:20)(cid:18)(cid:10) (cid:10)%(cid:31)(cid:10) 53/(cid:20)3(cid:19).*(cid:10)*(cid:22)(cid:10)(cid:0)(cid:21)(cid:28)*-(cid:22).(cid:20)(cid:10))(cid:10)(cid:19).2(cid:10)(cid:26) (cid:10)(cid:22)1(cid:10)*+(cid:21)(cid:10)(cid:13)(cid:2)(cid:17)(cid:10)(cid:7)(cid:28)*(cid:18)(cid:10)%&(cid:10)(cid:5)(cid:23)(cid:0)(cid:23)(cid:17)(cid:23)(cid:10)AA(cid:10)(cid:30))(cid:18)(cid:10)&’4(cid:27)%(cid:23)(cid:10)",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Compliance Monitoring"
      ],
      "case_id": "02.23_goodrx_holdings",
      "company_name": "GoodRx Holdings, Inc.",
      "date_issued": "2023-02-15",
      "year": 2023,
      "administration": "Biden",
      "legal_authority": "Sections 5(a)(1), 5(m)(1)(A), 13(b), 16(a)(1), and 19 of the Federal Trade Commission Act, 15 U.S.C. §§ 45(a)(1), 45(m)(1)(A), 53(b), 56(a)(1), 57b, and the Health Breach Notification Rule, 16 C.F.R. § 318",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/2023090-goodrx-holdings-inc",
      "docket_number": "23-cv-460"
    },
    {
      "provision_number": "XIV",
      "title": "Retention of Jurisdiction",
      "category": "duration",
      "summary": "This Court retains jurisdiction over this matter for purposes of construction, modification, and enforcement of this Order.",
      "verbatim_text": "(cid:10)%’(cid:10) BCDDDE FGHGIHDJI(cid:10)JK(cid:10)LMFDNODPHDJI (cid:10)%((cid:10) (cid:3)(cid:2)(cid:10)(cid:3)(cid:0)(cid:10)(cid:13)(cid:5)(cid:12)(cid:2)$(cid:8)(cid:12)(cid:10)(cid:11)(cid:12)(cid:9)(cid:8)(cid:12)(cid:8)(cid:9)(cid:10)*+(cid:19)*(cid:10)*+-(cid:20)(cid:10)(cid:17)(cid:22)3/*(cid:10)/(cid:21)*(cid:19)-.(cid:20)(cid:10)93/-(cid:20)2-(cid:28)*-(cid:22).(cid:10)(cid:22)1(cid:10)*+-(cid:20)(cid:10),(cid:19)**(cid:21)/(cid:10)1(cid:22)/(cid:10) (cid:10)%)(cid:10) 53/5(cid:22)(cid:20)(cid:21)(cid:20)(cid:10)(cid:22)1(cid:10)(cid:28)(cid:22).(cid:20)*/3(cid:28)*-(cid:22).(cid:18)(cid:10),(cid:22)2-1-(cid:28)(cid:19)*-(cid:22).(cid:18)(cid:10)(cid:19).2(cid:10)(cid:21).1(cid:22)/(cid:28)(cid:21),(cid:21).*(cid:10)(cid:22)1(cid:10)*+-(cid:20)(cid:10)(cid:11)/2(cid:21)/(cid:23)(cid:10)",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Order Administration"
      ],
      "case_id": "02.23_goodrx_holdings",
      "company_name": "GoodRx Holdings, Inc.",
      "date_issued": "2023-02-15",
      "year": 2023,
      "administration": "Biden",
      "legal_authority": "Sections 5(a)(1), 5(m)(1)(A), 13(b), 16(a)(1), and 19 of the Federal Trade Commission Act, 15 U.S.C. §§ 45(a)(1), 45(m)(1)(A), 53(b), 56(a)(1), 57b, and the Health Breach Notification Rule, 16 C.F.R. § 318",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/2023090-goodrx-holdings-inc",
      "docket_number": "23-cv-460"
    },
    {
      "provision_number": "I",
      "title": "Prohibition Against Disclosure of Treatment Information and Covered Information for Advertising Purposes",
      "category": "prohibition",
      "summary": "Respondent is prohibited from disclosing Treatment Information or Covered Information to any Third Party for advertising, marketing, or promotional purposes targeting the consumer to whom the information pertains.",
      "verbatim_text": "IT IS ORDERED that Respondent and Respondent’s officers, agents, employees, and attorneys, and all other persons in active concert or participation with any of them, who receive actual notice of this Order, whether acting directly or indirectly, are prohibited from disclosing to a Third Party for the purposes of advertising, marketing, promoting, offering, offering for sale, or selling any product or service: (1) Treatment Information; and (2) Covered Information for the purpose of targeting the consumer to which the disclosed information pertains.",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Prohibition"
      ],
      "case_id": "05.24_betterhelp",
      "company_name": "BetterHelp, Inc.",
      "date_issued": "2024-05-15",
      "year": 2024,
      "administration": "Biden",
      "legal_authority": "Section 5 of the Federal Trade Commission Act",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/2023169-betterhelp-inc-matter",
      "docket_number": "C-4796"
    },
    {
      "provision_number": "II",
      "title": "Affirmative Express Consent",
      "category": "affirmative_obligation",
      "summary": "Within 30 days of the Order's effective date, Respondent must obtain a consumer's Affirmative Express Consent before disclosing that consumer's Covered Information to any Third Party.",
      "verbatim_text": "IT IS FURTHER ORDERED that, within 30 days of the effective date of this Order, Respondent and Respondent’s officers, agents, employees, and attorneys, and all other persons in active concert or participation with any of them, who receive actual notice of this Order, in connection with any product or service, prior to disclosing any consumer’s Covered Information to any Third Party, must obtain the relevant consumer’s Affirmative Express Consent.",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Consumer Notification"
      ],
      "case_id": "05.24_betterhelp",
      "company_name": "BetterHelp, Inc.",
      "date_issued": "2024-05-15",
      "year": 2024,
      "administration": "Biden",
      "legal_authority": "Section 5 of the Federal Trade Commission Act",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/2023169-betterhelp-inc-matter",
      "docket_number": "C-4796"
    },
    {
      "provision_number": "III",
      "title": "Prohibition Against Misrepresentations About Privacy of Covered Information",
      "category": "prohibition",
      "summary": "Respondent must not misrepresent in any manner, expressly or by implication, how it collects, uses, shares, or protects Covered Information, including claims about privacy controls, HIPAA compliance, or membership in privacy programs.",
      "verbatim_text": "A. the extent to which Respondent collects, maintains, uses, discloses, Deletes, or permits or denies access to any Covered Information, or the extent to which Respondent protects the privacy, security, availability, confidentiality, or integrity of any Covered Information;\n\nB. the purpose(s) for which Respondent, or any entity to whom Respondent discloses or permits access to Covered Information, collects, maintains, uses, discloses, or permits access to any Covered Information;\n\nC. the extent to which a consumer can maintain privacy and anonymity when visiting or using any online properties, services, or mobile applications associated with Respondent;\n\nD. the extent to which consumers may exercise control over Respondent’s collection of, maintenance of, use of, Deletion of, disclosure of, or permission of access to, Covered Information, and the steps a consumer must take to implement such controls; and\n\nE. the extent to which Respondent is a member of, adheres to, complies with, is certified by, is endorsed by, or otherwise participates in any privacy, security or any other compliance program sponsored by a government or any self-regulatory or standard-setting organization, including the Digital Advertising Alliance, the Digital Advertising Accountability Program, or any entity that certifies compliance with HIPAA; and\n\nF. the extent to which Respondent is a HIPAA-covered entity, and the extent that Respondent’s privacy and information practices are in compliance with HIPAA requirements.",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Prohibition"
      ],
      "case_id": "05.24_betterhelp",
      "company_name": "BetterHelp, Inc.",
      "date_issued": "2024-05-15",
      "year": 2024,
      "administration": "Biden",
      "legal_authority": "Section 5 of the Federal Trade Commission Act",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/2023169-betterhelp-inc-matter",
      "docket_number": "C-4796"
    },
    {
      "provision_number": "IV",
      "title": "Data Deletion",
      "category": "affirmative_obligation",
      "summary": "Respondent must identify all Third Parties that received Covered Information without consumer consent, notify and instruct those Third Parties to delete such information, and cease disclosing information to or using those Third Parties for advertising until deletion is confirmed.",
      "verbatim_text": "A. within 60 days after the effective date of this Order: 1. identify all Third Parties that accessed, received, or acquired Covered Information from Respondent in any form, including hashed or encrypted Covered Information, without a consumer’s Affirmative Express Consent;\n\n2. identify what Covered Information was disclosed to each Third Party identified in sub-Provision IV.A.1; and\n\n3. submit a list of the information identified in sub-Provisions IV.A.1-2 and the methodologies used to identify the information in sub-Provisions IV.A.1-2 to: DEbrief@ftc.gov or sent by overnight courier (not the U.S. Postal Service) to: Associate Director for Enforcement, Bureau of Consumer Protection, Federal Trade Commission, 600 Pennsylvania Avenue NW, Washington, DC 20580. The subject line must begin: “In re BetterHelp, Inc., [X-number].”\n\nB. within 90 days after the effective date of this Order, provide a copy of the Complaint and Order to all Third Parties identified in sub-Provision IV.A.1, notify all such Third Parties in writing that the Federal Trade Commission alleges that Respondent disclosed Covered Information of consumers to them in a manner that was unfair or deceptive and in violation of the FTC Act, and instruct those Third Parties to Delete all Covered Information accessed, received, or acquired from Respondent without a consumer’s Affirmative Express Consent. Respondent’s instruction to each such Third Party shall include a list of the Covered Information identified in sub-Provision IV.A.2 and shall demand written confirmation from each such Third Party that it has Deleted such Covered Information. Respondent must provide all instructions sent to the Third Parties to: DEbrief@ftc.gov or sent by overnight courier (not the U.S. Postal Service) to: Associate Director for Enforcement, Bureau of Consumer Protection, Federal Trade Commission, 600 Pennsylvania Avenue NW, Washington, DC 20580. The subject line must begin: “In re BetterHelp, Inc., [X-number]”\n\nC. as of the issuance of this Order: 1. Respondent shall not disclose any Covered Information in any form, including hashed or encrypted Covered Information, to any Third Party identified in sub-Provision IV.A.1 until Respondent confirms each Third Party’s receipt of the instructions required by sub-Provision IV.B. This sub-Provision is subject to the prohibitions set forth in Provision I. Respondent must provide all receipts of confirmation and any responses from Third Parties within five (5) days of receipt to: DEbrief@ftc.gov or sent by overnight courier (not the U.S. Postal Service) to: Associate Director for Enforcement, Bureau of Consumer Protection, Federal Trade Commission, 600 Pennsylvania Avenue NW, Washington, DC 20580. The subject line must begin: “In re BetterHelp, Inc., [X-number].”\n\n2. Respondent shall not use any Third Party identified in sub-Provision IV.A.1 to advertise, market, promote, offer, offer for sale, or sell any product or service until Respondent confirms each Third Party’s receipt of the instructions required by sub- Provision IV.B.",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Data Deletion"
      ],
      "case_id": "05.24_betterhelp",
      "company_name": "BetterHelp, Inc.",
      "date_issued": "2024-05-15",
      "year": 2024,
      "administration": "Biden",
      "legal_authority": "Section 5 of the Federal Trade Commission Act",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/2023169-betterhelp-inc-matter",
      "docket_number": "C-4796"
    },
    {
      "provision_number": "V",
      "title": "Notice to Users",
      "category": "affirmative_obligation",
      "summary": "Within 14 days of the Order's effective date, Respondent must email all Covered Users an exact copy of the attached Exhibit A notice, with no additional materials included.",
      "verbatim_text": "IT IS FURTHER ORDERED that, on or before 14 days after the effective date of this Order, Respondent must email all Covered Users, using the last known verified email address in Respondent’s possession, custody, or control, an exact copy of the notice attached hereto as Exhibit A (“Notice”), provided however, that if Respondent does not have email information for any Covered User, Respondent must send the Notice to that Covered User through Respondent’s primary means of communicating with that user. Respondent shall not include with the Notice any other information, documents, or attachments.",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Consumer Notification"
      ],
      "case_id": "05.24_betterhelp",
      "company_name": "BetterHelp, Inc.",
      "date_issued": "2024-05-15",
      "year": 2024,
      "administration": "Biden",
      "legal_authority": "Section 5 of the Federal Trade Commission Act",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/2023169-betterhelp-inc-matter",
      "docket_number": "C-4796"
    },
    {
      "provision_number": "VI",
      "title": "Mandated Privacy Program",
      "category": "affirmative_obligation",
      "summary": "Within 60 days of the Order's effective date, each Covered Business must establish, implement, and maintain a comprehensive privacy program protecting the privacy, security, availability, confidentiality, and integrity of Covered Information, with specific written, operational, and technical requirements.",
      "verbatim_text": "IT IS FURTHER ORDERED that any Covered Business, in connection with the collection, maintenance, use, or disclosure of, or provision of access to, Covered Information, must, within 60 days of the effective date of this Order, establish and implement, and thereafter maintain, a comprehensive privacy program (“Privacy Program”) that protects the privacy, security, availability, confidentiality, and integrity of such Covered Information. To satisfy this requirement, Respondent must, for each Covered Business, at a minimum: A. document in writing the content, implementation, and maintenance of the Privacy Program;\n\nB. provide the written program and any evaluations thereof or updates thereto to the Covered Business’s board of directors or governing body or, if no such board or equivalent governing body exists, to a senior officer of the Covered Business responsible for the Covered Business’s Privacy Program at least once every 12 months and promptly (not to exceed 30 days) after a Covered Incident;\n\nC. designate a qualified employee or employees, who report(s) directly to an executive, such as the Chief Executive Officer, Chief Compliance Officer, or Chief Legal Officer, to coordinate and be responsible for the Privacy Program; and keep the executive and the Board of Directors informed of the Privacy Program, including all actions and procedures implemented to comply with the requirements of this Order, and any actions and procedures to be implemented to ensure continued compliance with this Order;\n\nD. assess and document, at least once every 12 months and promptly (not to exceed 30 days) following a Covered Incident, internal and external risks in each area of the Covered Business’s operations to the privacy, security, availability, confidentiality, and integrity of Covered Information that could result in the unauthorized access, collection, use, destruction, or disclosure of, or provision of access to, Covered Information;\n\nE. design, implement, maintain, and document safeguards that control for the internal and external risks to the privacy, security, availability, confidentiality, and integrity of Covered Information identified by the Covered Business in response to sub-Provision VI.D. Each safeguard must be based on the volume and sensitivity of the Covered Information that is at risk, and the likelihood that the risk could be realized and result in the unauthorized access, collection, use, Deletion, disclosure of, or provision of access to, the Covered Information. Such safeguards must also include: 1. policies, procedures, and technical measures to systematically inventory Covered Information in the Covered Business’s control and Delete Covered Information that is no longer reasonably necessary and in accordance with applicable retention laws and regulations; 2. policies, procedures, and technical measures to prevent the collection, maintenance, use, or disclosure of, or provision of access to, Covered Information inconsistent with the Covered Business’s representations to consumers; 3. audits, assessments, and reviews of the contracts, privacy policies, and terms of service associated with any Third Party to which the Covered Business discloses, or provides access to, Covered Information; 4. policies and technical measures that limit employee and contractor access to Covered Information to only those employees and contractors with a legitimate business need to access such Covered Information; 5. mandatory privacy training programs for all employees on at least an annual basis, updated to address the collection, use, and disclosure of Covered Information for advertising purposes; any internal or external risks identified by Respondent in sub- Provision VI.D; and safeguards implemented pursuant to sub-Provision VI.E, that include training on the requirements of this Order; 6. a data retention policy that, at a minimum, includes: a. a retention schedule that limits the retention of Covered Information for only as long as is necessary to fulfill the purpose for which the Covered Information was collected; provided, however, that such Covered Information need not be Deleted, and may be disclosed, to the extent requested by a government agency or required by law, regulation, or court order; and b. a requirement that Respondent documents, adheres to, and makes publicly available on its terms of service/use a retention schedule for Covered Information, setting forth: (1) the purposes for which the Covered Information is collected; (2) the specific business need for retaining each type of Covered Information; and (3) a set timeframe in accordance with applicable laws and regulations for Deletion of each type of Covered Information (absent any intervening Deletion requests from consumers) that precludes indefinite retention of any Covered Information; 10 7. for each product or service, policies and procedures to document internally the decision to collect, use, Delete, disclose, or provide access to, each type of Covered Information. Such documentation should include: (a) the name(s) of the person(s) who made the decision; (b) for what purpose the type of Covered Information is being collected; (c) the data segmentation controls in place to ensure that the Covered Information collected is only used and/or disclosed for the particular purpose(s) for which it was collected; (d) the data retention limit set and the technical means for achieving Deletion; (e) the safeguards in place to prevent unauthorized disclosure of each type of Covered Information; and (f) the access controls in place to ensure only authorized employees with a need-to-know have access to the Covered Information; 8. audits, assessments, reviews, or testing of each mechanism by which the Covered Business discloses Covered Information to a Third Party or provides a Third Party with access to Covered Information (including but not limited to web beacons, pixels, and Software Development Kits); and 9. for each product or service offered by any Covered Business, Clearly and Conspicuously disclose the categories of Covered Information collected from consumers, the purposes for the collection of each category of Covered Information, and any transfer of Covered Information to a Third Party. For each such transfer of Covered Information, the disclosure must, at a minimum, include: (a) the specific categories of Covered Information transferred; (b) the identity of each Third Party receiving the transfer; (c) the purposes for which the Covered Business transferred the Covered Information; (d) the purposes for which each Third Party receiving the Covered Information may use the Covered Information, including but not limited to the purposes for the Third Party reserves the right to use such Covered Information; and (e) whether each Third Party receiving the transfer of Covered Information reserves the right to transfer the Covered Information to other entities or individuals.\n\nF. assess, at least once every 12 months, and promptly (not to exceed 30 days) following a Covered Incident, the sufficiency of any safeguards in place to address the internal and external risks to the privacy, security, availability, confidentiality, and integrity of Covered Information, and modify the Privacy Program based on the results;\n\nG. test and monitor the effectiveness of the safeguards at least once every 12 months, and promptly (not to exceed 30 days) following a Covered Incident, and modify the Privacy Policy based on the results;\n\nH. select and retain service providers capable of safeguarding Covered Information they receive from the Covered Business, and contractually require service providers to implement and maintain safeguards for Covered Information; and\n\nI. evaluate and adjust the Privacy Program in light of any material changes to the Covered Business’s operations or business arrangements, the results of the testing and monitoring required by sub-Provision VI.G, a Covered Incident, and any other circumstances that the 11 Covered Business knows or has reason to believe may have a material impact on the effectiveness of the Privacy Program or any of its individual safeguards (including but not limited to new or more efficient technological or operational methods to control for the risks identified in sub-Provision VI.D). The Covered Business may make this evaluation and adjustment to the Privacy Program at any time, but must, at a minimum, evaluate the Privacy Program at least once every 12 months and modify the Privacy Program as necessary based on the results.",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Comprehensive Security Program"
      ],
      "case_id": "05.24_betterhelp",
      "company_name": "BetterHelp, Inc.",
      "date_issued": "2024-05-15",
      "year": 2024,
      "administration": "Biden",
      "legal_authority": "Section 5 of the Federal Trade Commission Act",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/2023169-betterhelp-inc-matter",
      "docket_number": "C-4796"
    },
    {
      "provision_number": "VII",
      "title": "Privacy Assessments by a Third-Party Assessor",
      "category": "assessment",
      "summary": "Respondent must obtain initial and biennial independent third-party privacy assessments covering the Privacy Program required by Provision VI, with the initial assessment covering the first 240 days and subsequent assessments covering each 2-year period for 20 years.",
      "verbatim_text": "A. The Assessments must be obtained from a qualified, objective, independent third-party professional (“Assessor”), who: (1) uses procedures and standards generally accepted in the profession; (2) conducts an independent review of the Privacy Program; (3) retains all documents relevant to each Assessment for 5 years after completion of such Assessment; and (4) will provide such documents to the Commission within 10 days of receipt of a written request from a representative of the Commission. No documents may be withheld on the basis of a claim of confidentiality, proprietary or trade secrets, work product protection, attorney-client privilege, statutory exemption, or any similar claim. The Assessor must have a minimum of 3 years of experience in the field of privacy and data protection.\n\nB. For each Assessment, Respondent must provide the Associate Director for Enforcement for the Bureau of Consumer Protection at the Federal Trade Commission with the name, affiliation, and qualifications of the proposed Assessor, whom the Associate Director shall have the authority to approve in his or her sole discretion.\n\nC. The reporting period for the Assessments must cover: (1) the first 240 days after the issuance date of the Order for the initial Assessment; and (2) each 2-year period thereafter for 20 years after the issuance date of the Order for the biennial Assessments.\n\nD. Each Assessment must, for the entire assessment period: 1. determine whether Respondent has implemented and maintained the Privacy Program required by Provision VI; 2. assess the effectiveness of Respondent’s implementation and maintenance of sub- Provisions VI.A-I; 3. identify any gaps or weaknesses in the Privacy Program, or instances of material noncompliance with, sub-Provisions VI.A-I; 12 4. address the status of gaps or weaknesses in the Privacy Program, as well as any instances of material non-compliance with sub-Provisions VI.A-I, that were identified in any prior Assessment required by this Order; and 5. identify specific evidence (including, but not limited to, documents reviewed, sampling and testing performed, and interviews conducted) examined to make such determinations, assessments, and identifications, and explain why the evidence that the Assessor examined is (a) appropriate for assessing an enterprise of Respondent’s size, complexity, and risk profile; and (b) sufficient to justify the Assessor’s findings. No finding of any Assessment shall rely solely on assertions or attestations by Respondent, Respondent’s management, or a Covered Business’s management. The Assessment must be signed by the Assessor, state that the Assessor conducted an independent review of the Privacy Program and did not rely solely on assertions or attestations by Respondent, Respondent’s management, or a Covered Business’s management, and state the number of hours that each member of the Assessor’s assessment team worked on the Assessment. To the extent a Covered Business revises, updates, or adds one or more safeguards required under sub-Provision VI.E in the middle of an Assessment period, the Assessment must assess the effectiveness of the revised, updated, or added safeguard(s) for the time period in which it was in effect, and provide a separate statement detailing the basis for each revised, updated, or additional safeguard.\n\nE. Each Assessment must be completed within 60 days after the end of the reporting period to which the Assessment applies. Unless otherwise directed by a Commission representative in writing, Respondent must submit the initial Assessment to the Commission within 10 days after the Assessment has been completed via email to DEbrief@ftc.gov or by overnight courier (not the U.S. Postal Service) to: Associate Director for Enforcement, Bureau of Consumer Protection, Federal Trade Commission, 600 Pennsylvania Avenue NW, Washington, DC 20580. The subject line must begin, “In re BetterHelp, Inc., [X-number].” All subsequent biennial Assessments must be retained by Respondent until the Order is terminated and provided to the Associate Director for Enforcement within 10 days of request.",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Third-Party Assessment"
      ],
      "case_id": "05.24_betterhelp",
      "company_name": "BetterHelp, Inc.",
      "date_issued": "2024-05-15",
      "year": 2024,
      "administration": "Biden",
      "legal_authority": "Section 5 of the Federal Trade Commission Act",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/2023169-betterhelp-inc-matter",
      "docket_number": "C-4796"
    },
    {
      "provision_number": "VIII",
      "title": "Cooperation with Assessor",
      "category": "affirmative_obligation",
      "summary": "Respondent must fully cooperate with the third-party Assessor by providing all relevant information, disclosing all material facts, and not misrepresenting any fact material to the Assessment.",
      "verbatim_text": "A. provide or otherwise make available to the Assessor all information and material in its possession, custody, or control that is relevant to the Assessment for which there is no reasonable claim of privilege;\n\nB. provide or otherwise make available to the Assessor information about all Covered Information in Respondent’s custody or control so that the Assessor can determine the scope of the Assessment; and\n\nC. disclose all material facts to the Assessor, and not misrepresent in any manner, expressly or by implication, any fact material to the Assessor’s: (1) determination of whether Respondent has implemented and maintained the Privacy Program required by Provision VI; (2) assessment of the effectiveness of the implementation and maintenance of sub- Provisions VI.A-I; or (3) identification of any gaps or weaknesses in, or instances of material noncompliance with, the Privacy Program required by Provision VI.",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Third-Party Assessment"
      ],
      "case_id": "05.24_betterhelp",
      "company_name": "BetterHelp, Inc.",
      "date_issued": "2024-05-15",
      "year": 2024,
      "administration": "Biden",
      "legal_authority": "Section 5 of the Federal Trade Commission Act",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/2023169-betterhelp-inc-matter",
      "docket_number": "C-4796"
    },
    {
      "provision_number": "IX",
      "title": "Annual Certification",
      "category": "compliance_reporting",
      "summary": "Respondent must submit annual certifications from a senior corporate manager to the FTC for 10 years confirming compliance with the Order, identifying any material noncompliance, and describing any Covered Incidents.",
      "verbatim_text": "A. one year after the issuance date of this Order, and each year thereafter for 10 years, provide the Commission with a certification from a senior corporate manager, or, if no such senior corporate manager exists, a senior officer of each Covered Business that: (1) the Covered Business has established, implemented, and maintained the requirements of this Order; (2) the Covered Business is not aware of any material noncompliance that has not been (a) corrected or (b) disclosed to the Commission; and (3) includes a brief description of any Covered Incident. The certification must be based on the personal knowledge of the senior corporate manager, senior officer, or subject matter experts upon whom the senior corporate manager or senior officer reasonably relies in making the certification.\n\nB. unless otherwise directed by a Commission representative in writing, submit all annual certifications to the Commission pursuant to this Order via email to DEbrief@ftc.gov or by overnight courier (not the U.S. Postal Service) to: Associate Director for Enforcement, Bureau of Consumer Protection, Federal Trade Commission, 600 Pennsylvania Avenue NW, Washington, DC 20580. The subject line must begin, “In re BetterHelp, Inc., [X- number].”",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Compliance Monitoring"
      ],
      "case_id": "05.24_betterhelp",
      "company_name": "BetterHelp, Inc.",
      "date_issued": "2024-05-15",
      "year": 2024,
      "administration": "Biden",
      "legal_authority": "Section 5 of the Federal Trade Commission Act",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/2023169-betterhelp-inc-matter",
      "docket_number": "C-4796"
    },
    {
      "provision_number": "X",
      "title": "Covered Incident Reports",
      "category": "compliance_reporting",
      "summary": "Within 30 days of discovering a Covered Incident, Respondent must submit a detailed report to the FTC including the incident's date, description, number of affected consumers, remediation steps taken, and copies of any consumer or government notices.",
      "verbatim_text": "IT IS FURTHER ORDERED that Respondent, within 30 days after Respondent’s discovery of a Covered Incident, must submit a report to the Commission. The report must include, to the extent possible: A. the date, estimated date, or estimated date range when the Covered Incident occurred; B. a description of the facts relating to the Covered Incident, including the causes and scope of the Covered Incident, if known; C. the number of consumers whose information was affected; D. the acts that Respondent has taken to date to remediate the Covered Incident; protect Covered Information from further disclosure, exposure, or access; and protect affected individuals from identity theft or other harm that may result from the Covered Incident; and 14 E. a representative copy of any materially different notice sent by Respondent to consumers or to any U.S. federal, state, or local government entity.\n\nUnless otherwise directed by a Commission representative in writing, all Covered Incident reports to the Commission pursuant to this Order must be emailed to DEbrief@ftc.gov or sent by overnight courier (not the U.S. Postal Service) to: Associate Director for Enforcement, Bureau of Consumer Protection, Federal Trade Commission, 600 Pennsylvania Avenue NW, Washington, DC 20580. The subject line must begin: “In re BetterHelp, Inc., [X-number].”",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Compliance Monitoring"
      ],
      "case_id": "05.24_betterhelp",
      "company_name": "BetterHelp, Inc.",
      "date_issued": "2024-05-15",
      "year": 2024,
      "administration": "Biden",
      "legal_authority": "Section 5 of the Federal Trade Commission Act",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/2023169-betterhelp-inc-matter",
      "docket_number": "C-4796"
    },
    {
      "provision_number": "XI",
      "title": "Monetary Relief",
      "category": "affirmative_obligation",
      "summary": "Respondent must pay $7,800,000 to the FTC within 8 days of the Order's effective date by electronic fund transfer.",
      "verbatim_text": "A. Respondent must pay to the Commission $7,800,000, which Respondent stipulates its undersigned counsel holds in escrow for no purpose other than payment to the Commission.\n\nB. Such payment must be made within 8 days of the effective date of this Order by electronic fund transfer in accordance with instructions provided by a representative of the Commission.",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Monetary Penalty"
      ],
      "case_id": "05.24_betterhelp",
      "company_name": "BetterHelp, Inc.",
      "date_issued": "2024-05-15",
      "year": 2024,
      "administration": "Biden",
      "legal_authority": "Section 5 of the Federal Trade Commission Act",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/2023169-betterhelp-inc-matter",
      "docket_number": "C-4796"
    },
    {
      "provision_number": "XII",
      "title": "Additional Monetary Provisions",
      "category": "affirmative_obligation",
      "summary": "Respondent relinquishes all rights to transferred assets, acknowledges that complaint facts may be used in future litigation, and agrees that FTC-administered funds may be used for consumer redress or other related relief.",
      "verbatim_text": "A. Respondent relinquishes dominion and all legal and equitable right, title, and interest in all assets transferred pursuant to this Order and may not seek the return of any assets.\n\nB. The facts alleged in the Complaint will be taken as true, without further proof, in any subsequent civil litigation by or on behalf of the Commission to enforce its rights to any payment pursuant to this Order, such as a nondischargeability complaint in any bankruptcy case.\n\nC. The facts alleged in the Complaint establish all elements necessary to sustain an action by or on behalf of the Commission pursuant to Section 523(a)(2)(A) of the Bankruptcy Code, 11 U.S.C. § 523(a)(2)(A), and this Order will have collateral estoppel effect for such purposes.\n\nD. All money paid to the Commission pursuant to this Order may be deposited into a fund administered by the Commission or its designee to be used for relief, including consumer redress and any attendant expenses for the administration of any redress fund. If a representative of the Commission decides that direct redress to consumers is wholly or partially impracticable or money remains after redress is completed, the Commission may apply any remaining money for such other relief (including consumer information remedies) as it determines to be reasonably related to Respondent’s practices alleged in 15 the Complaint. Any money not used is to be deposited to the U.S. Treasury. Respondent has no right to challenge any activities pursuant to this Provision.\n\nE. All decisions regarding the administration and amount of redress provided shall be made by the Commission in its sole discretion; however, the names and identifying information of all consumers who receive redress shall be provided solely to the Redress Administrator pursuant to Provision XIII.\n\nF. In the event of default on any obligation to make payment under this Order, interest, computed as if pursuant to 28 U.S.C. § 1961(a), shall accrue from the date of default to the date of payment. In the event such default continues for 10 days beyond the date that payment is due, the entire amount will immediately become due and payable.\n\nG. Each day of nonpayment is a violation through continuing failure to obey or neglect to obey a final order of the Commission and thus will be deemed a separate offense and violation for which a civil penalty shall accrue.\n\nH. Respondent acknowledges that its Taxpayer Identification Numbers (Social Security or Employer Identification Numbers), which Respondent has previously submitted to the Commission, may be used for collecting and reporting on any delinquent amount arising out of this Order, in accordance with 31 U.S.C. § 7701.",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Monetary Penalty"
      ],
      "case_id": "05.24_betterhelp",
      "company_name": "BetterHelp, Inc.",
      "date_issued": "2024-05-15",
      "year": 2024,
      "administration": "Biden",
      "legal_authority": "Section 5 of the Federal Trade Commission Act",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/2023169-betterhelp-inc-matter",
      "docket_number": "C-4796"
    },
    {
      "provision_number": "XIII",
      "title": "Independent Redress Administrator",
      "category": "affirmative_obligation",
      "summary": "An independent third-party Redress Administrator, selected by Commission staff, shall be appointed to administer consumer redress; Respondent must cooperate fully and is responsible for all associated costs.",
      "verbatim_text": "A. Commission staff, in their sole discretion, shall select the Administrator, who shall be an independent third party, not an employee of the Commission or Respondent.\n\nB. Within 7 days of entry of this Order, Respondent must provide the Administrator with all information necessary to identify all Customers and all information necessary for the efficient administration of consumer redress to those Customers. Respondent stipulates it has provided such information to its undersigned counsel. If a representative of the Commission or the Administrator requests any additional information related to consumer redress, Respondent must provide it, in the form prescribed by the Commission or the Administrator, within 14 days of the request, provided that, any request for personally identifying Customer information shall be directed solely to the Administrator.\n\nC. The Administrator shall be responsible for reviewing, assessing, and evaluating the Customer information for consumer redress, and for ensuring the efficient administration of consumer redress as follows: 1. The Administrator shall receive, review, and assess the Customer information provided by Respondent to ensure it is sufficient for the efficient administration of 16 consumer redress as determined by the Commission. If a representative of the Commission requests any additional information related to redress, the Administrator must provide it, in the form prescribed by the Commission, within 14 days, provided however, that the Administrator may not share personally identifying Customer information with the Commission. 2. Within 45 days of entry of this Order, the Administrator shall confirm in writing that it has a complete list of Customers, or that the Administrator does not and why not. 3. The Administrator is responsible for conducting supplemental address searches or other inquiries related to consumer redress if the Commission or the Administrator determines it necessary or advisable. 4. The Administrator is authorized to choose, engage, and employ service providers as the Administrator deems advisable or necessary in the performance of the Administrator’s duties and responsibilities under the authority granted by this Order. The Administrator may only employ service providers capable of safeguarding Customer information they receive from the Administrator, and the Administrator must contractually require service providers to implement and maintain safeguards for such Customer information. 5. The Administrator shall administer consumer redress as specified by the Commission. The Administrator must follow all instructions dictated by the Commission for the efficient administration of consumer redress, including but not limited to instructions pertaining to consumer communications and redress process and distributions. 6. The Administrator must cooperate with the Commission to request the transfer of funds necessary for consumer redress distribution. 7. No later than three months after the date on which the Administrator is retained, and every three months thereafter until such time the Commission determines the administration of consumer redress has concluded, the Administrator shall submit a report to the Commission concerning the status of consumer redress and detailing the progress of the administration of consumer redress, including but not limited to the amounts of funds distributed for redress payment, the consumer participation rate, the length of time for consumers to receive redress payment, and any complaints received regarding consumer redress.\n\nD. Respondent shall fully cooperate with and assist the Administrator. That cooperation and assistance shall include, but not be limited to, providing information to the Administrator as the Administrator deems necessary to be fully informed and discharge the responsibilities of the Administrator under this Order. For matters concerning this Order, the Administrator is authorized to communicate directly with Respondent.\n\nE. Respondent is responsible for all costs and fees invoiced by the Administrator for its services, and the provision of consumer redress. The FTC is not responsible for any such costs or fees. None of the funds used to satisfy Provision XI of this Order shall be used to pay for the Administrator or any of its associated costs or fees.",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Consumer Redress"
      ],
      "case_id": "05.24_betterhelp",
      "company_name": "BetterHelp, Inc.",
      "date_issued": "2024-05-15",
      "year": 2024,
      "administration": "Biden",
      "legal_authority": "Section 5 of the Federal Trade Commission Act",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/2023169-betterhelp-inc-matter",
      "docket_number": "C-4796"
    },
    {
      "provision_number": "XIV",
      "title": "Acknowledgments of the Order",
      "category": "acknowledgment",
      "summary": "Respondent must submit a sworn acknowledgment of receipt of the Order to the FTC within 10 days, deliver copies to all key personnel and future personnel, and obtain signed acknowledgments from each recipient within 30 days.",
      "verbatim_text": "A. Respondent, within 10 days after the effective date of this Order, must submit to the Commission an acknowledgment of receipt of this Order sworn under penalty of perjury.\n\nB. For 10 years after the issuance date of this Order, Respondent must deliver a copy of this Order to: (1) all principals, officers, directors, and LLC managers and members; (2) all employees having managerial responsibilities for conduct related to the subject matter of the Order and all agents and representatives who participate in conduct related to the subject matter of the Order; and (3) any business entity resulting from any change in structure as set forth in Provision XV. Delivery must occur within 10 days after the effective date of this Order for current personnel. For all others, delivery must occur before they assume their responsibilities.\n\nC. From each individual or entity to which Respondent delivered a copy of this Order, that Respondent must obtain, within 30 days, a signed and dated acknowledgment of receipt of this Order.",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Order Administration"
      ],
      "case_id": "05.24_betterhelp",
      "company_name": "BetterHelp, Inc.",
      "date_issued": "2024-05-15",
      "year": 2024,
      "administration": "Biden",
      "legal_authority": "Section 5 of the Federal Trade Commission Act",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/2023169-betterhelp-inc-matter",
      "docket_number": "C-4796"
    },
    {
      "provision_number": "XV",
      "title": "Compliance Reports and Notices",
      "category": "compliance_reporting",
      "summary": "Respondent must submit sworn compliance reports to the FTC 180 days after the effective date and annually for five more years, and must promptly notify the FTC of changes to contact information, business structure, or bankruptcy filings.",
      "verbatim_text": "A. One hundred and eighty days after the effective date of this Order, and annually thereafter for five more years, Respondent must submit a compliance report, sworn under penalty of perjury, in which Respondent must: (a) identify the primary physical, postal, and email address and telephone number, as designated points of contact, which representatives of the Commission, may use to communicate with Respondent; (b) identify all of that Respondent’s businesses by all of their names, telephone numbers, and physical, postal, email, and Internet addresses; (c) describe the activities of each business, including the services offered, the means of advertising and marketing, what Covered Information it collects, how Covered Information is used and disclosed to Third Parties; (d) describe in detail whether and how Respondent is in compliance with each Provision of this Order, including a discussion of all of the changes Respondent made to comply with the Order; and (e) provide a copy of each Acknowledgment of the Order obtained pursuant to this Order, unless previously submitted to the Commission.\n\nB. Respondent must submit a compliance notice, sworn under penalty of perjury, within 14 days of any change in: (a) any designated point of contact; or (b) the structure of any Covered Business, including: creation, merger, sale, or dissolution of the entity or any subsidiary, parent, or affiliate that engages in any acts or practices subject to this Order.\n\nC. Respondent must submit notice of the filing of any bankruptcy petition, insolvency proceeding, or similar proceeding by or against such Respondent within 14 days of its filing.\n\nD. Any submission to the Commission required by this Order to be sworn under penalty of perjury must be true and accurate and comply with 28 U.S.C. § 1746, such as by concluding: “I declare under penalty of perjury under the laws of the United States of America that the foregoing is true and correct. Executed on: _____” and supplying the date, signatory’s full name, title (if applicable), and signature.\n\nE. Unless otherwise directed by a Commission representative in writing, all submissions to the Commission pursuant to this Order must be emailed to DEbrief@ftc.gov or sent by overnight courier (not the U.S. Postal Service) to: Associate Director for Enforcement, Bureau of Consumer Protection, Federal Trade Commission, 600 Pennsylvania Avenue NW, Washington, DC 20580. The subject line must begin: “In re BetterHelp, Inc., [X- number].”",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Compliance Monitoring"
      ],
      "case_id": "05.24_betterhelp",
      "company_name": "BetterHelp, Inc.",
      "date_issued": "2024-05-15",
      "year": 2024,
      "administration": "Biden",
      "legal_authority": "Section 5 of the Federal Trade Commission Act",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/2023169-betterhelp-inc-matter",
      "docket_number": "C-4796"
    },
    {
      "provision_number": "XVI",
      "title": "Recordkeeping",
      "category": "recordkeeping",
      "summary": "Respondent must create and retain specified records for 20 years after the Order's issuance date, with each record retained for at least 5 years, including accounting records, personnel records, consumer complaints, disclosure records, marketing materials, privacy representations, assessment materials, law enforcement communications, and compliance records.",
      "verbatim_text": "A. accounting records showing the revenues from all products or services sold, the costs incurred in generating those revenues, and resulting net profit or loss;\n\nB. personnel records showing, for each person providing services in relation to any aspect of the Order, whether as an employee or otherwise, that person’s: name; addresses; telephone numbers; job title or position; dates of service; and (if applicable) the reason for termination;\n\nC. copies or records of all consumer complaints and refund requests concerning the collection, use, maintenance, disclosure, deletion, or permission of access to Covered Information, whether received directly or indirectly, such as through a Third Party, and any response;\n\nD. records of all disclosures of consumers’ Covered Information to Third Parties showing, for each Third Party that received Covered Information, the name and address of the Third Party, the date(s) of such disclosures, the purpose(s) for which the Covered 19 Information was transferred, and how and when Respondent obtained consumers’ Affirmative Express Consent for the disclosures in accordance with Provision II;\n\nE. a copy of each unique advertisement or other marketing material making a representation subject to this Order;\n\nF. a copy of each widely disseminated representation by Respondent that describes the extent to which Respondent maintains or protects the privacy, security, availability, confidentiality, or integrity of any Covered Information, including any representation concerning a change in any website or other service controlled by Respondent that relates to the privacy, security, availability, confidentiality, or integrity of Covered Information;\n\nG. for 5 years after the date of preparation of each Assessment required by Provision VII, all materials relied upon to prepare the Assessment, whether prepared by or on behalf of Respondent, including all plans, reports, studies, reviews, audits, audit trails, policies, training materials, and assessments, and any other materials concerning Respondent’s compliance with related Provisions of this Order, for the compliance period covered by such Assessment;\n\nH. for 5 years from the date received, copies of all subpoenas and other communications with law enforcement, if such communication relate to Respondent’s compliance with this Order;\n\nI. for 5 years from the date created or received, all records, whether prepared by or on behalf of Respondent, that tend to show any lack of compliance by Respondent with this Order; and\n\nJ. all records necessary to demonstrate full compliance with each Provision of this Order, including all submissions to the Commission.",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Recordkeeping"
      ],
      "case_id": "05.24_betterhelp",
      "company_name": "BetterHelp, Inc.",
      "date_issued": "2024-05-15",
      "year": 2024,
      "administration": "Biden",
      "legal_authority": "Section 5 of the Federal Trade Commission Act",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/2023169-betterhelp-inc-matter",
      "docket_number": "C-4796"
    },
    {
      "provision_number": "XVII",
      "title": "Compliance Monitoring",
      "category": "monitoring",
      "summary": "The FTC is authorized to monitor Respondent's compliance through written requests for information and records, direct communications and interviews with Respondent's affiliates, and other lawful investigative means including undercover operations.",
      "verbatim_text": "A. Within 10 days of receipt of a written request from a representative of the Commission, Respondent must: submit additional compliance reports or other requested information, which must be sworn under penalty of perjury, and produce records for inspection and copying.\n\nB. For matters concerning this Order, representatives of the Commission are authorized to communicate directly with Respondent. Respondent must permit representatives of the Commission to interview anyone affiliated with Respondent who has agreed to such an interview. The interviewee may have counsel present.\n\nC. The Commission may use all other lawful means, including posing through its representatives as consumers, suppliers, or other individuals or entities, to Respondent or any individual or entity affiliated with Respondent, without the necessity of identification or prior notice. Nothing in this Order limits the Commission’s lawful use of compulsory process, pursuant to Sections 9 & 20 of the FTC Act, 15 U.S.C. §§ 49, 57b-1.",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Compliance Monitoring"
      ],
      "case_id": "05.24_betterhelp",
      "company_name": "BetterHelp, Inc.",
      "date_issued": "2024-05-15",
      "year": 2024,
      "administration": "Biden",
      "legal_authority": "Section 5 of the Federal Trade Commission Act",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/2023169-betterhelp-inc-matter",
      "docket_number": "C-4796"
    },
    {
      "provision_number": "XVIII",
      "title": "Order Effective Dates",
      "category": "duration",
      "summary": "This Order is effective upon publication on the FTC's website and will terminate 20 years from issuance, or 20 years from the most recent date a complaint is filed in federal court alleging a violation, whichever is later.",
      "verbatim_text": "IT IS FURTHER ORDERED that this Order is final and effective upon the date of its publication on the Commission’s website (ftc.gov) as a final order. This Order will terminate 20\n\npublication on the Commission’s website (ftc.gov) as a final order. This Order will terminate 20 years from the date of its issuance (which date may be stated at the end of this Order, near the Commission’s seal), or 20 years from the most recent date that the United States or the Commission files a complaint (with or without an accompanying settlement) in federal court alleging any violation of this Order, whichever comes later; provided, however, that the filing of such a complaint will not affect the duration of: A. any Provision in this Order that terminates in less than 20 years; B. this Order’s application to Respondent that is not named as a defendant in such complaint; and C. this Order if such complaint is filed after the Order has terminated pursuant to this Provision. Provided, further, that if such complaint is dismissed or a federal court rules that Respondent did not violate any Provision of the Order, and the dismissal or ruling is either not appealed or upheld on appeal, then the Order will terminate according to this Provision as though the complaint had never been filed, except that the Order will not terminate between the date such complaint is filed and the later of the deadline for appealing such dismissal or ruling and the date such dismissal or ruling is upheld on appeal.",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Order Administration"
      ],
      "case_id": "05.24_betterhelp",
      "company_name": "BetterHelp, Inc.",
      "date_issued": "2024-05-15",
      "year": 2024,
      "administration": "Biden",
      "legal_authority": "Section 5 of the Federal Trade Commission Act",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/2023169-betterhelp-inc-matter",
      "docket_number": "C-4796"
    },
    {
      "provision_number": "I",
      "title": "Prohibition on Use or Disclosure of Covered Information for Defined Advertising Purposes",
      "category": "prohibition",
      "summary": "Defendant is permanently prohibited from using or disclosing Covered Information for advertising or marketing purposes (Defined Advertising Purposes) or for any third party's purposes, with a narrow exception for Limited Visitor Data used for analytics and reporting.",
      "verbatim_text": "A. Defendant, and Defendant’s officers, agents, and employees who receive actual notice of this Order, whether acting directly or indirectly, are permanently restrained and enjoined from using or disclosing to any third party Covered Information for Defined Advertising Purposes or for any third party’s purposes. B. “Defined Advertising Purposes” means advertising, marketing, promoting, offering, offering for sale, or selling any products or services on, or through websites, mobile applications, or other platforms, including those of a third party, but shall not include the use or disclosure to a third party of Limited Visitor Data for: (i) reporting and analytics related to (a) understanding the user experience on Defendant’s websites, apps, or other platforms; (b) Defendant’s advertising; and (c) the effectiveness of Defendant’s advertising, such as statistical reporting, traffic analysis, and understanding the number of and type of ads served, or conversion measurement; or (ii) communications, services, or products from Defendant requested by a consumer that are sent or provided to the consumer; provided that the consumer’s Limited Visitor Data is not used for targeted advertising and is not used to build a profile about the consumer.",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Prohibition"
      ],
      "case_id": "05.24_cerebral_and_kyle_robertson",
      "company_name": "Cerebral, Inc.",
      "date_issued": "2024-05-15",
      "year": 2024,
      "administration": "Biden",
      "legal_authority": "Section 5(a) of the Federal Trade Commission Act, 15 U.S.C. § 45(a); Section 5(m)(1)(A) of the FTC Act, 15 U.S.C. § 45(m)(1)(A); Section 13(b) of the FTC Act, 15 U.S.C. § 53(b); Section 8023 of the Opioid Addiction Recovery Fraud Prevention Act of 2018, 15 U.S.C. § 45d; Section 5 of the Restore Online Shoppers' Confidence Act (ROSCA), 15 U.S.C. § 8404",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/222-3067-cerebral-inc-kyle-robertson-us-v",
      "docket_number": "24-cv-21376-JLK"
    },
    {
      "provision_number": "II",
      "title": "Affirmative Express Consent",
      "category": "prohibition",
      "summary": "Defendant is permanently prohibited from disclosing any consumer's Covered Information to any Outside Party without first obtaining that consumer's Affirmative Express Consent.",
      "verbatim_text": "IT IS FURTHER ORDERED that Defendant, Defendant’s officers, agents, and employees, and all other persons in active concert or participation with any of them who receive actual notice of this Order, whether acting directly or indirectly, 14 Case 1:24-cv-21376-JLK Document 6 Entered on FLSD Docket 04/15/2024 Page 15 of 62 in connection with any product or service, are permanently restrained and enjoined from failing to obtain a consumer’s Affirmative Express Consent prior to disclosing that consumer’s Covered Information to any Outside Party.",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Prohibition"
      ],
      "case_id": "05.24_cerebral_and_kyle_robertson",
      "company_name": "Cerebral, Inc.",
      "date_issued": "2024-05-15",
      "year": 2024,
      "administration": "Biden",
      "legal_authority": "Section 5(a) of the Federal Trade Commission Act, 15 U.S.C. § 45(a); Section 5(m)(1)(A) of the FTC Act, 15 U.S.C. § 45(m)(1)(A); Section 13(b) of the FTC Act, 15 U.S.C. § 53(b); Section 8023 of the Opioid Addiction Recovery Fraud Prevention Act of 2018, 15 U.S.C. § 45d; Section 5 of the Restore Online Shoppers' Confidence Act (ROSCA), 15 U.S.C. § 8404",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/222-3067-cerebral-inc-kyle-robertson-us-v",
      "docket_number": "24-cv-21376-JLK"
    },
    {
      "provision_number": "III",
      "title": "Prohibition Against Misrepresentations Regarding Privacy and Data Practices",
      "category": "prohibition",
      "summary": "Defendant is permanently prohibited from misrepresenting any aspect of its privacy, confidentiality, or security practices, including how Covered Information is collected, used, or disclosed, and any other material facts about its products or services.",
      "verbatim_text": "IT IS FURTHER ORDERED that Defendant, Defendant’s officers, agents, and employees, and all other persons in active concert or participation with any of them who receive actual notice of this Order, whether acting directly or indirectly, in connection with any Substance Use Disorder Treatment Product, Substance Use Disorder Treatment Service, or any other product or service, are permanently restrained and enjoined from misrepresenting or assisting others in misrepresenting, in any manner, expressly or by implication: A. The privacy, confidentiality, security, availability, or integrity of any Covered Information; B. The extent to which they protect the privacy, confidentiality, security, availability, or integrity of any Covered Information;\n\nC. The collection, maintenance, use, disclosure, Deletion, or access permitted or denied to any Covered Information; D. The extent to which they collect, maintain, use, disclose, Delete, or permit or deny access to any Covered Information;\n\nE. The purposes for which they, or any entity to whom any of them disclose or permit access to Covered Information, collect, maintain, use, disclose, Delete, or permit or deny access to any Covered Information;\n\nF. The extent to which a consumer can maintain privacy and anonymity associated with the consumer’s use of products or services offered by Defendant;\n\nG. Their privacy and security measures to prevent unauthorized access to, or use or disclosure of, Covered Information; or\n\nH. Any fact material to consumers concerning any product or service, such as: the total costs; any material restrictions, limitations, or conditions; or any material aspect of its performance, efficacy, nature, or central characteristics.",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Prohibition"
      ],
      "case_id": "05.24_cerebral_and_kyle_robertson",
      "company_name": "Cerebral, Inc.",
      "date_issued": "2024-05-15",
      "year": 2024,
      "administration": "Biden",
      "legal_authority": "Section 5(a) of the Federal Trade Commission Act, 15 U.S.C. § 45(a); Section 5(m)(1)(A) of the FTC Act, 15 U.S.C. § 45(m)(1)(A); Section 13(b) of the FTC Act, 15 U.S.C. § 53(b); Section 8023 of the Opioid Addiction Recovery Fraud Prevention Act of 2018, 15 U.S.C. § 45d; Section 5 of the Restore Online Shoppers' Confidence Act (ROSCA), 15 U.S.C. § 8404",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/222-3067-cerebral-inc-kyle-robertson-us-v",
      "docket_number": "24-cv-21376-JLK"
    },
    {
      "provision_number": "IV",
      "title": "Prohibition Against Misrepresentations Related to Negative Options",
      "category": "prohibition",
      "summary": "Defendant is permanently prohibited from misrepresenting any material aspect of its Negative Option Feature offers, including cancellation terms, costs, free-trial claims, billing authorization, and refund or cancellation policies.",
      "verbatim_text": "IT IS FURTHER ORDERED that Defendant, Defendant’s officers, agents, and employees, and all other persons in active concert or participation with any of them who receive actual notice of this Order, whether acting directly or indirectly, in connection with promoting or offering for sale any product or service with a Negative Option Feature, are permanently restrained and enjoined from misrepresenting or assisting others in misrepresenting, expressly or by implication: A. That the consumer can cancel anytime; B. That the consumer can cancel with no further obligation; 16 Case 1:24-cv-21376-JLK Document 6 Entered on FLSD Docket 04/15/2024 Page 17 of 62 C. Any cost to the consumer to purchase, receive, use, or return the initial product or service;\n\nD. That the consumer will not be Charged for any product or service; E. That a product or service is offered on a “free,” “trial,” “sample,” “bonus,” “gift,” “no obligation,” “discounted” basis, or words of similar import, denoting or implying the absence of an obligation on the part of the recipient of the offer to affirmatively act in order to avoid Charges, including where a Charge will be assessed pursuant to the offer unless the consumer takes affirmative steps to prevent or stop such a Charge;\n\nG. Any purpose for which the consumer’s Billing Information will be used; H. The date by which the consumer will incur any obligation or be Charged unless the consumer takes an affirmative action on the Negative Option Feature; I. That a transaction has been authorized by the consumer;\n\nJ. Any material aspect of the nature or terms of a refund, cancellation, exchange, or repurchase policy for the product or service; or K. Any other material fact.",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Deceptive Design / Dark Patterns"
      ],
      "remedy_types": [
        "Prohibition"
      ],
      "case_id": "05.24_cerebral_and_kyle_robertson",
      "company_name": "Cerebral, Inc.",
      "date_issued": "2024-05-15",
      "year": 2024,
      "administration": "Biden",
      "legal_authority": "Section 5(a) of the Federal Trade Commission Act, 15 U.S.C. § 45(a); Section 5(m)(1)(A) of the FTC Act, 15 U.S.C. § 45(m)(1)(A); Section 13(b) of the FTC Act, 15 U.S.C. § 53(b); Section 8023 of the Opioid Addiction Recovery Fraud Prevention Act of 2018, 15 U.S.C. § 45d; Section 5 of the Restore Online Shoppers' Confidence Act (ROSCA), 15 U.S.C. § 8404",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/222-3067-cerebral-inc-kyle-robertson-us-v",
      "docket_number": "24-cv-21376-JLK"
    },
    {
      "provision_number": "V",
      "title": "Mandated Privacy and Information Security Program",
      "category": "affirmative_obligation",
      "summary": "Defendant must establish, implement, and maintain a comprehensive privacy and information security program within 60 days of entry of the Order, including documentation, board reporting, risk assessments, safeguards, employee training, access controls, encryption, source code reviews, vendor management, and merger/acquisition compliance.",
      "verbatim_text": "IT IS FURTHER ORDERED that any Covered Business, in connection with the collection, maintenance, use, or disclosure of, or provision of access to, Covered Information, must, within 60 days of entry of this Order, establish and implement, and thereafter maintain, a comprehensive privacy and information security program (“Program”) that protects the privacy, confidentiality, security, availability, and integrity of Covered Information and effectively mitigates Privacy and Security Risks and Harms. To satisfy this requirement, Defendant must, at a minimum: A. Document in writing the content, implementation, and maintenance of the Program mandated in this Section;\n\nB. Provide the written Program required under sub-Section V.A of this Order and any evaluations thereof or adjustments thereto to each Covered Business’ Board of Directors (or governing body or, if no such board or body exists, to the senior executive of the Covered Business responsible for the Covered Business’ Program) at least once every 12 months and promptly (not to exceed 30 days) after a Covered Incident;\n\nC. Designate a qualified employee or employees, who report(s) directly to the Chief Executive Officer(s) or, in the event a Chief Executive Officer role does not exist, a similarly-situated executive, to coordinate and be responsible for the Program; and keep the Chief Executive Officer(s) and Board of Directors (or governing body or, if no such board or body exists, to the senior executive of the 18 Case 1:24-cv-21376-JLK Document 6 Entered on FLSD Docket 04/15/2024 Page 19 of 62 Covered Business responsible for the Program) informed of the Program, including all actions and procedures implemented to comply with the requirements of this Order, and any actions and procedures to be implemented to ensure continued compliance with this Order;\n\nD. Conduct and document, at least once every 12 months and promptly (not to exceed 30 days) following a Covered Incident, a comprehensive risk assessment of the internal and external Privacy and Security Risks and Harms in each area of its operation (e.g., employee and agent training and management; partnerships with third parties to whom the Covered Business has disclosed Covered Information; sharing of Covered Information with third parties; product research, design, and development; advertising; and product marketing and implementation). This assessment must include an evaluation of: (1) each individual product or service feature that collects, uses or shares Covered Information, both on a standalone basis and within the context of the broader product or service that the feature will be supporting or operating (e.g., considering the product or service inclusive of all relevant features); (2) whether existing and fully implemented safeguards effectively mitigate the identified Privacy and Security Risks and Harms for each product or service; (3) whether additional safeguards are available that could better mitigate the identified Privacy and Security Risks and Harms or address any residual unresolved Privacy and Security Risks and Harms; (4) the sufficiency of any proposed consumer notice and, if 19 Case 1:24-cv-21376-JLK Document 6 Entered on FLSD Docket 04/15/2024 Page 20 of 62 necessary, consent; and (5) whether the product or service feature should be deprecated or removed. The Covered Business shall further assess and document the internal and external Privacy and Security Risks and Harms described above as they relate to a Covered Incident promptly following verification or confirmation of such an incident, in any event not to exceed 30 days after the Covered Incident is verified or otherwise confirmed;\n\nE. Design, document, implement, and maintain safeguards that control for the internal and external Privacy and Security Risks and Harms identified in response to sub-Section V.D. Each safeguard must be based on the volume and sensitivity of the Covered Information that is at risk, the severity of the potential Privacy and Security Risks and Harms, and the likelihood that the Privacy and Security Risks and Harms could be realized. The safeguards must also include: 1. Policies, procedures, and standards that describe, at a minimum: (a) how the Covered Business implements each of the safeguards identified in this sub-Section; and (b) how the Covered Business assesses and enforces compliance with the safeguards and any other controls it identifies in its policies, procedures, and standards; 2. Policies, procedures, and technical measures implemented to systematically inventory Covered Information in the Covered Business’ control and Delete Covered Information that is no longer necessary; 20 Case 1:24-cv-21376-JLK Document 6 Entered on FLSD Docket 04/15/2024 Page 21 of 62 3. Policies, procedures, and technical measures that prevent the collection, maintenance, use, or disclosure of, or provision of access to, Covered Information inconsistent with the Covered Business’s representations to consumers; 4. Policies, procedures, controls, and other requirements that ensure timely identification of, investigation of, disclosure of, and response to Privacy and Security Risks and Harms covered by this Order, timely remediation of Privacy and Security Risks and Harms, and compliance with Sections I-IV of this Order, above; 5. Mandatory, regular privacy and security training for all employees and agents to be conducted when an employee begins employment or takes on a new role with materially different duties or responsibilities, and on at least an annual basis thereafter, updated to address any internal or external Privacy and Security Risks and Harms identified in response to sub-Section V.D and safeguards implemented pursuant to this sub-Section V.E; and which includes, at a minimum, training for each of the Covered Business’ employees and agents on the Covered Business’ privacy and security policies, standards, and procedures; the requirements of this Order; an introduction to Privacy and Security Risks and Harms and mitigation; and specific role-based training based on the trainee’s responsibilities under the Program; and also includes, for developers, 21 Case 1:24-cv-21376-JLK Document 6 Entered on FLSD Docket 04/15/2024 Page 22 of 62 engineers, system or information technology asset administrators, and others that design, implement, and operate the Covered Business’ services or products or that are otherwise responsible for the security of Covered Information, training in secure software development principles, including secure engineering and defensive programming concepts; provided further that any employee or agent who has not completed annual privacy training within the prior 13 months shall be denied access to Covered Information until such time as they complete the training; 6. Policies, procedures, standards, and technical measures that: (a) control data access for all assets (including databases) containing Covered Information or resources containing proprietary (i.e., non-open source) source code repositories, including, at a minimum: (1) restrictions of inbound connections to those originating from approved IP addresses; (2) requiring connections to be authenticated and encrypted; and (3) periodic audits of account permissions; (b) require and enforce strong passwords or other credentials; (c) prevent the storage of unsecured access keys or other unsecured access credentials; (d) prevent the reuse of known compromised credentials to access Covered Information; and (e) implement automatic password resets for known compromised credentials; 7. Encryption of, at a minimum, all Covered Information, and access credentials used on the Covered Business’ systems or information 22 Case 1:24-cv-21376-JLK Document 6 Entered on FLSD Docket 04/15/2024 Page 23 of 62 technology assets, including cloud storage, and data access controls for all systems or information technology assets storing Covered Information, including by, at a minimum, requiring multi-factor authentication methods for all employees, contractors, and affiliates in order to access any assets (including databases) storing Covered Information. Such multi-factor authentication methods for all employees, contractors, and affiliates shall not include telephone or SMS-based authentication methods and must be resistant to phishing attacks. The Covered Business may use widely-adopted industry authentication options that provide at least equivalent security as the multi-factor authentication options required by this sub-Section, if approved in writing by the person responsible for the Program, limiting employee or contractor access to Covered Information to what is needed to perform that employee or contractor’s job function; 8. Policies, procedures, standards, and technical measures that assess the risk posed by source code to Covered Information collected or maintained directly or indirectly by the Covered Business, including, at least once every 12 months and promptly (not to exceed 30 days) after a Covered Incident involving a vulnerability related to the Covered Business’ source code: (a) software code review; and (b) penetration testing of the Covered Business’ software and systems or information technology assets; 23 Case 1:24-cv-21376-JLK Document 6 Entered on FLSD Docket 04/15/2024 Page 24 of 62 9. Audits, assessments, reviews, or testing of each mechanism by which the Covered Business discloses Covered Information to a third party or provides a third party with access to Covered Information (including but not limited to web beacons, pixels, and Software Development Kits); 10. Policies, procedures, standards, and technical measures that: (a) log and monitor access to repositories of Covered Information; (b) restrict access to any Covered Information to only those employees or agents of the Covered Business who have a business need to access that Covered Information (including, with respect to any health care service provider, providing access only to the Covered Information of consumers to whom that provider personally provides services); and (c) periodically monitor and immediately terminate, within 24 hours, employee and agent access credentials and accounts following inappropriate usage or termination of employment; 11. Requiring an annual self-certification by each third party that obtains or otherwise has access to Covered Information certifying the purpose(s) or use(s) for each type of Covered Information to which it requests or continues to have access, and denying or terminating access to any type of Covered Information that the third party fails to certify unless the third party cures such failure within a reasonable time, not to exceed 30 days; 24 Case 1:24-cv-21376-JLK Document 6 Entered on FLSD Docket 04/15/2024 Page 25 of 62 12. An incident response plan in the form of policies, procedures, standards, and technical measures that ensure a timely identification, investigation, and response to Privacy and Security Risks and Harms covered by this Order and timely remediation thereof. The Covered Business must update this plan to adapt to any material changes affecting compliance with this sub-Section V.E, such as changes to its networks, systems or information technology assets, other assets, or staffing; 13. Policies, procedures, and any other necessary requirements that ensure that (a) any merged or acquired entity, talent, or data, or combination thereof, that becomes part of the Covered Business will comply with the terms of this Order as of the effective date of the merger or Acquisition; (b) any merged or acquired entity, talent, or data, or combination thereof, that becomes an affiliate of the Covered Business will comply with the terms of this Order promptly, and in any event no later than 45 days after the effective date of that affiliate’s merger or Acquisition; (c) any entity, talent, or data, or combination thereof, that has stronger privacy or data security protections, policies, and practices than the Covered Business and becomes part of the Covered Business or an affiliate thereof maintains those protections, policies, and practices and continues to honor its prior Commitments to consumers for at least 12 months; and 25 Case 1:24-cv-21376-JLK Document 6 Entered on FLSD Docket 04/15/2024 Page 26 of 62 14. For each product or service, policies and procedures to document internally the decision to collect, use, disclose, or maintain each type of Covered Information. Such documentation should include: (1) the name or names of the person or people who made the decision; (2) for what purpose the type of Covered Information is being collected; (3) the data segmentation controls in place to ensure that the type of Covered Information collected is only used for the particular purpose for which it was collected; (4) the data retention limit set for each type of Covered Information and the technical means for achieving Deletion; (5) the safeguards in place to prevent disclosure or sale of each type of Covered Information in contravention of this Order; and (6) the access controls in place to ensure only authorized employees and agents with a need-to-know have access to each type of Covered Information;\n\nF. Assess, monitor, and test, at least once every 12 months and promptly (not to exceed 30 days) following the resolution of a Covered Incident, the effectiveness of any safeguards put in place pursuant to sub-Section V.E of this Order to address the risks to the privacy, confidentiality, security, availability, or integrity of Covered Information. Such testing and monitoring must include vulnerability testing of each Covered Business’ systems websites, apps, and any other platforms once every four months and promptly (not to exceed 30 days) after a Covered Incident. The Covered Business shall modify its Program based on the 26 Case 1:24-cv-21376-JLK Document 6 Entered on FLSD Docket 04/15/2024 Page 27 of 62 results of this assessing, monitoring, and testing at least once every 12 months and promptly (not to exceed 60 days) following the resolution of a Covered Incident;\n\nG. Select and retain service providers capable of safeguarding Covered Information they receive from the Covered Business, and contractually require service providers to implement and maintain safeguards for Covered Information; and\n\nH. Evaluate and adjust the Program in light of any changes to the Covered Business’ operations or business arrangements, a Covered Incident, new or more efficient technological or operational methods to control for the risks identified in sub-Section V.D of this Order, and any other circumstances the Covered Business knows or has reason to believe may have a material impact on the effectiveness of the Program or any of its individual safeguards. The Covered Business may make this evaluation and adjustment to its Program at any time, but must, at a minimum, evaluate the Program at least once every 12 months and modify the mandated Program as necessary based on the results.",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy",
        "Data Security"
      ],
      "remedy_types": [
        "Comprehensive Security Program"
      ],
      "case_id": "05.24_cerebral_and_kyle_robertson",
      "company_name": "Cerebral, Inc.",
      "date_issued": "2024-05-15",
      "year": 2024,
      "administration": "Biden",
      "legal_authority": "Section 5(a) of the Federal Trade Commission Act, 15 U.S.C. § 45(a); Section 5(m)(1)(A) of the FTC Act, 15 U.S.C. § 45(m)(1)(A); Section 13(b) of the FTC Act, 15 U.S.C. § 53(b); Section 8023 of the Opioid Addiction Recovery Fraud Prevention Act of 2018, 15 U.S.C. § 45d; Section 5 of the Restore Online Shoppers' Confidence Act (ROSCA), 15 U.S.C. § 8404",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/222-3067-cerebral-inc-kyle-robertson-us-v",
      "docket_number": "24-cv-21376-JLK"
    },
    {
      "provision_number": "VI",
      "title": "Independent Mandated Program Assessments",
      "category": "assessment",
      "summary": "Defendant must obtain initial and biennial independent third-party assessments of the privacy and security Program, covering the first 180 days after the Program is established and then every two years for 20 years, with each Assessment submitted to the FTC within 10 days of completion.",
      "verbatim_text": "A. The Assessments must be obtained from one or more qualified, objective, independent third-party professionals (“Assessor(s)”), selected by Defendant, subject to sub-Section VI.B, who: (1) uses procedures and standards generally accepted in the profession; (2) conducts an independent review of the Program; and (3) retains all documents relevant to each Assessment for five years after completion of such Assessment and furnishes such documents to the Commission within 10 days of receipt of a written request from a representative of the Commission. No documents may be withheld by the Assessor on the basis of a claim of confidentiality, proprietary or trade secrets, work product protection, attorney client privilege, statutory exemption, or any similar claim;\n\nB. For each Assessment, Defendant must provide the Associate Director for Enforcement for the Bureau of Consumer Protection at the Federal Trade Commission (“Associate Director”) with the name(s) and affiliation(s) of the person(s) selected to conduct the Assessment, which the Associate Director shall have the authority to approve in his or her sole discretion;\n\nC. The reporting period for the Assessments must cover: (1) the first 180 days after the mandated Program has been put in place for the initial Assessment; and (2) each two-year period thereafter for 20 years after entry of this Order, for the biennial Assessments;\n\nD. Each Assessment must: (1) determine whether Defendant has implemented and maintained the Program required by Section V of this Order; (2) 28 Case 1:24-cv-21376-JLK Document 6 Entered on FLSD Docket 04/15/2024 Page 29 of 62 assess the effectiveness of Defendant’s implementation and maintenance of each subpart in Section V of this Order; (3) identify any gaps or weaknesses in the Program; (4) identify specific evidence (including documents reviewed, sampling and testing performed, and interviews conducted) examined to make such determinations, assessments, and identifications, and explain why the evidence that the Assessor examined is sufficient to justify the Assessor’s findings; and (5) determine whether Defendant has implemented and maintained the procedures necessary regarding Covered Information to comply with Sections I-V of this Order. To the extent that Defendant revises, updates, or adds one or more safeguards required under Section V.E of this Order in the middle of an Assessment period, the Assessment shall assess the effectiveness of the revised, updated, or added safeguard(s) for the time period in which it was in effect, and provide a separate statement detailing the basis for each revised, updated, or additional safeguard;\n\nE. No finding of any Assessment shall rely primarily on assertions or attestations by management of Defendant or any Covered Business. The Assessment shall be signed by the Assessor and shall state that the Assessor conducted an independent review of the mandated Program, and did not rely primarily on assertions or attestations by management of Defendant or any Covered Business;\n\nF. Each Assessment must be completed within 60 days after the end of the reporting period to which the Assessment applies. Unless otherwise directed by a Commission representative in writing, Defendant must submit each Assessment to the Commission within 10 days after the Assessment has been completed via email to DEbrief@ftc.gov or by overnight courier (not the U.S. Postal Service) to Associate Director for Enforcement, Bureau of Consumer Protection, Federal Trade Commission, 600 Pennsylvania Ave. N.W., Washington, DC 20580. The subject line must begin, “FTC v. Cerebral, Inc., FTC File No. 2223067.” Each Assessment shall be retained by Defendant and shall be provided to the Commission within 10 days of a request.",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy",
        "Data Security"
      ],
      "remedy_types": [
        "Third-Party Assessment"
      ],
      "case_id": "05.24_cerebral_and_kyle_robertson",
      "company_name": "Cerebral, Inc.",
      "date_issued": "2024-05-15",
      "year": 2024,
      "administration": "Biden",
      "legal_authority": "Section 5(a) of the Federal Trade Commission Act, 15 U.S.C. § 45(a); Section 5(m)(1)(A) of the FTC Act, 15 U.S.C. § 45(m)(1)(A); Section 13(b) of the FTC Act, 15 U.S.C. § 53(b); Section 8023 of the Opioid Addiction Recovery Fraud Prevention Act of 2018, 15 U.S.C. § 45d; Section 5 of the Restore Online Shoppers' Confidence Act (ROSCA), 15 U.S.C. § 8404",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/222-3067-cerebral-inc-kyle-robertson-us-v",
      "docket_number": "24-cv-21376-JLK"
    },
    {
      "provision_number": "VII",
      "title": "Cooperation with Assessor",
      "category": "affirmative_obligation",
      "summary": "Defendant must provide Assessors with all relevant information and materials and must not misrepresent any material facts to the Assessor in connection with any mandated Assessment.",
      "verbatim_text": "A. Provide or otherwise make available to the Assessor(s) all information and material in their possession, custody, or control that is relevant to the Assessment for which there is no reasonable claim of privilege, including information about all Covered Information in Defendant’s custody or control and 30 Case 1:24-cv-21376-JLK Document 6 Entered on FLSD Docket 04/15/2024 Page 31 of 62 all of Defendant’s systems or information technology assets so that the Assessor(s) can determine the scope of the Assessment; and\n\nB. Disclose all material facts to each Assessor, and not misrepresent in any manner, expressly or by implication, any fact material to the Assessor’s duties pursuant to this Order, or its: (1) determination of whether Defendant has implemented and maintained the Program required by the Section of this Order titled Mandated Privacy and Information Security Program; (2) assessment of the effectiveness of the implementation and maintenance of sub-Sections V.A-H; or (3) identification of any gaps or weaknesses in, or instances of material noncompliance with, the Program.",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Third-Party Assessment"
      ],
      "case_id": "05.24_cerebral_and_kyle_robertson",
      "company_name": "Cerebral, Inc.",
      "date_issued": "2024-05-15",
      "year": 2024,
      "administration": "Biden",
      "legal_authority": "Section 5(a) of the Federal Trade Commission Act, 15 U.S.C. § 45(a); Section 5(m)(1)(A) of the FTC Act, 15 U.S.C. § 45(m)(1)(A); Section 13(b) of the FTC Act, 15 U.S.C. § 53(b); Section 8023 of the Opioid Addiction Recovery Fraud Prevention Act of 2018, 15 U.S.C. § 45d; Section 5 of the Restore Online Shoppers' Confidence Act (ROSCA), 15 U.S.C. § 8404",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/222-3067-cerebral-inc-kyle-robertson-us-v",
      "docket_number": "24-cv-21376-JLK"
    },
    {
      "provision_number": "VIII",
      "title": "Annual Certifications",
      "category": "compliance_reporting",
      "summary": "Defendant must annually provide the FTC with a certification from a senior corporate manager confirming that the Program has been established and maintained, that there is no uncorrected material noncompliance, and describing any Covered Incidents during the period.",
      "verbatim_text": "A. One year after entry of this Order, and each year thereafter, provide the Commission with a certification from a senior corporate manager, or, if no such senior corporate manager exists, a senior executive of each Covered Business responsible for a Program required by Section V of this Order that: (1) the Covered Business has established, implemented, and maintained the requirements of this Order; (2) the Covered Business is not aware of any material noncompliance that has not been (a) corrected, or (b) disclosed to the Commission; and (3) includes a description of any Covered Incident during the certified period. The certification must be based on the personal knowledge of the senior corporate 31 Case 1:24-cv-21376-JLK Document 6 Entered on FLSD Docket 04/15/2024 Page 32 of 62 manager, senior officer, or subject matter experts upon whom the senior corporate manager or senior executive reasonably relies in making the certification.\n\nB. Unless otherwise directed by a Commission representative in writing, Defendant must submit each annual certification to the Commission and under penalty of perjury as specified in the Section of this Order titled Compliance Reporting.",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Compliance Monitoring"
      ],
      "case_id": "05.24_cerebral_and_kyle_robertson",
      "company_name": "Cerebral, Inc.",
      "date_issued": "2024-05-15",
      "year": 2024,
      "administration": "Biden",
      "legal_authority": "Section 5(a) of the Federal Trade Commission Act, 15 U.S.C. § 45(a); Section 5(m)(1)(A) of the FTC Act, 15 U.S.C. § 45(m)(1)(A); Section 13(b) of the FTC Act, 15 U.S.C. § 53(b); Section 8023 of the Opioid Addiction Recovery Fraud Prevention Act of 2018, 15 U.S.C. § 45d; Section 5 of the Restore Online Shoppers' Confidence Act (ROSCA), 15 U.S.C. § 8404",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/222-3067-cerebral-inc-kyle-robertson-us-v",
      "docket_number": "24-cv-21376-JLK"
    },
    {
      "provision_number": "IX",
      "title": "Covered Incident Reports",
      "category": "compliance_reporting",
      "summary": "Defendant must report each Covered Incident to the Assessor and FTC within 30 days of discovery, with updates every 30 days until fully resolved, and publish a public version of the report on its websites and apps within 45 days of verification.",
      "verbatim_text": "IT IS FURTHER ORDERED that Defendant must submit a report within 30 days of Defendant’s discovery of a Covered Incident, and subsequently updated every 30 days until the Covered Incident is fully investigated and any remediation efforts are fully implemented, to the Assessor(s) and to the Commission, that includes: A. The date, estimated date, or estimated date range when the Covered Incident occurred; B. A description of the facts relating to the Covered Incident, including the causes of the Covered Incident; C. A description of each type of information that was affected by the Covered Incident; D. The number of consumers whose Covered Information was affected by the Covered Incident; 32 Case 1:24-cv-21376-JLK Document 6 Entered on FLSD Docket 04/15/2024 Page 33 of 62 E. The acts that Defendant has taken to date to remediate the Covered Incident and protect Covered Information from further exposure or access, or any other Privacy and Security Risks and Harms, including a description of any new safeguards that have been implemented in response to the Covered Incident; and F. A representative copy of any materially different notice sent by Defendant to consumers or to any U.S. federal, state, or local government entity.\n\nDefendant must submit each Covered Incident report to the Commission and under penalty of perjury as specified in the Section of this Order titled Compliance Reporting. Within 45 days of Defendant’s verification or confirmation of a\n\nReporting. Within 45 days of Defendant’s verification or confirmation of a Covered Incident, Defendant must publish on its websites and apps a public version of each Covered Incident report accessible from its websites’ and apps’ home screen and maintain each report on its websites and apps for two years.",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Compliance Monitoring"
      ],
      "case_id": "05.24_cerebral_and_kyle_robertson",
      "company_name": "Cerebral, Inc.",
      "date_issued": "2024-05-15",
      "year": 2024,
      "administration": "Biden",
      "legal_authority": "Section 5(a) of the Federal Trade Commission Act, 15 U.S.C. § 45(a); Section 5(m)(1)(A) of the FTC Act, 15 U.S.C. § 45(m)(1)(A); Section 13(b) of the FTC Act, 15 U.S.C. § 53(b); Section 8023 of the Opioid Addiction Recovery Fraud Prevention Act of 2018, 15 U.S.C. § 45d; Section 5 of the Restore Online Shoppers' Confidence Act (ROSCA), 15 U.S.C. § 8404",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/222-3067-cerebral-inc-kyle-robertson-us-v",
      "docket_number": "24-cv-21376-JLK"
    },
    {
      "provision_number": "X",
      "title": "Notice to Users",
      "category": "affirmative_obligation",
      "summary": "Within 14 days of the Order, Defendant must post a prescribed Notice on its websites and apps and email it to all consumers who provided Covered Information between October 2019 and March 1, 2023, keeping the Notice in place for two years.",
      "verbatim_text": "IT IS FURTHER ORDERED that, within 14 days of entry of this Order, Defendant must post Clearly and Conspicuously on any screen of its websites, apps, or other platforms where consumers first access or encounter Defendant’s products or services, an exact copy of the notice attached hereto as Exhibit A (“Notice”). Defendant must leave this Notice in place for two years after posting\n\nit. Defendant must also email the Notice to all consumers that provided Covered Information to it between October 2019 and March 1, 2023, provided however, that if Defendant does not have email information for any such consumer, Defendant 33 Case 1:24-cv-21376-JLK Document 6 Entered on FLSD Docket 04/15/2024 Page 34 of 62 must send the Notice to that consumer through its primary means of communicating with that consumer (such as a notification within Defendant’s apps). Defendant shall not include with the Notice any other documents, attachments, hyperlinks, or other information.",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Consumer Notification"
      ],
      "case_id": "05.24_cerebral_and_kyle_robertson",
      "company_name": "Cerebral, Inc.",
      "date_issued": "2024-05-15",
      "year": 2024,
      "administration": "Biden",
      "legal_authority": "Section 5(a) of the Federal Trade Commission Act, 15 U.S.C. § 45(a); Section 5(m)(1)(A) of the FTC Act, 15 U.S.C. § 45(m)(1)(A); Section 13(b) of the FTC Act, 15 U.S.C. § 53(b); Section 8023 of the Opioid Addiction Recovery Fraud Prevention Act of 2018, 15 U.S.C. § 45d; Section 5 of the Restore Online Shoppers' Confidence Act (ROSCA), 15 U.S.C. § 8404",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/222-3067-cerebral-inc-kyle-robertson-us-v",
      "docket_number": "24-cv-21376-JLK"
    },
    {
      "provision_number": "XI",
      "title": "Data Retention Limits and Deletion of Covered Information and Data Product",
      "category": "affirmative_obligation",
      "summary": "Defendant must document a retention schedule within 7 days, delete all Covered Information not used for Treatment, Payment, or Health Care Operations within 60 days, provide a consumer deletion request mechanism within 60 days, identify all third-party recipients within 30 days, and instruct those third parties to delete Covered Information within 60 days.",
      "verbatim_text": "A. Within seven days of entry of this Order, Defendant must document and adhere to a retention schedule for Covered Information in compliance with this Order. Such schedule shall set forth: (1) the purpose or purposes for which each type of Covered Information is collected; (2) the specific business needs for retaining each type of Covered Information; (3) a specific timeframe for Deletion of each type of Covered Information (absent any intervening Deletion requests from consumers) limited to the shortest time necessary to fulfill the purpose for which the Covered Information was collected, and in no instance providing for the indefinite retention of any Covered Information or retention beyond 10 years; and (4) a true and accurate explanation of why the set timeframe for Deletion is the shortest time reasonably necessary for the specific business needs cited.\n\nB. Within 60 days of entry of this Order, Defendant shall Delete all Covered Information in all forms, including hashed or encrypted Covered Information, and any Data Product in its possession, custody, or control that has 34 Case 1:24-cv-21376-JLK Document 6 Entered on FLSD Docket 04/15/2024 Page 35 of 62 not been collected or used for Treatment, Payment, or Health Care Operations, provided, however, that Covered Information need not be Deleted to the extent Defendant first obtains the Affirmative Express Consent of the individual for the retention of that Covered Information pursuant to the retention schedule disclosed to the individual, which must be Clearly and Conspicuously disclosed to them in requesting such consent.\n\nC. Within 60 days of entry of this Order, Defendant must provide a Clear and Conspicuous link on the home page or screen and initial login page of Defendant’s websites and apps directing individuals to an online form through which they can request access to or the Deletion of their Covered Information. Defendant must respond to every request within 30 days unless the applicable consumer data access and Deletion rights and related procedures prescribed by applicable law provide for an earlier Deletion date. The time period to respond to the request may be extended once by an additional 30 days when reasonably necessary, provided each affected individual is notified in advance of the extension, the reasons for the extension, and the individual’s alternatives.\n\nE. Additionally, within 30 days of entry of this Order, Defendant must: 1. Identify all third parties that received Covered Information from Defendant in any form, including in hashed or encrypted form; 2. Identify what specific types of Covered Information were disclosed to each third party; and 3. Submit a list disclosing the information identified pursuant to this sub-Section and the methodologies used to obtain that information to the Commission in the same manner specified in the Section of this Order titled Compliance Reporting.\n\nF. Within 60 days of entry of this Order, Defendant must provide a copy of the Complaint in this case and this Order to all third parties identified pursuant to this Section, and instruct those third parties to Delete all Covered Information received from Defendant, directly or indirectly, provided that Covered Information need not be deleted pursuant to this sub-Section to the extent that it is used for Treatment, Payment, or Health Care Operations to ensure continuity of care for Defendant’s customers. Defendant’s instruction to each third party shall include a list of the Covered Information identified pursuant to this Section. Defendant must provide all instructions sent to any third party and all responses received from any of them within 5 days of receipt to the Commission in the same manner specified in the Section of this Order titled Compliance Reporting.\n\nG. As of the date of this Order, Defendant shall not disclose any Covered Information in any form, including hashed or encrypted Covered Information, to any third party until Defendant receives written confirmation from the third party of the third party’s receipt of the instructions required by sub-Section F above.",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Data Deletion"
      ],
      "case_id": "05.24_cerebral_and_kyle_robertson",
      "company_name": "Cerebral, Inc.",
      "date_issued": "2024-05-15",
      "year": 2024,
      "administration": "Biden",
      "legal_authority": "Section 5(a) of the Federal Trade Commission Act, 15 U.S.C. § 45(a); Section 5(m)(1)(A) of the FTC Act, 15 U.S.C. § 45(m)(1)(A); Section 13(b) of the FTC Act, 15 U.S.C. § 53(b); Section 8023 of the Opioid Addiction Recovery Fraud Prevention Act of 2018, 15 U.S.C. § 45d; Section 5 of the Restore Online Shoppers' Confidence Act (ROSCA), 15 U.S.C. § 8404",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/222-3067-cerebral-inc-kyle-robertson-us-v",
      "docket_number": "24-cv-21376-JLK"
    },
    {
      "provision_number": "XII",
      "title": "Required Disclosures Relating to Negative Option Feature",
      "category": "affirmative_obligation",
      "summary": "Defendant is permanently prohibited from promoting any Negative Option Feature without making specific Clear and Conspicuous disclosures about costs, affirmative action required to avoid charges, recurring charge deadlines, and cancellation mechanisms; and must send written transaction confirmations to consumers.",
      "verbatim_text": "A. Representing directly or indirectly, expressly or by implication, that any product or service that includes a Negative Option Feature is being offered on a free, trial, no obligation, reduced, or discounted basis, without disclosing Clearly and Conspicuously, and immediately adjacent to, any such representation: 1. The extent to which the consumer must take any affirmative action to avoid any Charges: (a) for the offered product or service, (b) of an increased amount after the trial or promotional period ends, and (c) on a recurring basis; 2. The total cost (or range of costs) the consumer will be Charged and, if applicable, the frequency of such Charges unless the consumer timely takes steps to prevent or stop such Charges; and 37 Case 1:24-cv-21376-JLK Document 6 Entered on FLSD Docket 04/15/2024 Page 38 of 62 3. The deadline(s) (by date or frequency) by which the consumer must affirmatively act in order to stop all recurring Charges.\n\nB. Obtaining Billing Information from a consumer for any transaction involving a product or service that includes a Negative Option Feature, without first disclosing Clearly and Conspicuously, and immediately adjacent to where a consumer provides Billing Information: 1. The extent to which the consumer must take affirmative action to avoid any Charges: a) for the offered product or service, b) of an increased amount after the trial or promotional period ends, and c) on a recurring basis; 2. The total cost (or range of costs) the consumer will be Charged, the date the initial Charge will be submitted for payment, and, if applicable, the frequency of such Charges unless the consumer timely takes affirmative steps to prevent or stop such Charges; 3. The deadline(s) (by date or frequency) by which the consumer must affirmatively act in order to stop all recurring Charges; 4. The name of the seller or provider of the product or service and, if the name of the seller or provider will not appear on billing statements, the billing descriptor that will appear on such statements; 5. A description of the product or service; 6. Any Charge or cost for which the consumer is responsible in 38 Case 1:24-cv-21376-JLK Document 6 Entered on FLSD Docket 04/15/2024 Page 39 of 62 connection with the cancellation of an order, any service or the return of any product; 7. The simple cancellation mechanism to stop any recurring Charges, as required by this Order.\n\nC. Failing to send the consumer: 1. Immediately after the consumer’s submission of an online order, written confirmation of the transaction by email. The email must Clearly and Conspicuously disclose all the information required by sub-Section XII.B, and contain a subject line reading “Subscription Confirmation” along with the name of the product or service, and no additional information; or\n\n2. Within 2 days after receipt of the consumer’s order by mail or telephone, a written confirmation of the transaction, either by email or first- class mail. The email or letter must Clearly and Conspicuously disclose all the information required by sub-Section XII.B. The subject line of the email must Clearly and Conspicuously state “Subscription Confirmation” along with the name of the product or service, and nothing else. The outside of the envelope must not have any information other than the consumer’s address, Defendant’s return address, and postage.",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Deceptive Design / Dark Patterns"
      ],
      "remedy_types": [
        "Consumer Notification"
      ],
      "case_id": "05.24_cerebral_and_kyle_robertson",
      "company_name": "Cerebral, Inc.",
      "date_issued": "2024-05-15",
      "year": 2024,
      "administration": "Biden",
      "legal_authority": "Section 5(a) of the Federal Trade Commission Act, 15 U.S.C. § 45(a); Section 5(m)(1)(A) of the FTC Act, 15 U.S.C. § 45(m)(1)(A); Section 13(b) of the FTC Act, 15 U.S.C. § 53(b); Section 8023 of the Opioid Addiction Recovery Fraud Prevention Act of 2018, 15 U.S.C. § 45d; Section 5 of the Restore Online Shoppers' Confidence Act (ROSCA), 15 U.S.C. § 8404",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/222-3067-cerebral-inc-kyle-robertson-us-v",
      "docket_number": "24-cv-21376-JLK"
    },
    {
      "provision_number": "XIII",
      "title": "Obtaining Express Informed Consent for a Negative Option",
      "category": "affirmative_obligation",
      "summary": "Defendant must obtain the consumer's express informed consent before using Billing Information for a Negative Option Feature, through a standalone affirmative checkbox or signature for written offers, or oral confirmation for telephone offers, with voice recordings retained for 3 years for telemarketing transactions.",
      "verbatim_text": "A. For all written offers (including over the Internet, such as through a web-based application), obtain consent through a check box, signature, or other substantially similar method, which the consumer must affirmatively select or sign to accept the Negative Option Feature, and no other portion of the offer. Defendant shall disclose Clearly and Conspicuously, and immediately adjacent to such check box, signature, or substantially similar method of affirmative consent, only the following, with no additional information: 1. The extent to which the consumer must take affirmative action to avoid any Charges: (a) for the offered product or service, (b) of an increased amount after the trial or promotional period ends, and (c) on a recurring basis; 2. The total cost (or range of costs) the consumer will be Charged 40 Case 1:24-cv-21376-JLK Document 6 Entered on FLSD Docket 04/15/2024 Page 41 of 62 and, if applicable, the frequency of such Charges unless the consumer timely takes affirmative steps to prevent or stop such Charges; and 3. The deadline(s) (by date or frequency) by which the consumer must affirmatively act in order to stop all recurring Charges.\n\nB. For all oral offers, prior to obtaining any Billing Information from the consumer: 1. Clearly and Conspicuously disclose the information contained in sub-Section B of the Section titled Required Disclosures Relating To Negative Option Feature; and 2. Obtain affirmative unambiguous express oral confirmation that the consumer: (a) consents to being Charged for any product or service, including providing, at a minimum, the last 4 digits of the consumer’s account number to be Charged, (b) understands that the transaction includes a Negative Option Feature, and (c) understands the specific affirmative steps the consumer must take to prevent or stop further Charges.\n\nC. For transactions conducted through Telemarketing, Defendant shall maintain for 3 years from the date of each transaction an unedited voice recording of the entire transaction, including the prescribed statements set out in sub-Section XIII.B. Each recording must be retrievable by date and by the consumer’s name, telephone number, or Billing Information, and must be provided upon request to the consumer, the consumer’s bank, or any law enforcement entity.",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Deceptive Design / Dark Patterns"
      ],
      "remedy_types": [
        "Consumer Notification"
      ],
      "case_id": "05.24_cerebral_and_kyle_robertson",
      "company_name": "Cerebral, Inc.",
      "date_issued": "2024-05-15",
      "year": 2024,
      "administration": "Biden",
      "legal_authority": "Section 5(a) of the Federal Trade Commission Act, 15 U.S.C. § 45(a); Section 5(m)(1)(A) of the FTC Act, 15 U.S.C. § 45(m)(1)(A); Section 13(b) of the FTC Act, 15 U.S.C. § 53(b); Section 8023 of the Opioid Addiction Recovery Fraud Prevention Act of 2018, 15 U.S.C. § 45d; Section 5 of the Restore Online Shoppers' Confidence Act (ROSCA), 15 U.S.C. § 8404",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/222-3067-cerebral-inc-kyle-robertson-us-v",
      "docket_number": "24-cv-21376-JLK"
    },
    {
      "provision_number": "XIV",
      "title": "Simple Mechanism to Cancel Negative Option Feature",
      "category": "affirmative_obligation",
      "summary": "Defendant must provide consumers with a simple, easy-to-find, and easy-to-use cancellation mechanism that does not require unnecessary steps or use Dark Patterns, available through the same channel (Internet, phone, or mail) through which the consumer enrolled.",
      "verbatim_text": "A. Failing to provide a simple mechanism for the consumer to: (1) avoid being Charged, or Charged an increased amount, for a product or service and (2) immediately stop any recurring Charge. Such mechanism must: 1. Be easy to find; 2. Be easy to use to stop such Charge; and 3. Not require the consumer to take any action that is objectively unnecessary to cancel, or use a Dark Pattern. A “Dark Pattern” refers to a user interface that has the effect of impeding consumers’ expression of preference, manipulating consumers into taking certain action, or otherwise subverting consumers’ choice.\n\nB. If any consumers entered into the agreement to purchase a product or service including a Negative Option Feature over the Internet or a mobile phone application, failing to provide the mechanism through the same website, email address or other application.\n\nC. If any consumers entered into the agreement to purchase a product or service including a Negative Option Feature through an oral offer or acceptance, failing to provide such mechanisms through the use of a telephone number and a postal address.",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Deceptive Design / Dark Patterns"
      ],
      "remedy_types": [
        "Consumer Notification"
      ],
      "case_id": "05.24_cerebral_and_kyle_robertson",
      "company_name": "Cerebral, Inc.",
      "date_issued": "2024-05-15",
      "year": 2024,
      "administration": "Biden",
      "legal_authority": "Section 5(a) of the Federal Trade Commission Act, 15 U.S.C. § 45(a); Section 5(m)(1)(A) of the FTC Act, 15 U.S.C. § 45(m)(1)(A); Section 13(b) of the FTC Act, 15 U.S.C. § 53(b); Section 8023 of the Opioid Addiction Recovery Fraud Prevention Act of 2018, 15 U.S.C. § 45d; Section 5 of the Restore Online Shoppers' Confidence Act (ROSCA), 15 U.S.C. § 8404",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/222-3067-cerebral-inc-kyle-robertson-us-v",
      "docket_number": "24-cv-21376-JLK"
    },
    {
      "provision_number": "XV",
      "title": "Monetary Judgments for Monetary Relief and Civil Penalty",
      "category": "affirmative_obligation",
      "summary": "Defendant is ordered to pay $5,087,252.89 as monetary relief and $10,000,000 as a civil penalty, with $2,000,000 of the civil penalty paid immediately (the remainder suspended based on Defendant's financial representations) and the monetary relief paid within 7 days of the Order.",
      "verbatim_text": "C. Defendant is ordered to pay to Plaintiff, by making payment to the Treasurer of the United States, Five Million, Eighty-Seven Thousand, Two Hundred and Fifty-Two Dollars and Eighty-Nine Cents ($5,087,252.89), which, as Defendant stipulates, its undersigned counsel holds in escrow for no purpose other than payment to Plaintiff. Such payment must be made within 7 days of entry of this Order by electronic fund transfer in accordance with instructions provided by a representative of Plaintiff.\n\nD. Defendant is ordered to pay to Plaintiff, by making payment to the Treasurer of the United States, Two Million Dollars ($2,000,000), which, as Defendant stipulates, its undersigned counsel holds in escrow for no purpose other 43 Case 1:24-cv-21376-JLK Document 6 Entered on FLSD Docket 04/15/2024 Page 44 of 62 than payment to Plaintiff. Such payment must be made within 7 days of entry of this Order by electronic fund transfer in accordance with instructions provided by a representative of Plaintiff. Upon such payment, the remainder of the civil penalty judgment is suspended, subject to sub-Section E below.\n\nF. The suspension of the judgment will be lifted as to Defendant if, upon motion by the Commission or Plaintiff, the Court finds that Defendant failed to disclose any material asset, materially misstated the value of any asset, or made any other material misstatement or omission in the financial representations identified above. G. If the suspension of the judgment is lifted, the judgment becomes immediately due as to Defendant in the amount specified in sub-Section B above (which the parties stipulate only for purposes of this Section represents the amount of the civil penalty for the violations alleged in the Complaint) less any payment previously made pursuant to sub-Section D above, plus interest computed from the date of entry of this Order.",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Monetary Penalty"
      ],
      "case_id": "05.24_cerebral_and_kyle_robertson",
      "company_name": "Cerebral, Inc.",
      "date_issued": "2024-05-15",
      "year": 2024,
      "administration": "Biden",
      "legal_authority": "Section 5(a) of the Federal Trade Commission Act, 15 U.S.C. § 45(a); Section 5(m)(1)(A) of the FTC Act, 15 U.S.C. § 45(m)(1)(A); Section 13(b) of the FTC Act, 15 U.S.C. § 53(b); Section 8023 of the Opioid Addiction Recovery Fraud Prevention Act of 2018, 15 U.S.C. § 45d; Section 5 of the Restore Online Shoppers' Confidence Act (ROSCA), 15 U.S.C. § 8404",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/222-3067-cerebral-inc-kyle-robertson-us-v",
      "docket_number": "24-cv-21376-JLK"
    },
    {
      "provision_number": "XVI",
      "title": "Additional Monetary Provisions",
      "category": "affirmative_obligation",
      "summary": "Defendant relinquishes all rights to transferred assets, the Complaint's facts may be taken as true in future proceedings, and monetary relief funds may be used for consumer redress or, if impracticable, for related relief or deposited into the U.S. Treasury as an additional civil penalty.",
      "verbatim_text": "A. Defendant relinquishes dominion and all legal and equitable right, title, and interest in all assets transferred pursuant to this Order and may not seek the return of any assets.\n\nD. Defendant acknowledges that its Taxpayer Identification Numbers (Social Security Numbers or Employer Identification Numbers), which Defendant must submit to the Commission, may be used for collecting and reporting on any delinquent amount arising out of this Order, in accordance with 31 U.S.C. § 7701.\n\nE. All money received by the Commission pursuant to this Order as monetary relief may be deposited into a fund administered by the Commission or its designee to be used for consumer relief, such as redress and any attendant expenses for the administration of any redress fund. If a representative of the Commission decides that direct redress to consumers is wholly or partially 46 Case 1:24-cv-21376-JLK Document 6 Entered on FLSD Docket 04/15/2024 Page 47 of 62 impracticable or money remains after such redress is completed, the Commission may apply any remaining money for such related relief (including consumer information remedies) as it determines to be reasonably related to Defendant’s practices alleged in the Complaint. Any money not used for relief is to be deposited to the U.S. Treasury as an additional civil penalty. Defendant has no right to challenge any actions the Commission or its representatives may take pursuant to this sub-Section or Section XVII.",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Monetary Penalty"
      ],
      "case_id": "05.24_cerebral_and_kyle_robertson",
      "company_name": "Cerebral, Inc.",
      "date_issued": "2024-05-15",
      "year": 2024,
      "administration": "Biden",
      "legal_authority": "Section 5(a) of the Federal Trade Commission Act, 15 U.S.C. § 45(a); Section 5(m)(1)(A) of the FTC Act, 15 U.S.C. § 45(m)(1)(A); Section 13(b) of the FTC Act, 15 U.S.C. § 53(b); Section 8023 of the Opioid Addiction Recovery Fraud Prevention Act of 2018, 15 U.S.C. § 45d; Section 5 of the Restore Online Shoppers' Confidence Act (ROSCA), 15 U.S.C. § 8404",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/222-3067-cerebral-inc-kyle-robertson-us-v",
      "docket_number": "24-cv-21376-JLK"
    },
    {
      "provision_number": "XVII",
      "title": "Independent Redress Administrator",
      "category": "affirmative_obligation",
      "summary": "If the FTC determines redress is practicable, an independent redress administrator will be appointed; Defendant must provide Eligible Customer information within 7 days of notification, cooperate fully with the Administrator, and pay all Administrator costs and fees.",
      "verbatim_text": "B. Within 7 days of receipt of a written notification from a representative of the Commission that redress to consumers is practicable, Defendant must provide the Administrator with all information necessary to identify all Eligible Customers and all information necessary for the efficient administration of consumer redress to those Eligible Customers. Defendant stipulates it has provided such information to its undersigned counsel. If a representative of the 47 Case 1:24-cv-21376-JLK Document 6 Entered on FLSD Docket 04/15/2024 Page 48 of 62 Commission or the Administrator requests any additional information related to consumer redress, Defendant must provide it, in the form prescribed by the Commission or the Administrator, within 14 days of the request, provided that, any request for personally identifying Eligible Customer information shall be directed solely to the Administrator.\n\nD. Defendant must fully cooperate with and assist the Administrator. That cooperation and assistance must include providing information to the Administrator as the Administrator deems necessary to be fully informed and discharge the responsibilities of the Administrator under this Order. For matters concerning this Order, the Administrator is authorized to communicate directly with Defendant.\n\nE. Defendant is responsible for all costs and fees invoiced by the Administrator for its services, and the provision of consumer redress. The FTC is not responsible for any such costs or fees. None of the funds used to satisfy Section XV of this Order shall be used to pay for the Administrator or any of its associated costs or fees.",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Consumer Redress"
      ],
      "case_id": "05.24_cerebral_and_kyle_robertson",
      "company_name": "Cerebral, Inc.",
      "date_issued": "2024-05-15",
      "year": 2024,
      "administration": "Biden",
      "legal_authority": "Section 5(a) of the Federal Trade Commission Act, 15 U.S.C. § 45(a); Section 5(m)(1)(A) of the FTC Act, 15 U.S.C. § 45(m)(1)(A); Section 13(b) of the FTC Act, 15 U.S.C. § 53(b); Section 8023 of the Opioid Addiction Recovery Fraud Prevention Act of 2018, 15 U.S.C. § 45d; Section 5 of the Restore Online Shoppers' Confidence Act (ROSCA), 15 U.S.C. § 8404",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/222-3067-cerebral-inc-kyle-robertson-us-v",
      "docket_number": "24-cv-21376-JLK"
    },
    {
      "provision_number": "XVIII",
      "title": "Order Acknowledgments",
      "category": "acknowledgment",
      "summary": "Defendant must submit a sworn acknowledgment of receipt of the Order within 7 days, deliver copies of the Order to all relevant personnel and businesses within 7 days (or before they assume responsibilities), and obtain signed acknowledgments of receipt within 30 days.",
      "verbatim_text": "Defendant, within 7 days of entry of this Order, must submit to the Commission an acknowledgment of receipt of this Order sworn under penalty of perjury.\n\nB. For 10 years after entry of this Order, for all Covered Businesses and any business that Defendant, individually or collectively with any other Defendant, is the majority owner or controls directly or indirectly, Defendant must deliver a copy of this Order to: (1) all principals, officers, directors, and LLC managers and members; (2) all employees and agents having managerial responsibilities for privacy or data security; (3) all employees and agents having responsibilities for the promotion or sale of health-related products or services, or products or services with a Negative Option Feature; (4) any business entity resulting from any change in structure as set forth in the Section titled Compliance Reporting; and (5) each Covered Business. Delivery must occur within 7 days of entry of this Order for current personnel. For all others, delivery must occur before they assume their responsibilities.\n\nC. From each individual or entity to which a Defendant delivered a copy of this Order, that Defendant must obtain, within 30 days, a signed and dated acknowledgment of receipt of this Order.",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Order Administration"
      ],
      "case_id": "05.24_cerebral_and_kyle_robertson",
      "company_name": "Cerebral, Inc.",
      "date_issued": "2024-05-15",
      "year": 2024,
      "administration": "Biden",
      "legal_authority": "Section 5(a) of the Federal Trade Commission Act, 15 U.S.C. § 45(a); Section 5(m)(1)(A) of the FTC Act, 15 U.S.C. § 45(m)(1)(A); Section 13(b) of the FTC Act, 15 U.S.C. § 53(b); Section 8023 of the Opioid Addiction Recovery Fraud Prevention Act of 2018, 15 U.S.C. § 45d; Section 5 of the Restore Online Shoppers' Confidence Act (ROSCA), 15 U.S.C. § 8404",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/222-3067-cerebral-inc-kyle-robertson-us-v",
      "docket_number": "24-cv-21376-JLK"
    },
    {
      "provision_number": "XIX",
      "title": "Compliance Reporting",
      "category": "compliance_reporting",
      "summary": "Defendant must submit a sworn compliance report one year after the Order's entry and submit sworn compliance notices within 14 days of any change in points of contact or corporate structure for 20 years; all submissions must be made to the FTC via email or overnight courier.",
      "verbatim_text": "A. One year after entry of this Order, Defendant must submit a compliance report, sworn under penalty of perjury. In this report, Defendant must: 1. Identify the primary physical, postal, and email address and telephone number, as designated points of contact, which representatives of the Commission and Plaintiff may use to communicate with Defendant; 2. Identify all of Defendant’s businesses (including any Covered Business) by all of their names, telephone numbers, and physical, postal, email, and Internet addresses; 3. Describe the activities of each business, including the products and services offered, the means of advertising, marketing, and sales, including any marketing with a Negative Option Feature, describe in detail how Defendant’s privacy policies, procedures, and practices and data security policies, procedures, and practices have changed since March 1, 2023, and describe the involvement of any other defendant; 4. Describe in detail whether and how Defendant is in compliance with each Section of this Order; and 5. Provide a copy of each Order Acknowledgment obtained pursuant to this Order, unless previously submitted to the Commission.\n\nB. For 20 years after entry of this Order, Defendant must submit a compliance notice, sworn under penalty of perjury, within 14 days of any change in the following: 52 Case 1:24-cv-21376-JLK Document 6 Entered on FLSD Docket 04/15/2024 Page 53 of 62 1. Any designated point of contact; or 2. The structure of Defendant, any Covered Business, or any entity that Defendant has any ownership interest in or controls directly or indirectly that may affect compliance obligations arising under this Order, including: creation, merger, sale, or dissolution of the entity or any subsidiary, parent, or affiliate that engages in any acts or practices subject to this Order.\n\nC. Defendant must submit to the Commission notice of the filing of any bankruptcy petition, insolvency proceeding, or similar proceeding by or against Defendant within 14 days of its filing.\n\nD. Any submission to the Commission required by this Order to be sworn under penalty of perjury must be true and accurate and comply with 28 U.S.C. § 1746, such as by concluding: “I declare under penalty of perjury under the laws of the United States of America that the foregoing is true and correct. Executed on: _____” and supplying the date, signatory’s full name, title (if applicable), and signature.\n\nE. Unless otherwise directed by a Commission representative in writing, all submissions to the Commission pursuant to this Order must be emailed to DEbrief@ftc.gov or sent by overnight courier (not the U.S. Postal Service) to: Associate Director for Enforcement, Bureau of Consumer Protection, Federal 53 Case 1:24-cv-21376-JLK Document 6 Entered on FLSD Docket 04/15/2024 Page 54 of 62 Trade Commission, 600 Pennsylvania Avenue NW, Washington, DC 20580. The subject line must begin: “FTC v. Cerebral, Inc., File No. 2223067.”",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Compliance Monitoring"
      ],
      "case_id": "05.24_cerebral_and_kyle_robertson",
      "company_name": "Cerebral, Inc.",
      "date_issued": "2024-05-15",
      "year": 2024,
      "administration": "Biden",
      "legal_authority": "Section 5(a) of the Federal Trade Commission Act, 15 U.S.C. § 45(a); Section 5(m)(1)(A) of the FTC Act, 15 U.S.C. § 45(m)(1)(A); Section 13(b) of the FTC Act, 15 U.S.C. § 53(b); Section 8023 of the Opioid Addiction Recovery Fraud Prevention Act of 2018, 15 U.S.C. § 45d; Section 5 of the Restore Online Shoppers' Confidence Act (ROSCA), 15 U.S.C. § 8404",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/222-3067-cerebral-inc-kyle-robertson-us-v",
      "docket_number": "24-cv-21376-JLK"
    },
    {
      "provision_number": "XX",
      "title": "Recordkeeping",
      "category": "recordkeeping",
      "summary": "Defendant must create and retain for 5 years (over a 20-year period) accounting records, personnel records, consumer complaint records, all compliance records, and copies of all marketing materials related to health services and Negative Option Feature products.",
      "verbatim_text": "IT IS FURTHER ORDERED that Defendant must create certain records for 20 years after entry of the Order, and retain each such record for 5 years. Specifically, Defendant, in connection with the marketing of any health services or products or any service or product with a Negative Option Feature, must create and retain the following records: A. Accounting records showing the revenues from all products or services sold; B. Personnel records showing, for each person providing services, whether as an employee or otherwise, that person’s: name; addresses; telephone numbers; job title or position; dates of service; and (if applicable) the reason for termination; C. Records of all consumer complaints and refund requests, whether received directly or indirectly, such as through a third party, and any response; D. All records necessary to demonstrate full compliance with each Section of this Order, including all submissions to the Commission; and E. A copy of each unique advertisement or other marketing material offering a service or product with a Negative Option feature, or containing a 54 Case 1:24-cv-21376-JLK Document 6 Entered on FLSD Docket 04/15/2024 Page 55 of 62 privacy or data security Commitment, including any representation relating to the handling or treatment (such as Deletion) of Covered Information.",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Recordkeeping"
      ],
      "case_id": "05.24_cerebral_and_kyle_robertson",
      "company_name": "Cerebral, Inc.",
      "date_issued": "2024-05-15",
      "year": 2024,
      "administration": "Biden",
      "legal_authority": "Section 5(a) of the Federal Trade Commission Act, 15 U.S.C. § 45(a); Section 5(m)(1)(A) of the FTC Act, 15 U.S.C. § 45(m)(1)(A); Section 13(b) of the FTC Act, 15 U.S.C. § 53(b); Section 8023 of the Opioid Addiction Recovery Fraud Prevention Act of 2018, 15 U.S.C. § 45d; Section 5 of the Restore Online Shoppers' Confidence Act (ROSCA), 15 U.S.C. § 8404",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/222-3067-cerebral-inc-kyle-robertson-us-v",
      "docket_number": "24-cv-21376-JLK"
    },
    {
      "provision_number": "XXI",
      "title": "Compliance Monitoring",
      "category": "monitoring",
      "summary": "The Commission and Plaintiff are authorized to monitor Defendant's compliance through compliance reports, depositions, document production, and direct communications with Defendant and its employees; Defendant must comply with written requests within 14 days.",
      "verbatim_text": "A. Within 14 days of receipt of a written request from a representative of the Commission or Plaintiff, Defendant must: submit additional compliance reports or other requested information, which must be sworn under penalty of perjury; appear for depositions; and produce documents for inspection and copying. The Commission and Plaintiff are also authorized to obtain discovery, without further leave of court, using any of the procedures prescribed by Federal Rules of Civil Procedure 29, 30 (including telephonic depositions), 31, 33, 34, 36, 45, and 69.\n\nB. For matters concerning this Order, the Commission and Plaintiff are authorized to communicate directly with Defendant. Defendant must permit representatives of the Commission and Plaintiff to interview any employee or other person affiliated with any Defendant who has agreed to such an interview. The person interviewed may have counsel present.\n\nC. The Commission and Plaintiff may use all other lawful means, including posing, through its representatives as consumers, suppliers, or other 55 Case 1:24-cv-21376-JLK Document 6 Entered on FLSD Docket 04/15/2024 Page 56 of 62 individuals or entities, to Defendant or any individual or entity affiliated with Defendant, without the necessity of identification or prior notice. Nothing in this Order limits the Commission’s lawful use of compulsory process, pursuant to Sections 9 and 20 of the FTC Act, 15 U.S.C. §§ 49, 57b-1.",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Compliance Monitoring"
      ],
      "case_id": "05.24_cerebral_and_kyle_robertson",
      "company_name": "Cerebral, Inc.",
      "date_issued": "2024-05-15",
      "year": 2024,
      "administration": "Biden",
      "legal_authority": "Section 5(a) of the Federal Trade Commission Act, 15 U.S.C. § 45(a); Section 5(m)(1)(A) of the FTC Act, 15 U.S.C. § 45(m)(1)(A); Section 13(b) of the FTC Act, 15 U.S.C. § 53(b); Section 8023 of the Opioid Addiction Recovery Fraud Prevention Act of 2018, 15 U.S.C. § 45d; Section 5 of the Restore Online Shoppers' Confidence Act (ROSCA), 15 U.S.C. § 8404",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/222-3067-cerebral-inc-kyle-robertson-us-v",
      "docket_number": "24-cv-21376-JLK"
    },
    {
      "provision_number": "XXII",
      "title": "Cooperation",
      "category": "affirmative_obligation",
      "summary": "Defendant must fully cooperate with Plaintiff and the Commission in this case and any related investigation, providing truthful and complete information and causing its personnel to appear for proceedings upon 5 days' written notice.",
      "verbatim_text": "IT IS FURTHER ORDERED that Defendant Cerebral, Inc. must fully cooperate with representatives of Plaintiff and the Commission in this case and in any investigation related to or associated with the transactions or the occurrences that are the subject of the Complaint. Defendant must provide truthful and complete information, evidence, and testimony. Defendant must cause its officers, employees, representatives, or agents to appear for interviews, discovery, hearings, trials, and any other proceedings that a Plaintiff or Commission representative may reasonably request upon 5 days’ written notice, or other reasonable notice, at such places and times as a Plaintiff or Commission representative may designate, without the service of a subpoena.",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Third-Party Assessment"
      ],
      "case_id": "05.24_cerebral_and_kyle_robertson",
      "company_name": "Cerebral, Inc.",
      "date_issued": "2024-05-15",
      "year": 2024,
      "administration": "Biden",
      "legal_authority": "Section 5(a) of the Federal Trade Commission Act, 15 U.S.C. § 45(a); Section 5(m)(1)(A) of the FTC Act, 15 U.S.C. § 45(m)(1)(A); Section 13(b) of the FTC Act, 15 U.S.C. § 53(b); Section 8023 of the Opioid Addiction Recovery Fraud Prevention Act of 2018, 15 U.S.C. § 45d; Section 5 of the Restore Online Shoppers' Confidence Act (ROSCA), 15 U.S.C. § 8404",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/222-3067-cerebral-inc-kyle-robertson-us-v",
      "docket_number": "24-cv-21376-JLK"
    },
    {
      "provision_number": "XXIII",
      "title": "Retention of Jurisdiction",
      "category": "duration",
      "summary": "The Court retains jurisdiction over this matter for purposes of construction, modification, and enforcement of the Order.",
      "verbatim_text": "IT IS FURTHER ORDERED that this Court retains jurisdiction of this matter for purposes of construction, modification, and enforcement of this Order.",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Order Administration"
      ],
      "case_id": "05.24_cerebral_and_kyle_robertson",
      "company_name": "Cerebral, Inc.",
      "date_issued": "2024-05-15",
      "year": 2024,
      "administration": "Biden",
      "legal_authority": "Section 5(a) of the Federal Trade Commission Act, 15 U.S.C. § 45(a); Section 5(m)(1)(A) of the FTC Act, 15 U.S.C. § 45(m)(1)(A); Section 13(b) of the FTC Act, 15 U.S.C. § 53(b); Section 8023 of the Opioid Addiction Recovery Fraud Prevention Act of 2018, 15 U.S.C. § 45d; Section 5 of the Restore Online Shoppers' Confidence Act (ROSCA), 15 U.S.C. § 8404",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/222-3067-cerebral-inc-kyle-robertson-us-v",
      "docket_number": "24-cv-21376-JLK"
    },
    {
      "provision_number": "I",
      "title": "Ban on Disclosure of Health Information for Advertising Purposes",
      "category": "prohibition",
      "summary": "Defendant is permanently enjoined from disclosing Health Information to Third Parties for Advertising Purposes, with limited exceptions for analytics, direct consumer communications, and contextual advertising.",
      "verbatim_text": "A. Defendant; Defendant’s officers, agents, employees, and attorneys; and all other persons in active concert or participation with any of them, who receive actual notice of this Order, whether acting directly or indirectly, are permanently restrained and enjoined from disclosing Health Information to Third Parties for Advertising Purposes.\n\nB. For purposes of this Section, Advertising Purposes means advertising, marketing promoting, offering, offering for sale, or selling any products or services on, by, or through Third Party websites, Third Party mobile applications, or Third Party services. Advertising Purposes shall not include: (i) reporting and analytics related to understanding advertising and advertising effectiveness, such as statistical reporting, traffic analysis, understanding the number of and type of ads served, or conversion measurement, provided that any Third Party reporting or analytics service is restricted from using any Covered Information received from or provided to Defendant for any purpose other than to provide the reporting and analytics services to Defendant; (ii) communications, services, or products requested by a consumer that are sent by Defendant directly to the consumer, such as Defendant texting, emailing, or mailing a consumer, or showing content on Defendant’s own properties to a consumer; or (iii) contextual advertising, meaning non-personalized advertising shown as part of a consumer’s current interaction with Defendant’s 8 Case: 1:23-cv-03107 Document #: 5 Filed: 06/22/23 Page 9 of 37 PageID #:81 websites or mobile applications, provided that the consumer’s Covered Information is not disclosed to a Third Party and is not used to build a profile about the consumer or otherwise alter the consumer’s experience outside the current interaction with Defendant’s websites or mobile applications.",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Prohibition"
      ],
      "case_id": "06.23_easy_healthcare_corporation",
      "company_name": "Easy Healthcare Corporation",
      "date_issued": "2023-06-15",
      "year": 2023,
      "administration": "Biden",
      "legal_authority": "Section 5(a) of the Federal Trade Commission Act, 15 U.S.C. § 45(a), and the Health Breach Notification Rule, 16 C.F.R. § 318",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/202-3186-easy-healthcare-corporation-us-v",
      "docket_number": "1:23-cv-3107"
    },
    {
      "provision_number": "II",
      "title": "Prohibition Against Misrepresentations",
      "category": "prohibition",
      "summary": "Defendant is permanently enjoined from misrepresenting the extent to which it collects, uses, discloses, or protects Covered Information, consumer privacy controls, or the purposes for which Covered Information is used.",
      "verbatim_text": "A. the extent to which they collect, maintain, use, disclose, or permit access to any Covered Information, or protect the privacy, confidentiality, security, or integrity of any Covered Information;\n\nB. the extent to which the Covered Business collects, maintains, uses, discloses, deletes, or permits or denies access to any Covered Information, or the extent to the Covered Business protects the availability, confidentiality, or integrity of any Covered Information;\n\nC. the purposes for which the Covered Business, or any entity to whom the Covered Business discloses or permits access to Covered Information, collects, maintains, uses, discloses, or permits access to any Covered Information;\n\nD. the extent to which a consumer can maintain privacy and anonymity associated with the consumer’s use of products or services offered by Covered Businesses;\n\nE. the extent to which consumers may exercise control over the Covered Business’ collection of, maintenance of, use of, deletion of, disclosure of, or permission of access to Covered Information, and the steps a consumer must take to implement such controls; and\n\nF. the extent to which the Covered Business otherwise protects the privacy, security, availability, confidentiality, or integrity of Covered Information.",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Prohibition"
      ],
      "case_id": "06.23_easy_healthcare_corporation",
      "company_name": "Easy Healthcare Corporation",
      "date_issued": "2023-06-15",
      "year": 2023,
      "administration": "Biden",
      "legal_authority": "Section 5(a) of the Federal Trade Commission Act, 15 U.S.C. § 45(a), and the Health Breach Notification Rule, 16 C.F.R. § 318",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/202-3186-easy-healthcare-corporation-us-v",
      "docket_number": "1:23-cv-3107"
    },
    {
      "provision_number": "III",
      "title": "Prohibition Against Disclosure of Health Information Without Affirmative Express Consent and Notice",
      "category": "prohibition",
      "summary": "Defendant is permanently enjoined from disclosing Health Information to Third Parties for non-Advertising Purposes without first obtaining Affirmative Express Consent, and must provide Clear and Conspicuous notice of the categories of Health Information disclosed and the identities and purposes of Third Parties.",
      "verbatim_text": "A. Defendant; Defendant’s officers, agents, employees, and attorneys; and all other persons in active concert or participation with any of them, who receive actual notice of this Order, in connection with any product or service, are permanently restrained and enjoined from disclosing Health Information to Third Parties for non-Advertising Purposes, without first obtaining Affirmative Express Consent.\n\nC. When obtaining Affirmative Express Consent required under this Section, Defendant must provide notice Clearly and Conspicuously that states the categories of Health Information that will be disclosed to Third Parties, the identities of such Third Parties, all purposes for Defendant’s disclosures of such Health Information, what the Third Party is permitted to do with the Health Information, and whether or not any of the Health Information is protected under federal or state laws, including HIPAA or the California Consumer Privacy Act.",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Prohibition"
      ],
      "case_id": "06.23_easy_healthcare_corporation",
      "company_name": "Easy Healthcare Corporation",
      "date_issued": "2023-06-15",
      "year": 2023,
      "administration": "Biden",
      "legal_authority": "Section 5(a) of the Federal Trade Commission Act, 15 U.S.C. § 45(a), and the Health Breach Notification Rule, 16 C.F.R. § 318",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/202-3186-easy-healthcare-corporation-us-v",
      "docket_number": "1:23-cv-3107"
    },
    {
      "provision_number": "IV",
      "title": "Health Breach Notifications",
      "category": "affirmative_obligation",
      "summary": "Following discovery of a Breach of Security of Unsecured PHR Identifiable Health Information, Defendant must notify affected individuals, the FTC, and prominent media outlets (if 500+ residents affected), within prescribed timeframes and with prescribed content and format.",
      "verbatim_text": "1. notify each individual who is a citizen or resident of the United States whose Unsecured PHR Identifiable Health Information was acquired by an unauthorized person as a result of such Breach of Security;\n\nE. Defendant shall, in accordance with Subsection IV.A.2, provide notice to the Federal Trade Commission following the discovery of a Breach of Security. If the Breach of Security involves the Unsecured PHR Identifiable Health Information of five hundred (500) or more individuals, then such notice shall be provided as soon as possible and in no case later than ten (10) business days following the date of discovery of the Breach of Security. If the Breach of Security involves the Unsecured PHR Identifiable Health Information of fewer than five hundred (500) individuals, Defendant may maintain a log of any such Breach of Security, and submit 13 Case: 1:23-cv-03107 Document #: 5 Filed: 06/22/23 Page 14 of 37 PageID #:86 such a log annually to the Federal Trade Commission no later than sixty (60) calendar days following the end of the calendar year, documenting Breaches of Security from the preceding calendar year. Unless otherwise directed by a Commission representative in writing, Defendant must submit all notices and logs required under this Subsection to DEbrief@ftc.gov or sent by overnight courier (not the U.S. Postal Service) to: Associate Director for Enforcement, Bureau of Consumer Protection, Federal Trade Commission, 600 Pennsylvania Avenue NW, Washington, DC 20580. The subject line must begin: “U.S. v. Easy Healthcare Corporation.”\n\n3. notify prominent media outlets in a state or jurisdiction, if the Unsecured PHR Identifiable Health Information of five hundred (500) or more residents of such state or 11 Case: 1:23-cv-03107 Document #: 5 Filed: 06/22/23 Page 12 of 37 PageID #:84 jurisdiction is, or is reasonably believed to have been, acquired during such Breach of Security.\n\nC. Except as otherwise provided, all notifications to individuals or the media required under this Section shall be sent without unreasonable delay and in no case later than sixty (60) calendar days after the discovery. If a law enforcement official determines that a notification, notice, or posting required under this Section would impede a criminal investigation or cause damage to national security, such notification, notice, or posting shall be delayed. This Subsection shall be implemented in the same manner as provided under 45 CFR 164.528(a)(2), in the case of a disclosure covered under such section.\n\nD. Defendant providing notice under Subsection IV.A.1 shall do so by providing it in the following form: 1. Written notice, by first-class mail to the individual at the last known address of the individual, or by email or within-application messaging, if the individual is given a clear, conspicuous, and reasonable opportunity to receive notification by first-class mail, and the individual does not exercise that choice. If the individual is deceased, Defendant must provide such notice to the next of kin of the individual if the individual had provided contact information for his or her next of kin, along with authorization to contact them. The notice may be provided in one or more mailings as information is available. 2. If, after making reasonable efforts to contact all individuals to whom 12 Case: 1:23-cv-03107 Document #: 5 Filed: 06/22/23 Page 13 of 37 PageID #:85 notice is required under Subsection IV.A.1, through the means provided in Subsection IV.D.1, Defendant finds that contact information for ten (10) or more individuals is insufficient or out-of- date, Defendant shall provide substitute notice, which shall be reasonably calculated to reach the individuals affected by the Breach of Security, in the following form: a. Through a conspicuous posting for a period of ninety (90) days on the home page of its Web site; or b. In major print or broadcast media, including major media in geographic areas where the individuals affected by the Breach of Security likely reside. Such a notice in media or web posting shall include a toll-free phone number, which shall remain active for at least ninety (90) days, where an individual can learn whether or not the individual’s PHR Identifiable Health Information may be included in the Breach of Security.\n\nF. Regardless of the method by which notice is provided to individuals, the Federal Trade Commission, or the media under this Section, notice of a Breach of Security shall be in plain language and include, to the extent possible, the following: 1. A brief description of what happened, including the date of the Breach of Security and the date of the discovery of the Breach of Security, if known; 2. A description of the types of PHR Identifiable Health Information that were involved in the Breach of Security (such as full name, Social Security number, date of birth, home address, account number, or disability code); 3. Steps individuals should take to protect themselves from potential harm resulting from the Breach of Security; 4. A brief description of what the entity that suffered the Breach of Security is doing to investigate the breach, to mitigate harm, and to protect against any further breaches; and 5. Contact procedures for individuals to ask questions or learn additional information, which shall include a tollfree telephone number, an email address, Web site, or postal address.",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Order Administration"
      ],
      "case_id": "06.23_easy_healthcare_corporation",
      "company_name": "Easy Healthcare Corporation",
      "date_issued": "2023-06-15",
      "year": 2023,
      "administration": "Biden",
      "legal_authority": "Section 5(a) of the Federal Trade Commission Act, 15 U.S.C. § 45(a), and the Health Breach Notification Rule, 16 C.F.R. § 318",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/202-3186-easy-healthcare-corporation-us-v",
      "docket_number": "1:23-cv-3107"
    },
    {
      "provision_number": "V",
      "title": "Notice to Users",
      "category": "affirmative_obligation",
      "summary": "Within 28 days of Order entry, Defendant must post a mandated notice on its websites and mobile application home screen, leave it in place for 6 months, and email it to Covered Users who used Premom from November 2017 to August 2022.",
      "verbatim_text": "IT IS FURTHER ORDERED that, within twenty-eight (28) days of entry of this Order, Defendant shall post Clearly and Conspicuously on the home page of Defendant’s websites (https://healthcare-manager.com; http://premom.com) and the home screen of Defendant’s mobile application (Premom Ovulation Tracker), a link to an exact copy of the notice attached hereto as Exhibit A (“Notice”). Defendant must leave this Notice in place for six (6) months after posting it. Defendant must also email the Notice to Covered Users that downloaded and\n\nafter posting it. Defendant must also email the Notice to Covered Users that downloaded and used Premom from November 2017 to August 2022, provided however, that if Defendant does not have email information for any such Covered User, Defendant must send the Notice to that Covered User through Defendant’s primary means of communicating with that Covered User (such as a notification within Defendant’s mobile application). Defendant shall not include with the Notice any other information, documents, or attachments.",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Consumer Notification"
      ],
      "case_id": "06.23_easy_healthcare_corporation",
      "company_name": "Easy Healthcare Corporation",
      "date_issued": "2023-06-15",
      "year": 2023,
      "administration": "Biden",
      "legal_authority": "Section 5(a) of the Federal Trade Commission Act, 15 U.S.C. § 45(a), and the Health Breach Notification Rule, 16 C.F.R. § 318",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/202-3186-easy-healthcare-corporation-us-v",
      "docket_number": "1:23-cv-3107"
    },
    {
      "provision_number": "VI",
      "title": "Deletion of Covered Information",
      "category": "affirmative_obligation",
      "summary": "Within 45 days of Order entry, Defendant must identify all Third Parties that received Covered Information, notify them of the FTC allegations, instruct specific Third Parties (Jiguang, Umeng, AppsFlyer, Google) to delete Covered Information and Health Information of Covered Users, and provide all related instructions and confirmations to the FTC.",
      "verbatim_text": "A. Defendant must 1. identify all Third Parties that received Covered Information of Covered Users from Defendant in any form, including hashed or encrypted Covered Information, identify the Covered Information of Covered Users received, provide a copy of the Complaint and Order to all Third Parties that received Covered Information, and notify all such Third Parties in writing that the Federal Trade Commission alleged that Defendant disclosed Covered Information of Covered Users in a manner that was unfair or deceptive and in violation of the FTC Act; and\n\n2. instruct Jiguang and Umeng to Delete all Covered Information received from Defendant of Covered Users that downloaded and used the Premom Ovulation Tracker mobile application from November 2017 through August 2020 and demand written confirmation that all Covered Information has been deleted; and (ii) AppsFlyer, Inc. and Google, LLC, to Delete all Health Information collected respectively through the AppsFlyer SDK or the Google Analytics for Firebase SDK of Covered Users that downloaded and used Premom from November 2017 through August 2022 and demand written confirmation that all the Health Information of such Covered Users has been deleted.\n\nB. Defendant’s instruction to each such Third Party under Subsection A shall include a description of the Covered Information or Health Information, as relevant, of Covered Users shared with the Third Party during the relevant time period. Defendant must provide all instructions sent to the Third Parties to: Associate Director for Enforcement, Bureau of Consumer Protection, Federal Trade Commission, 600 Pennsylvania Avenue NW, Washington, DC 20580. The subject line must begin: “United States v. Easy Healthcare Corporation.”\n\nC. Defendant shall not disclose any Covered Information in any form, including hashed or encrypted Covered Information, to any Third Party identified in Subsection A above until Defendant confirm each Third Party’s receipt of the instructions required by Subsection A above. Defendant must provide all receipts of confirmation and any responses from Third Parties within five (5) days of receipt to: DEbrief@ftc.gov or sent by overnight courier (not the U.S. Postal Service) to: Associate Director for Enforcement, Bureau of Consumer Protection, Federal Trade Commission, 600 Pennsylvania Avenue NW, Washington, DC 20580. The subject line must begin: “United States v. Easy Healthcare Corporation.”\n\nD. Defendant shall not use any Third Party identified in Subsection A above to advertise, market, promote, offer, offer for sale, or sell any product or service until Defendant confirm each Third Party’s receipt of the instructions required by Subsection A above.",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Data Deletion"
      ],
      "case_id": "06.23_easy_healthcare_corporation",
      "company_name": "Easy Healthcare Corporation",
      "date_issued": "2023-06-15",
      "year": 2023,
      "administration": "Biden",
      "legal_authority": "Section 5(a) of the Federal Trade Commission Act, 15 U.S.C. § 45(a), and the Health Breach Notification Rule, 16 C.F.R. § 318",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/202-3186-easy-healthcare-corporation-us-v",
      "docket_number": "1:23-cv-3107"
    },
    {
      "provision_number": "VII",
      "title": "Mandated Privacy and Information Security Program",
      "category": "affirmative_obligation",
      "summary": "Within 60 days of Order entry, Defendant must establish and maintain a comprehensive privacy and information security program covering documentation, governance, risk assessment, safeguards (including data inventory, access controls, training, data retention, and SDK audits), periodic evaluation, service provider oversight, and Clear and Conspicuous disclosures to consumers.",
      "verbatim_text": "IT IS FURTHER ORDERED that any Covered Business, in connection with the collection, maintenance, use, disclosure of, or provision of access to, Covered Information, must, within sixty (60) days of entry of this Order, establish and implement, and thereafter maintain, a comprehensive privacy and information security program (“Program”) that protects the privacy, security, availability, confidentiality, and integrity of such Covered Information. To satisfy this requirement, Defendant must, at a minimum:\n\nA. Document in writing the content, implementation, and maintenance of the Program;\n\nB. Provide the written program and any evaluations thereof or updates thereto to each Covered Business’s board of directors or governing body or, if no such board or equivalent governing body exists, to a senior officer of the Covered Business responsible for the Covered Business’s Program at least once every twelve (12) months and promptly (not to exceed thirty (30) days) after a Covered Incident;\n\nC. Designate a qualified employee or employees, who report(s) directly to the Chief Executive Officer(s) or, in the event a Chief Executive Officer role does not exist, a similarly- situated executive, to coordinate and be responsible for the Program; and keep the Chief Executive Officer(s) and Board of Directors informed of the Program, including all actions and procedures implemented to comply with the requirements of this Order, and any actions and procedures to be implemented to ensure continued compliance with this Order;\n\nD. Assess and document, at least once every twelve (12) months and promptly (not to exceed thirty (30) days) following a Covered Incident, internal and external risks in each area of the Covered Business’s operations to the privacy, security, availability, confidentiality, and integrity of Covered Information that could result in the unauthorized access, collection, use, destruction, or disclosure of, or provision of access to, Covered Information;\n\nE. Design, implement, maintain, and document safeguards that control for the internal and external risks to the privacy, security, availability, confidentiality, and integrity of Covered Information identified by each Covered Business in response to Subsection VII.D. Each safeguard must be based on the volume and sensitivity of the Covered Information that is at risk, and the likelihood that the risk could be realized and result in the unauthorized access, collection, use, destruction, disclosure of, or provision of access to, the Covered Information. Such safeguards must also include: 1. policies, procedures, and technical measures to systematically inventory Covered Information in the Covered Business’s control and delete Covered Information that is no longer necessary to fulfill the purpose for which the Covered Information was collected; 2. policies, procedures, and technical measures to prevent the collection, maintenance, use, or disclosure of, or provision of access to, Covered Information inconsistent with the Covered Business’s representations to consumers; 3. audits, assessments, and reviews of the contracts, privacy policies, and terms of service associated with any Third Party to which each Covered Business discloses or provides access to Covered Information; 4. policies, procedures, and controls to ensure the Covered Business complies with Sections I-IV above; 18 Case: 1:23-cv-03107 Document #: 5 Filed: 06/22/23 Page 19 of 37 PageID #:91 5. policies and technical measures that limit employee and contractor access to Covered Information to only those employees and contractors with a legitimate business need to access such Covered Information; 6. mandatory privacy training programs for all employees on at least an annual basis, updated to address the collection, use, and disclosure of Covered Information; any internal or external risks identified by each Covered Business in Subsection VII.D and safeguards implemented pursuant to Subsection VII.E, that includes training on the requirements of this Order; 7. a data retention policy that, at a minimum, includes a. a retention schedule that limits the retention of Covered Information for only as long as is reasonably necessary to fulfill the purpose for which the Covered Information was collected; provided, however, that such Covered Information need not be destroyed, and may be disclosed, to the extent requested by a government agency or required by law, regulation, or court order; and b. a requirement that each Covered Business document, adhere to, and make publicly available in its privacy policy a retention schedule for Covered Information, setting forth: (1) the purposes for which such information is collected; (2) the specific business need for retaining each type of Covered Information; and (3) a set timeframe for deletion of each type of Covered Information 19 Case: 1:23-cv-03107 Document #: 5 Filed: 06/22/23 Page 20 of 37 PageID #:92 (absent any intervening deletion requests from consumers) that precludes indefinite retention of any such Covered Information; 8. audits, assessments, reviews, or testing of Software Development Kits, and their associated Third Parties, to which each Covered Business shares or provides access to Covered Information of any Covered User; and 9. For each product or service offered by any Covered Business, Clearly and Conspicuously disclose the categories of Covered Information collected from Covered Users, the purposes for the collection of each category of such Covered Information, and any transfers of such Covered Information to Third Parties. For each such transfer of Covered Information, such disclosure must, at a minimum, include a. the specific categories of Covered Information transferred; b. the identity and specific category of the recipient Third Party of each such transfer; c. the purposes for which the Covered Business transferred the Covered Information; and d. the purposes for which each recipient Third Party of Covered Information could use such Covered Information, including but not limited to the purposes for which each recipient reserves the right to use such Covered Information; and e. whether each recipient Third Party of such transfer of Covered Information reserves the right to transfer such Covered Information to other parties.\n\nF. Assess, at least once every twelve (12) months and promptly (not to exceed thirty (30)days) following a Covered Incident, the sufficiency of any safeguards in place to address the internal and external risks to the privacy, security, availability, confidentiality, and integrity of Covered Information, and modify the Program based on the results;\n\nG. Test and monitor the effectiveness of the safeguards at least once every twelve (12)months and promptly (not to exceed thirty (30) days) following a Covered Incident, and modify the Program based on the results;\n\nH. Select and retain service providers capable of safeguarding Covered Information it receives from the Covered Business, and contractually require service providers to implement and maintain safeguards sufficient to address the internal and external risks to the privacy, security, availability, confidentiality, or integrity of Covered Information;\n\nI. Evaluate and adjust the Program in light of any material changes to each Covered Business’s operations or business arrangements, the results of the testing and monitoring required by Subsection VII.F, a Covered Incident, new or more efficient technological or operational methods to control for the risks identified in Subsection VII.D, and any other circumstances that the Covered Business knows or has reason to believe may have a material impact on the effectiveness of the Program or any of its individual safeguards. The Covered Business may make this evaluation and adjustment to the Program at any time, but must, at a minimum, evaluate the Program at least once every twelve (12) months and modify the Program as necessary based on the results.",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy",
        "Data Security"
      ],
      "remedy_types": [
        "Comprehensive Security Program"
      ],
      "case_id": "06.23_easy_healthcare_corporation",
      "company_name": "Easy Healthcare Corporation",
      "date_issued": "2023-06-15",
      "year": 2023,
      "administration": "Biden",
      "legal_authority": "Section 5(a) of the Federal Trade Commission Act, 15 U.S.C. § 45(a), and the Health Breach Notification Rule, 16 C.F.R. § 318",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/202-3186-easy-healthcare-corporation-us-v",
      "docket_number": "1:23-cv-3107"
    },
    {
      "provision_number": "VIII",
      "title": "Privacy and Information Security Assessment by a Third Party",
      "category": "assessment",
      "summary": "Defendant must obtain an initial third-party assessment and biennial assessments for 20 years from a qualified, independent Assessor with at least 3 years of experience, covering the effectiveness of the Program and any gaps; assessments must be completed within 90 days after each reporting period and submitted to the FTC.",
      "verbatim_text": "A. The Assessments must be obtained from one or more qualified, objective, independent third-party professionals (“Assessor(s)”) who: (1) uses procedures and standards generally accepted in the profession; (2) conducts an independent review of the Program; (3) retains all documents relevant to each Assessment for five (5) years after completion of such Assessment; and (4) will provide such documents to the Commission within ten (10) days of receipt of a written request from a representative of the Commission. No documents may be withheld on the basis of a claim of confidentiality, proprietary or trade secrets, work product protection, attorney client privilege, statutory exemption, or any similar claim. Defendant may obtain separate assessments for: (1) privacy and (2) information security from multiple Assessors, so long as each of the Assessors meets the qualifications set forth above. The Assessor(s) must have a minimum of three (3) years of experience in the field of privacy and data protection.\n\nB. For each Assessment, Defendant must provide the Associate Director for Enforcement for the Bureau of Consumer Protection at the Federal Trade Commission with the name, affiliation, and qualifications of the proposed Assessor, whom the Associate Director shall have the authority to approve in his or her sole discretion.\n\nC. The reporting period for the Assessments must cover: (1) the first one-hundred- and-eighty (180) days after the Privacy and Information Security Program required by Section 22 Case: 1:23-cv-03107 Document #: 5 Filed: 06/22/23 Page 23 of 37 PageID #:95 VII has been put in place for the initial Assessment; and (2) each two (2) year period thereafter for twenty (20) years after the entry of this Order for the biennial Assessment.\n\nD. Each Assessment must, for the entire assessment period: 1. determine whether Defendant has implemented and maintained the Program required by Section VII; 2. assess the effectiveness of Defendant’s implementation and maintenance of Subsections VII.A-I; 3. identify any gaps or weaknesses in the Program or instances of material noncompliance with Subsections VII.A-I; 4. address the status of gaps or weaknesses in the Program, as well as any instances of material non-compliance with Subsections VII.A-I, that were identified in any prior Assessment required by this Order; and 5. identify specific evidence (including, but not limited to, documents reviewed, sampling and testing performed, and interviews conducted) examined to make such determinations, assessments, and identifications, and explain why the evidence that the Assessor examined is: (a) appropriate for assessing an enterprise of Defendant’s size, complexity, and risk profile; and (b) sufficient to justify the Assessor’s findings. No finding of any Assessment shall rely solely on assertions or attestations by Defendant, Defendant’s management, or a Covered Business’s management. The Assessment must be signed by the Assessor, state that the Assessor conducted an independent review of the Program and did not rely solely on assertions or attestations by Defendant, Defendant’s management or a Covered Business’s management and state the number of hours that each member of the Assessor’s assessment team worked on the Assessment. To the extent Defendant revises, updates, or adds one or more safeguards required 23 Case: 1:23-cv-03107 Document #: 5 Filed: 06/22/23 Page 24 of 37 PageID #:96 under Section VII.E in the middle of an Assessment period, the Assessment must assess the effectiveness of the revised, updated, or added safeguard(s) for the time period in which it was in effect, and provide a separate statement detailing the basis for each revised, updated, or additional safeguard.\n\nE. Each Assessment must be completed within ninety (90) days after the end of the reporting period to which the Assessment applies. Unless otherwise directed by a Commission representative in writing, Defendant must submit the initial Assessment to the Commission within ten (10) days after the Assessment has been completed via email to DEbrief@ftc.gov or by overnight courier (not the U.S. Postal Service) to: Associate Director for Enforcement, Bureau of Consumer Protection, Federal Trade Commission, 600 Pennsylvania Avenue NW, Washington, DC 20580. The subject line must begin, “United States v. Easy Healthcare Corporation.” All subsequent biennial Assessments must be retained by Defendant until the Order is terminated and provided to the Associate Director for Enforcement within ten (10) days of request.",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy",
        "Data Security"
      ],
      "remedy_types": [
        "Third-Party Assessment"
      ],
      "case_id": "06.23_easy_healthcare_corporation",
      "company_name": "Easy Healthcare Corporation",
      "date_issued": "2023-06-15",
      "year": 2023,
      "administration": "Biden",
      "legal_authority": "Section 5(a) of the Federal Trade Commission Act, 15 U.S.C. § 45(a), and the Health Breach Notification Rule, 16 C.F.R. § 318",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/202-3186-easy-healthcare-corporation-us-v",
      "docket_number": "1:23-cv-3107"
    },
    {
      "provision_number": "IX",
      "title": "Cooperation with Assessor(s)",
      "category": "affirmative_obligation",
      "summary": "Defendant must provide Assessors with all relevant information and materials, disclose all material facts, and not misrepresent any fact material to the Assessment.",
      "verbatim_text": "A. Provide or otherwise make available to the Assessor(s) all information and material in their possession, custody, or control that is relevant to the Assessment for which there is no reasonable claim of privilege;\n\nB. Provide or otherwise make available to the Assessor(s) information about all Covered Information in Defendant’s custody or control that is relevant to the Assessment, so that the Assessor(s) can determine the scope of the Assessment; and\n\nC. Disclose all material facts to the Assessor(s), and not misrepresent in any manner, expressly or by implication, any fact material to the Assessor’s: (1) determination of whether Defendant has implemented and maintained the Program required by Section VII; (2) assessment of the effectiveness of the implementation and maintenance of Subsections VII.A-I; or (3) identification of any gaps or weaknesses in, or instances of material noncompliance with, the Program required by Section VII.",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Third-Party Assessment"
      ],
      "case_id": "06.23_easy_healthcare_corporation",
      "company_name": "Easy Healthcare Corporation",
      "date_issued": "2023-06-15",
      "year": 2023,
      "administration": "Biden",
      "legal_authority": "Section 5(a) of the Federal Trade Commission Act, 15 U.S.C. § 45(a), and the Health Breach Notification Rule, 16 C.F.R. § 318",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/202-3186-easy-healthcare-corporation-us-v",
      "docket_number": "1:23-cv-3107"
    },
    {
      "provision_number": "X",
      "title": "Annual Certification",
      "category": "compliance_reporting",
      "summary": "One year after Order entry and each year thereafter for 20 years, Defendant must provide the FTC with a sworn certification confirming compliance, disclosing any uncorrected material noncompliance, and describing any Covered Incidents.",
      "verbatim_text": "A. One (1) year after the entry of this Order, and each year thereafter for twenty (20) years, provide the Commission with a certification from Defendant, for each Covered Business, that: (1) the Covered Business has established, implemented, and maintained the requirements of this Order; (2) the Covered Business is not aware of any material noncompliance that has not been: (a) corrected, or (b) disclosed to the Commission; and (3) includes a brief description of any Covered Incident. The certification must be based on the personal knowledge of the senior corporate manager, senior officer, or subject matter experts upon whom the senior corporate manager or senior officer reasonably relies in making the certification.\n\nB. Unless otherwise directed by a Commission representative in writing, submit all annual certifications to the Commission pursuant to this Order via email to DEbrief@ftc.gov or by overnight courier (not the U.S. Postal Service) to: Associate Director for Enforcement, Bureau of Consumer Protection, Federal Trade Commission, 600 Pennsylvania Avenue NW, Washington, D.C. 20580. The subject line must begin, “United States v. Easy Healthcare Corporation.”",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Compliance Monitoring"
      ],
      "case_id": "06.23_easy_healthcare_corporation",
      "company_name": "Easy Healthcare Corporation",
      "date_issued": "2023-06-15",
      "year": 2023,
      "administration": "Biden",
      "legal_authority": "Section 5(a) of the Federal Trade Commission Act, 15 U.S.C. § 45(a), and the Health Breach Notification Rule, 16 C.F.R. § 318",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/202-3186-easy-healthcare-corporation-us-v",
      "docket_number": "1:23-cv-3107"
    },
    {
      "provision_number": "XI",
      "title": "Covered Incident Reports",
      "category": "compliance_reporting",
      "summary": "Within 30 days of discovering a Covered Incident, Defendant must submit a report to the FTC including date, description, number of affected consumers, remediation steps, and any notices sent (unless the incident is a Section IV Breach of Security requiring separate notification).",
      "verbatim_text": "IT IS FURTHER ORDERED that Defendant, for any Covered Business, within thirty (30) days after Defendant’s discovery of a Covered Incident, must submit a report to the Commission, unless the Covered Incident also constitutes a Breach of Security involving the Unsecured PHR Identifiable Health Information of 500 or more individuals and therefore requiring notice under Section IV of this Order. The report must include, to the extent possible: A. the date, estimated date, or estimated date range when the Covered Incident occurred; B. a description of the facts relating to the Covered Incident, including the causes and scope of the Covered Incident, if known; C. the number of consumers whose information was affected; D. the acts that Defendant has taken to date to remediate the Covered Incident; protect Covered Information from further disclosure, exposure, or access; and protect affected individuals from identity theft or other harm that may result from the Covered Incident; and E. a representative copy of any materially different notice sent by Defendant to consumers or to any U.S. federal, state, or local government entity.\n\nUnless otherwise directed by a Commission representative in writing, all Covered Incident reports to the Commission pursuant to this Order must be emailed to DEbrief@ftc.gov or sent by overnight courier (not the U.S. Postal Service) to: Associate Director for Enforcement, Bureau of Consumer Protection, Federal Trade Commission, 600 Pennsylvania Avenue NW, Washington, DC 20580. The subject line must begin: “United States v. Easy Healthcare Corporation.”",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Compliance Monitoring"
      ],
      "case_id": "06.23_easy_healthcare_corporation",
      "company_name": "Easy Healthcare Corporation",
      "date_issued": "2023-06-15",
      "year": 2023,
      "administration": "Biden",
      "legal_authority": "Section 5(a) of the Federal Trade Commission Act, 15 U.S.C. § 45(a), and the Health Breach Notification Rule, 16 C.F.R. § 318",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/202-3186-easy-healthcare-corporation-us-v",
      "docket_number": "1:23-cv-3107"
    },
    {
      "provision_number": "XII",
      "title": "Monetary Judgment for Civil Penalty",
      "category": "affirmative_obligation",
      "summary": "A civil penalty judgment of $100,000 is entered against Defendant, payable to the U.S. Treasury within 7 days of Order entry by electronic fund transfer.",
      "verbatim_text": "A. Judgment in the amount of one hundred thousand Dollars ($100,000) is entered in favor of Plaintiff against Defendant, jointly and severally, as a civil penalty.\n\nB. Defendant is ordered to pay to Plaintiff, by making payment to the Treasurer of the United States, one hundred thousand Dollars ($100,000), which, as Defendant stipulates, its undersigned counsel holds in escrow for no purpose other than payment to Plaintiff. Such payment must be made within seven (7) days of entry of this Order by electronic fund transfer in accordance with instructions previously provided by a representative of Plaintiff.",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Monetary Penalty"
      ],
      "case_id": "06.23_easy_healthcare_corporation",
      "company_name": "Easy Healthcare Corporation",
      "date_issued": "2023-06-15",
      "year": 2023,
      "administration": "Biden",
      "legal_authority": "Section 5(a) of the Federal Trade Commission Act, 15 U.S.C. § 45(a), and the Health Breach Notification Rule, 16 C.F.R. § 318",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/202-3186-easy-healthcare-corporation-us-v",
      "docket_number": "1:23-cv-3107"
    },
    {
      "provision_number": "XIII",
      "title": "Additional Monetary Provisions",
      "category": "affirmative_obligation",
      "summary": "Defendant relinquishes all rights in transferred assets, facts from the Complaint may be used in future enforcement proceedings, and Defendant's tax identification numbers may be used for collecting delinquent amounts.",
      "verbatim_text": "A. Defendant relinquishes dominion and all legal and equitable right, title, and interest in all assets transferred pursuant to this Order and may not seek the return of any assets.\n\nB. The facts alleged in the Complaint will be taken as true, without further proof, in any subsequent civil litigation by or on behalf of the Commission in a proceeding to enforce its rights to any payment or monetary judgment pursuant to this Order.\n\nC. Defendant acknowledges that their Taxpayer Identification Numbers, Social Security Numbers, or Employer Identification Numbers, which Defendant previously submitted to the Commission, may be used for collecting and reporting on any delinquent amount arising out of this Order, in accordance with 31 U.S.C. §7701.",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Consumer Redress"
      ],
      "case_id": "06.23_easy_healthcare_corporation",
      "company_name": "Easy Healthcare Corporation",
      "date_issued": "2023-06-15",
      "year": 2023,
      "administration": "Biden",
      "legal_authority": "Section 5(a) of the Federal Trade Commission Act, 15 U.S.C. § 45(a), and the Health Breach Notification Rule, 16 C.F.R. § 318",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/202-3186-easy-healthcare-corporation-us-v",
      "docket_number": "1:23-cv-3107"
    },
    {
      "provision_number": "XIV",
      "title": "Order Acknowledgements",
      "category": "acknowledgment",
      "summary": "Defendant must submit a sworn acknowledgment of receipt of the Order within 7 days, deliver copies of the Order to all principals, officers, managers, and relevant employees within 14 days (and to future personnel before they assume responsibilities), and obtain signed acknowledgments from all recipients within 30 days.",
      "verbatim_text": "A. Defendant, within seven (7) days after the entry of this Order, must submit to the Commission an acknowledgment of receipt of this Order sworn under penalty of perjury.\n\nB. For twenty (20) years after entry of this Order, Defendant must deliver a copy of this Order to: (1) all principals, officers, directors, and LLC managers and members; (2) all employees, agents, and representatives having managerial responsibilities for conduct related to the subject matter of the Order; and (3) any business entity resulting from any change in structure as set forth in the Section titled Compliance Reporting. Delivery must occur within fourteen (14) days after entry of this Order for current personnel. For all others, delivery must occur before they assume their responsibilities.\n\nC. From each individual or entity to which Defendant delivered a copy of this Order, Defendant must obtain, within thirty (30) days, a signed and dated acknowledgment of receipt of this Order.",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Order Administration"
      ],
      "case_id": "06.23_easy_healthcare_corporation",
      "company_name": "Easy Healthcare Corporation",
      "date_issued": "2023-06-15",
      "year": 2023,
      "administration": "Biden",
      "legal_authority": "Section 5(a) of the Federal Trade Commission Act, 15 U.S.C. § 45(a), and the Health Breach Notification Rule, 16 C.F.R. § 318",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/202-3186-easy-healthcare-corporation-us-v",
      "docket_number": "1:23-cv-3107"
    },
    {
      "provision_number": "XV",
      "title": "Compliance Reporting",
      "category": "compliance_reporting",
      "summary": "One year after Order entry, Defendant must submit a sworn compliance report identifying contacts, businesses, and activities, and describing compliance with each Section; for 20 years, must submit compliance notices within 14 days of structural or contact changes and notify the FTC within 14 days of any bankruptcy filing.",
      "verbatim_text": "A. One year after entry of this Order, Defendant must submit a compliance report, sworn under penalty of perjury. Defendant must: 1. identify the primary physical, postal, and email address and telephone number, as designated points of contact, which representatives of the Commission and Plaintiff may use to communicate with Defendant; 2. identify all of Defendant’s businesses by all of their names, telephone numbers, and physical, postal, email, and Internet addresses; 3. describe the activities of each business, including the products and services offered, the means of advertising, marketing, and sales, and the involvement of Defendant; 4. describe in detail whether and how Defendant is in compliance with each 28 Case: 1:23-cv-03107 Document #: 5 Filed: 06/22/23 Page 29 of 37 PageID #:101 Section of this Order; and 5. provide a copy of each Order Acknowledgment obtained pursuant to this Order, unless previously submitted to the Commission.\n\nB. For twenty (20) years after entry of this Order, Defendant must submit a compliance notice, sworn under penalty of perjury, within fourteen (14) days of any change in the following: 1. Any designated point of contact; or 2. The structure of Defendant or any entity that Defendant has any ownership interest in or controls directly or indirectly that may affect compliance obligations arising under this Order, including: creation, merger, sale, or dissolution of the entity or any subsidiary, parent, or affiliate that engages in any acts or practices subject to this Order.\n\nC. Defendant must submit to the Commission notice of the filing of any bankruptcy petition, insolvency proceeding, or similar proceeding by or against Defendant within 14 days of its filing.\n\nD. Any submission to the Commission required by this Order to be sworn under penalty of perjury must be true and accurate and comply with 28 U.S.C. § 1746, such as by concluding: “I declare under penalty of perjury under the laws of the United States of America that the foregoing is true and correct. Executed on: _____” and supplying the date, signatory’s full name, title (if applicable), and signature.\n\nE. Unless otherwise directed by a Commission representative in writing, all submissions to the Commission pursuant to this Order must be emailed to DEbrief@ftc.gov or sent by overnight courier (not the U.S. Postal Service) to: Associate Director for Enforcement, Bureau of Consumer Protection, Federal Trade Commission, 600 Pennsylvania Avenue NW, Washington, DC 20580. The subject line must begin: “United States v. Easy Healthcare Corporation.”",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Compliance Monitoring"
      ],
      "case_id": "06.23_easy_healthcare_corporation",
      "company_name": "Easy Healthcare Corporation",
      "date_issued": "2023-06-15",
      "year": 2023,
      "administration": "Biden",
      "legal_authority": "Section 5(a) of the Federal Trade Commission Act, 15 U.S.C. § 45(a), and the Health Breach Notification Rule, 16 C.F.R. § 318",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/202-3186-easy-healthcare-corporation-us-v",
      "docket_number": "1:23-cv-3107"
    },
    {
      "provision_number": "XVI",
      "title": "Recordkeeping",
      "category": "recordkeeping",
      "summary": "Defendant must create and retain specified records for 20 years (with a 5-year retention period for each record), including accounting records, personnel records, consumer complaints, Health Information disclosures, App Event disclosures, marketing materials, Assessment-related materials, law enforcement communications, and all records demonstrating compliance.",
      "verbatim_text": "A. accounting records showing the revenues from all products or services sold;\n\nB. personnel records showing, for each person providing services in relation to any aspect of the Order, whether as an employee or otherwise, that person’s: name; addresses; telephone numbers; job title or position; dates of service; and (if applicable) the reason for termination;\n\nC. copies or records of all consumer complaints and refund requests related to any mobile application or website offered by Defendant, concerning the collection, use, maintenance, disclosure, deletion, or permission of access to Covered Information, whether received directly or indirectly, such as through a third party, and any response;\n\nD. records of all disclosures of Health Information or PHR Identifiable Health Information to Third Parties showing, for each Third Party that received Health Information or PHR Identifiable Health Information, the name and address of the Third Party, the date(s) of such disclosures, the purpose(s) for which the Health Information or PHR Identifiable Health Information was transferred, and how and when Covered Users provided authorization for the disclosures;\n\nD. records of all disclosures of App Events to Third Parties;\n\nE. a copy of each unique advertisement, form advertisement (where an advertisement is generated based on a form advertisement), or other marketing material making a representation subject to this Order;\n\nG. a copy of each widely disseminated representation by Defendant that describes 30 Case: 1:23-cv-03107 Document #: 5 Filed: 06/22/23 Page 31 of 37 PageID #:103 the extent to which Defendant maintains or protects the privacy, security, and confidentiality of any Covered Information, including any representation concerning a change in any website or other service controlled by Defendant that relates to the privacy, security, and confidentiality of Covered Information;\n\nH. for five (5) years after the date of preparation of each Assessment required by Section VIII, all materials provided to the Assessor(s) by the Respondent to prepare the Assessment, whether prepared by or on behalf of Defendant, including all plans, reports, studies, reviews, audits, audit trails, policies, training materials, and assessments, and any other materials concerning Defendant’s compliance with related Sections of this Order, for the compliance period covered by such Assessment;\n\nI. for five (5) years from the date received, copies of all subpoenas and other communications with law enforcement, if such communication relate to Defendant’s compliance with this Order;\n\nJ. for five (5) years from the date created or received, all records, whether prepared by or on behalf of Defendant, that tend to show any lack of compliance by Defendant with this Order; and\n\nK. all records necessary to demonstrate full compliance with each section of this Order, including all submissions to the Commission.",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Recordkeeping"
      ],
      "case_id": "06.23_easy_healthcare_corporation",
      "company_name": "Easy Healthcare Corporation",
      "date_issued": "2023-06-15",
      "year": 2023,
      "administration": "Biden",
      "legal_authority": "Section 5(a) of the Federal Trade Commission Act, 15 U.S.C. § 45(a), and the Health Breach Notification Rule, 16 C.F.R. § 318",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/202-3186-easy-healthcare-corporation-us-v",
      "docket_number": "1:23-cv-3107"
    },
    {
      "provision_number": "XVII",
      "title": "Compliance Monitoring",
      "category": "monitoring",
      "summary": "The Commission and Plaintiff are authorized to monitor Defendant's compliance by requesting additional reports and records (within 14 days of written request), communicating directly with Defendant, interviewing affiliated persons, and using all other lawful means including undercover methods.",
      "verbatim_text": "A. Within fourteen (14) days of receipt of a written request from a representative of the Commission or Plaintiff, Defendant must: submit additional compliance reports or other 31 Case: 1:23-cv-03107 Document #: 5 Filed: 06/22/23 Page 32 of 37 PageID #:104 requested information, which must be sworn under penalty of perjury, and produce records for inspection and copying. The Commission and Plaintiff are also authorized to obtain discovery, without further leave of court, using any of the procedures prescribed by Federal Rules of Civil Procedure 29, 30 (including telephonic depositions), 31, 33, 34, 36, 45, and 69.\n\nB. For matters concerning this Order, the Commission and Plaintiff are authorized to communicate directly with Defendant. Defendant must permit representatives of the Commission and Plaintiff to interview anyone affiliated with Defendant who has agreed to such an interview. The person interviewed may have counsel present.\n\nC. The Commission and Plaintiff may use all other lawful means, including posing through its representatives as consumers, suppliers, or other individuals or entities, to Defendant or any individual or entity affiliated with Defendant, without the necessity of identification or prior notice. Nothing in this Order limits the Commission’s lawful use of compulsory process, pursuant to Sections 9 and 20 of the FTC Act, 15 U.S.C. §§ 49, 57b-1.",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Compliance Monitoring"
      ],
      "case_id": "06.23_easy_healthcare_corporation",
      "company_name": "Easy Healthcare Corporation",
      "date_issued": "2023-06-15",
      "year": 2023,
      "administration": "Biden",
      "legal_authority": "Section 5(a) of the Federal Trade Commission Act, 15 U.S.C. § 45(a), and the Health Breach Notification Rule, 16 C.F.R. § 318",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/202-3186-easy-healthcare-corporation-us-v",
      "docket_number": "1:23-cv-3107"
    },
    {
      "provision_number": "XVIII",
      "title": "Retention of Jurisdiction",
      "category": "duration",
      "summary": "The Court retains jurisdiction over this matter for purposes of construction, modification, and enforcement of the Order.",
      "verbatim_text": "IT IS FURTHER ORDERED that this Court retains jurisdiction of this matter for purposes of construction, modification, and enforcement of this Order.",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Order Administration"
      ],
      "case_id": "06.23_easy_healthcare_corporation",
      "company_name": "Easy Healthcare Corporation",
      "date_issued": "2023-06-15",
      "year": 2023,
      "administration": "Biden",
      "legal_authority": "Section 5(a) of the Federal Trade Commission Act, 15 U.S.C. § 45(a), and the Health Breach Notification Rule, 16 C.F.R. § 318",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/202-3186-easy-healthcare-corporation-us-v",
      "docket_number": "1:23-cv-3107"
    },
    {
      "provision_number": "I",
      "title": "Ban on Disclosure of Health Information for Advertising Purposes",
      "category": "prohibition",
      "summary": "Defendant is permanently restrained and enjoined from disclosing Health Information to Third Parties for Advertising Purposes, including advertising, marketing, or promoting products or services through third-party platforms.",
      "verbatim_text": "A. Defendant, Defendant’s officers, agents, employees, and attorneys who receive actual notice of this Order, whether directly or indirectly, are permanently restrained and enjoined from disclosing Health Information to Third Parties for Advertising Purposes.\n\nB. For purposes of this Section, “Advertising Purposes” means advertising, marketing, promoting, offering, offering for sale, or selling any products or services on, or through Third Party websites, mobile applications, or services. Advertising Purposes shall not include: (i) reporting and analytics related to understanding advertising and advertising effectiveness, such as statistical reporting, traffic analysis, understanding the number of and type of ads served, or conversion measurement; or (ii) communications, services, or products requested by a consumer that are sent or provided to the consumer; or (iii) contextual advertising, meaning non-personalized advertising shown as part of a consumer’s current interaction with Defendant’s website or mobile applications, provided that the consumer’s Covered Information is not disclosed to another Third Party and is not used to build a profile about the consumer or otherwise alter the consumer’s experience outside the current interactions with Defendant’s websites or mobile application.",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Prohibition"
      ],
      "case_id": "06.24_monument",
      "company_name": "Monument, Inc.",
      "date_issued": "2024-06-15",
      "year": 2024,
      "administration": "Biden",
      "legal_authority": "Section 5(a) of the Federal Trade Commission Act, 15 U.S.C. § 45(a), and Section 8023 of the Opioid Addiction Recovery Fraud Prevention Act of 2018 (OARFPA), 15 U.S.C. § 45d",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/2323043-monument-inc-us-v",
      "docket_number": "1:24-cv-01034"
    },
    {
      "provision_number": "II",
      "title": "Requirement to Obtain Affirmative Express Consent for Any Other Disclosure of Health Information",
      "category": "affirmative_obligation",
      "summary": "Before disclosing any consumer's Health Information to any Third Party, Defendant must first obtain the relevant consumer's Affirmative Express Consent.",
      "verbatim_text": "IT IS FURTHER ORDERED that Defendant, Defendant’s officers, agents, employees, and attorneys, and all other persons in active concert or participation with any of them, who receive actual notice of this Order, whether acting directly or indirectly, in connection with any Case 1:24-cv-01034-BAH Document 6 Filed 06/07/24 Page 12 of 34 product or service, prior to disclosing any consumer’s Health Information to any Third Party, must obtain the relevant consumer’s Affirmative Express Consent.",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Prohibition"
      ],
      "case_id": "06.24_monument",
      "company_name": "Monument, Inc.",
      "date_issued": "2024-06-15",
      "year": 2024,
      "administration": "Biden",
      "legal_authority": "Section 5(a) of the Federal Trade Commission Act, 15 U.S.C. § 45(a), and Section 8023 of the Opioid Addiction Recovery Fraud Prevention Act of 2018 (OARFPA), 15 U.S.C. § 45d",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/2323043-monument-inc-us-v",
      "docket_number": "1:24-cv-01034"
    },
    {
      "provision_number": "III",
      "title": "Prohibition Against Misrepresentations",
      "category": "prohibition",
      "summary": "Defendant is permanently restrained and enjoined from misrepresenting its data collection, use, and disclosure practices, including misrepresentations about HIPAA compliance.",
      "verbatim_text": "A. the extent to which Defendant collects, maintains, uses, discloses, Deletes, or permits or denies access to any Personal Information, or the extent to which Defendant protects the privacy, security, availability, confidentiality, or integrity of any Personal Information;\n\nB. the purpose(s) for which Defendant, or any entity to whom Defendant discloses or permits access to Personal Information, collects, maintains, uses, discloses, or permits access to any Personal Information;\n\nC. the extent to which a consumer can maintain privacy, confidentiality, or anonymity when visiting or using any online properties, services, or mobile applications associated with Defendant; and\n\nD. the extent to which Defendant is a HIPAA-covered entity, and the extent to which Defendant’s privacy and information practices, policies, and procedures comply with HIPAA.",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Prohibition"
      ],
      "case_id": "06.24_monument",
      "company_name": "Monument, Inc.",
      "date_issued": "2024-06-15",
      "year": 2024,
      "administration": "Biden",
      "legal_authority": "Section 5(a) of the Federal Trade Commission Act, 15 U.S.C. § 45(a), and Section 8023 of the Opioid Addiction Recovery Fraud Prevention Act of 2018 (OARFPA), 15 U.S.C. § 45d",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/2323043-monument-inc-us-v",
      "docket_number": "1:24-cv-01034"
    },
    {
      "provision_number": "IV",
      "title": "Data Deletion",
      "category": "affirmative_obligation",
      "summary": "Defendant must identify all Third Parties that received Covered Information without consent, notify them, instruct them to delete that information, and cease further disclosures to them pending confirmation of receipt.",
      "verbatim_text": "A. within 60 days after the effective date of this Order: 1. identify all Third Parties that accessed, received, or acquired Covered Information from Defendant in any form, including hashed or encrypted Covered Information, without a consumer’s Affirmative Express Consent; 2. identify what Covered Information was disclosed to each Third Party identified in sub-Section IV.A.1;\n\n3. submit a list of the information identified in sub-Sections IV.A.1-2 and the methodologies used to identify the information in sub-Sections IV.A.1-2 to the FTC’s Division of Enforcement, Bureau of Consumer Protection, in accordance with Provision XIV.E; and\n\nB. within 90 days after the effective date of this Order, provide a copy of the Complaint and Order to all Third Parties identified in sub-Section IV.A.1, and instruct those Third Parties to Delete all Covered Information accessed, received, or acquired from Defendant. Defendant’s instruction to each such Third Party shall include a list of the Covered Information identified in sub-Section IV.A.2 and shall demand written confirmation from each such Third Party that it has Deleted such Covered Information. Defendant must provide all instructions sent to the Third Parties to the FTC’s Division of Enforcement, Bureau of Consumer Protection, in accordance with Provision XIV.E;\n\nas of the issuance of this Order Defendant shall not disclose any Covered c. Information in any form, including hashed or encrypted Covered Information, to any Third Party identified in sub-Section IV.A.1 until Defendant confirms each Third Party’s receipt of the instructions required by sub-Section IV.B. This sub- Section is subject to the prohibitions set forth in Section I. Defendant must provide all receipts of confirmation and any responses from Third Parties within five (5) days of receipt to the FTC’s Division of Enforcement, Bureau of Consumer Protection, in accordance with Provision XIV.E.",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Data Deletion"
      ],
      "case_id": "06.24_monument",
      "company_name": "Monument, Inc.",
      "date_issued": "2024-06-15",
      "year": 2024,
      "administration": "Biden",
      "legal_authority": "Section 5(a) of the Federal Trade Commission Act, 15 U.S.C. § 45(a), and Section 8023 of the Opioid Addiction Recovery Fraud Prevention Act of 2018 (OARFPA), 15 U.S.C. § 45d",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/2323043-monument-inc-us-v",
      "docket_number": "1:24-cv-01034"
    },
    {
      "provision_number": "V",
      "title": "Notice to Covered Users",
      "category": "affirmative_obligation",
      "summary": "Defendant must email all Covered Users a court-mandated notice (Exhibit A) within 14 days of the effective date of the Order, without including any other materials with the notice.",
      "verbatim_text": "IT IS FURTHER ORDERED that, on or before 14 days after the effective date of this Order, Defendant must email all Covered Users, using the last known verified email address in Defendant’s possession, custody, or control, an exact copy of the notice attached hereto as Exhibit A (“Notice”), provided however, that if Defendant does not have email information for any Covered User, Defendant must send the Notice to that Covered User through Defendant’s primary means of communicating with that user. Defendant shall not include with the Notice any other information, documents, or attachments.",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Consumer Notification"
      ],
      "case_id": "06.24_monument",
      "company_name": "Monument, Inc.",
      "date_issued": "2024-06-15",
      "year": 2024,
      "administration": "Biden",
      "legal_authority": "Section 5(a) of the Federal Trade Commission Act, 15 U.S.C. § 45(a), and Section 8023 of the Opioid Addiction Recovery Fraud Prevention Act of 2018 (OARFPA), 15 U.S.C. § 45d",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/2323043-monument-inc-us-v",
      "docket_number": "1:24-cv-01034"
    },
    {
      "provision_number": "VI",
      "title": "Mandated Privacy Program",
      "category": "affirmative_obligation",
      "summary": "Defendant must establish, implement, and maintain a comprehensive privacy program within 60 days, including written documentation, risk assessments, safeguards, employee training, data retention policies, and service provider oversight.",
      "verbatim_text": "IT IS FURTHER ORDERED that any Covered Business, in connection with the collection, maintenance, use, or disclosure of, or provision of access to, Covered Information, must, within 60 days of the effective date of this Order, establish and implement, and thereafter maintain, a comprehensive privacy program (“Privacy Program”) that protects the privacy, security, availability, confidentiality, and integrity of such Covered Information. To satisfy this requirement, Defendant must, for each Covered Business, at a minimum:\n\nA. document in writing the content, implementation, and maintenance of the Privacy Program;\n\nB. provide the written program and any evaluations thereof or updates thereto to the Covered Business’s board of directors or governing body or, if no such board or equivalent governing body exists, to a senior officer of the Covered Business responsible for the Covered Business’s Privacy Program at least once every 12 months and promptly (not to exceed 30 days) after a Covered Incident;\n\nC. designate a qualified employee or employees, who report(s) directly to an executive, such as the Chief Executive Officer, Chief Compliance Officer, or Chief Legal Officer, to coordinate and be responsible for the Privacy Program; and keep the executive and the Board of Directors informed of the Privacy Program, including all actions and procedures implemented to comply with the requirements of this Order, and any actions and procedures to be implemented to ensure continued compliance with this Order;\n\nD. assess and document, at least once every 12 months and promptly (not to exceed 30 days) following a Covered Incident, internal and external risks in each area of the Covered Business’s operations to the privacy, security, availability, confidentiality, and integrity of Covered Information that could result in the unauthorized access, collection, use, destruction, or disclosure of, or provision of access to, Covered Information;\n\nE. design, implement, maintain, and document safeguards that control for the internal and external risks to the privacy, security, availability, confidentiality, and integrity of Covered Information identified by the Covered Business in Case 1:24-cv-01034-BAH Document 6 Filed 06/07/24 Page 16 of 34 response to sub-Section VI.D. Each safeguard must be based on the volume and sensitivity of the Covered Information that is at risk, and the likelihood that the risk could be realized and result in the unauthorized access, collection, use, Deletion, disclosure of, or provision of access to, the Covered Information. Such safeguards must also include: 1. policies, procedures, and technical measures to systematically inventory Covered Information in the Covered Business’s control and Delete Covered Information that is no longer reasonably necessary and in accordance with applicable retention laws and regulations; 2. policies, procedures, and technical measures to prevent the collection, maintenance, use, or disclosure of, or provision of access to, Covered Information inconsistent with the Covered Business’s representations to consumers; 3. audits, assessments, and reviews of the contracts, privacy policies, and terms of service associated with any Third Party to which the Covered Business discloses, or provides access to, Covered Information; 4. policies and technical measures that limit employee and contractor access to Covered Information to only those employees and contractors with a legitimate business need to access such Covered Information; 5. mandatory privacy training programs for all employees with access to Covered Information in connection with the Covered Business on at least an annual basis, with such training covering any internal or external risks identified by Defendant in sub-Section VI.D the safeguards implemented Case 1:24-cv-01034-BAH Document 6 Filed 06/07/24 Page 17 of 34 pursuant to sub-Section VI.E, and the requirements of this Order; 6. a data retention policy that, at a minimum, includes: i. a retention schedule that limits the retention of Covered Information to the shortest time necessary to fulfill the purpose for which the Covered Information was collected; provided, however, that such Covered Information need not be Deleted, and may be disclosed, to the extent requested by a government agency or required by law, regulation, or court order; and ii. a requirement that Defendant documents, adheres to, and makes publicly available on its terms of service/use a retention schedule for Covered Information, setting forth: (1) the purposes for which the Covered Information is collected; (2) the specific business need for retaining each type of Covered Information; and (3) a set timeframe in accordance with applicable laws and regulations for Deletion of each type of Covered Information (absent any intervening Deletion requests from consumers) that precludes indefinite retention of any Covered Information; 7. audits, assessments, reviews, or testing of each mechanism by which the Covered Business discloses Covered Information to a Third Party or provides a Third Party with access to Covered Information (including but not limited to web beacons, pixels, and Software Development Kits); and 8. for each product or service offered by any Covered Business, Clearly and Conspicuously disclose the categories of Covered Information collected Case 1:24-cv-01034-BAH Document 6 Filed 06/07/24 Page 18 of 34 from consumers, the purposes for the collection of each category of Covered Information, and any transfer of Covered Information to a Third Party. For each such transfer of Covered Information, the disclosure must, at a minimum, include: (a) the specific categories of Covered Information transferred; (b) the identity of each Third Party receiving the transfer; (c) the purposes for which the Covered Business transferred the Covered Information to each Third Party; (d) the purposes for which each Third Party receiving the Covered Information may use the Covered Information, including but not limited to the purposes for which the Third Party reserves the right to use such Covered Information; and (e) whether each Third Party receiving the Covered Information reserves the right to transfer the Covered Information to other entities or individuals.\n\nF. assess, at least once every 12 months, and promptly (not to exceed 30 days) following a Covered Incident, the sufficiency of any safeguards in place to address the internal and external risks to the privacy, security, availability, confidentiality, and integrity of Covered Information, and modify the Privacy Program based on the results;\n\nG. test and monitor the effectiveness of the safeguards at least once every 12 months, and promptly (not to exceed 30 days) following a Covered Incident, and modify the Privacy Policy based on the results;\n\nH. select and retain service providers capable of safeguarding Covered Information they receive from the Covered Business, and contractually require service providers to implement and maintain safeguards for Covered Information; and\n\nI. evaluate and adjust the Privacy Program in light of any material changes to the Covered Business’s operations or business arrangements, the results of the testing and monitoring required by sub-Section VI.G, a Covered Incident, and any other circumstances that the Covered Business knows or has reason to believe may have a material impact on the effectiveness of the Privacy Program or any of its individual safeguards (including but not limited to new or more efficient technological or operational methods to control for the risks identified in sub- Section VI.D). The Covered Business may make this evaluation and adjustment to the Privacy Program at any time, but must, at a minimum, evaluate the Privacy Program at least once every 12 months and modify the Privacy Program as necessary based on the results.",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Comprehensive Security Program"
      ],
      "case_id": "06.24_monument",
      "company_name": "Monument, Inc.",
      "date_issued": "2024-06-15",
      "year": 2024,
      "administration": "Biden",
      "legal_authority": "Section 5(a) of the Federal Trade Commission Act, 15 U.S.C. § 45(a), and Section 8023 of the Opioid Addiction Recovery Fraud Prevention Act of 2018 (OARFPA), 15 U.S.C. § 45d",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/2323043-monument-inc-us-v",
      "docket_number": "1:24-cv-01034"
    },
    {
      "provision_number": "VII",
      "title": "Privacy Assessments by a Third-Party Assessor",
      "category": "assessment",
      "summary": "Defendant must obtain initial and biennial independent third-party assessments of its Privacy Program, covering the first year and each 2-year period thereafter for 20 years, with assessments completed within 60 days after each reporting period.",
      "verbatim_text": "A. The Assessments must be obtained from a qualified, objective, independent third- party professional (“Assessor”), who: (1) uses procedures and standards generally accepted in the profession; (2) conducts an independent review of the Privacy Program; (3) retains all documents relevant to each Assessment for 5 years after completion of such Assessment; and (4) will provide such documents to the Commission within 10 days of receipt of a written request from a representative of the Commission. No documents may be withheld on the basis of a claim of confidentiality, proprietary or trade secrets, work product protection, attorney- Case 1:24-cv-01034-BAH Document 6 Filed 06/07/24 Page 20 of 34 client privilege, statutory exemption, or any similar claim. The Assessor must have a minimum of 3 years of experience in the field of privacy and data protection.\n\nB. For each Assessment, Defendant must provide the Associate Director for Enforcement for the Bureau of Consumer Protection at the Federal Trade Commission with the name, affiliation, and qualifications of the proposed Assessor, whom the Associate Director shall have the authority to approve in his or her sole discretion.\n\nC. The reporting period for the Assessments must cover: (1) the first year after the issuance date of the Order for the initial Assessment; and (2) each 2-year period thereafter for 20 years after the issuance date of the Order for the biennial Assessments.\n\nD. Each Assessment must, for the entire assessment period: 1. determine whether Defendant has implemented and maintained the Privacy Program required by Section VI; 2. assess the effectiveness of Defendant’s implementation and maintenance of sub-Sections VI.A-I; 3. identify any gaps or weaknesses in the Privacy Program, or instances of material noncompliance with, sub-Sections VI.A-I; 4. address the status of gaps or weaknesses in the Privacy Program, as well as any instances of material non-compliance with sub-Sections VI.A-I, that were identified in any prior Assessment required by this Order; and 5. identify specific evidence (including, but not limited to, documents Case 1:24-cv-01034-BAH Document 6 Filed 06/07/24 Page 21 of 34 reviewed, sampling and testing performed, and interviews conducted) examined to make such determinations, assessments, and identifications, and explain why the evidence that the Assessor examined is (a) appropriate for assessing an enterprise of Defendant’s size, complexity, and risk profile; and (b) sufficient to justify the Assessor’s findings. No finding of any Assessment shall rely solely on assertions or attestations by Defendant, Defendant’s management, or a Covered Business’s management. The Assessment must be signed by the Assessor, state that the Assessor conducted an independent review of the Privacy Program and did not rely solely on assertions or attestations by Defendant, Defendant’s management, or a Covered Business’s management, and state the number of hours that each member of the Assessor’s assessment team worked on the Assessment. To the extent a Covered Business revises, updates, or adds one or more safeguards required under sub-Section VI.E in the middle of an Assessment period, the Assessment must assess the effectiveness of the revised, updated, or added safeguard(s) for the time period in which it was in effect, and provide a separate statement detailing the basis for each revised, updated, or additional safeguard.\n\nE. Each Assessment must be completed within 60 days after the end of the reporting period to which the Assessment applies. Unless otherwise directed by a Commission representative in writing, Defendant must submit the initial Assessment to the Commission within 10 days after the Assessment has been completed via email to the FTC’s Division of Enforcement, Bureau of Consumer Case 1:24-cv-01034-BAH Document 6 Filed 06/07/24 Page 22 of 34 Protection, in accordance with Provision XIV.E. All subsequent biennial Assessments must be retained by Defendant until the Order is terminated and provided to the Associate Director for Enforcement within 10 days of request.",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Third-Party Assessment"
      ],
      "case_id": "06.24_monument",
      "company_name": "Monument, Inc.",
      "date_issued": "2024-06-15",
      "year": 2024,
      "administration": "Biden",
      "legal_authority": "Section 5(a) of the Federal Trade Commission Act, 15 U.S.C. § 45(a), and Section 8023 of the Opioid Addiction Recovery Fraud Prevention Act of 2018 (OARFPA), 15 U.S.C. § 45d",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/2323043-monument-inc-us-v",
      "docket_number": "1:24-cv-01034"
    },
    {
      "provision_number": "VIII",
      "title": "Cooperation with Assessor",
      "category": "affirmative_obligation",
      "summary": "Defendant must fully cooperate with the third-party Assessor by providing all relevant information, disclosing all Covered Information in its custody, and not misrepresenting any material facts to the Assessor.",
      "verbatim_text": "A. provide or otherwise make available to the Assessor all information and material in its possession, custody, or control that is relevant to the Assessment for which there is no reasonable claim of privilege;\n\nB. provide or otherwise make available to the Assessor information about all Covered Information in Defendant’s custody or control so that the Assessor can determine the scope of the Assessment; and\n\nC. disclose all material facts to the Assessor, and not misrepresent in any manner, expressly or by implication, any fact material to the Assessor’s: (1) determination of whether Defendant has implemented and maintained the Privacy Program required by Section VI; (2) assessment of the effectiveness of the implementation and maintenance of sub-Sections VI.A-I; or (3) identification of any gaps or weaknesses in, or instances of material noncompliance with, the Privacy Program required by Section VI.",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Third-Party Assessment"
      ],
      "case_id": "06.24_monument",
      "company_name": "Monument, Inc.",
      "date_issued": "2024-06-15",
      "year": 2024,
      "administration": "Biden",
      "legal_authority": "Section 5(a) of the Federal Trade Commission Act, 15 U.S.C. § 45(a), and Section 8023 of the Opioid Addiction Recovery Fraud Prevention Act of 2018 (OARFPA), 15 U.S.C. § 45d",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/2323043-monument-inc-us-v",
      "docket_number": "1:24-cv-01034"
    },
    {
      "provision_number": "IX",
      "title": "Annual Certification",
      "category": "compliance_reporting",
      "summary": "Defendant must provide annual certifications from a senior corporate manager to the Commission for 10 years, attesting to compliance with the Order, absence of uncorrected material noncompliance, and describing any Covered Incidents.",
      "verbatim_text": "A. one year after the issuance date of this Order, and each year thereafter for 10 years, provide the Commission with a certification from a senior corporate manager, or, if no such senior corporate manager exists, a senior officer of each Case 1:24-cv-01034-BAH Document 6 Filed 06/07/24 Page 23 of 34 Covered Business that: (1) the Covered Business has established, implemented, and maintained the requirements of this Order; (2) the Covered Business is not aware of any material noncompliance that has not been (a) corrected or (b) disclosed to the Commission; and (3) includes a brief description of any Covered Incident. The certification must be based on the personal knowledge of the senior corporate manager, senior officer, or subject matter experts upon whom the senior corporate manager or senior officer reasonably relies in making the certification.\n\nB. unless otherwise directed by a Commission representative in writing, submit all annual certifications to the Commission pursuant to this Order via email to the FTC’s Division of Enforcement, Bureau of Consumer Protection, in accordance with Provision XIV.E.",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Compliance Monitoring"
      ],
      "case_id": "06.24_monument",
      "company_name": "Monument, Inc.",
      "date_issued": "2024-06-15",
      "year": 2024,
      "administration": "Biden",
      "legal_authority": "Section 5(a) of the Federal Trade Commission Act, 15 U.S.C. § 45(a), and Section 8023 of the Opioid Addiction Recovery Fraud Prevention Act of 2018 (OARFPA), 15 U.S.C. § 45d",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/2323043-monument-inc-us-v",
      "docket_number": "1:24-cv-01034"
    },
    {
      "provision_number": "X",
      "title": "Covered Incident Reports",
      "category": "compliance_reporting",
      "summary": "Defendant must submit a report to the Commission within 30 days of discovering a Covered Incident, including the date, description, number of consumers affected, remediation steps taken, and any notices sent to consumers or government entities.",
      "verbatim_text": "IT IS FURTHER ORDERED that Defendant, within 30 days after Defendant’s discovery of a Covered Incident, must submit a report to the Commission. The report must include, to the extent possible: A. the date, estimated date, or estimated date range when the Covered Incident occurred; B. a description of the facts relating to the Covered Incident, including the causes and scope of the Covered Incident, if known; C. the number of consumers whose information was affected; D. the acts that Defendant has taken to date to remediate the Covered Incident; protect Covered Information from further disclosure, exposure, or access; and protect affected individuals from identity theft or other harm that may result from Case 1:24-cv-01034-BAH Document 6 Filed 06/07/24 Page 24 of 34 the Covered Incident; and E. a representative copy of any materially different notice sent by Defendant to consumers or to any U.S. federal, state, or local government entity.\n\nUnless otherwise directed by a Commission representative in writing, all Covered Incident reports to the Commission pursuant to this Order must be emailed to the FTC’s Division of Enforcement, Bureau of Consumer Protection, in accordance with Provision XIV.E.",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Compliance Monitoring"
      ],
      "case_id": "06.24_monument",
      "company_name": "Monument, Inc.",
      "date_issued": "2024-06-15",
      "year": 2024,
      "administration": "Biden",
      "legal_authority": "Section 5(a) of the Federal Trade Commission Act, 15 U.S.C. § 45(a), and Section 8023 of the Opioid Addiction Recovery Fraud Prevention Act of 2018 (OARFPA), 15 U.S.C. § 45d",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/2323043-monument-inc-us-v",
      "docket_number": "1:24-cv-01034"
    },
    {
      "provision_number": "XI",
      "title": "Monetary Judgment for Civil Penalty and Suspension",
      "category": "affirmative_obligation",
      "summary": "A civil penalty judgment of $2,500,000 is entered against Defendant but suspended based on Defendant's financial representations; the suspension will be lifted if Defendant is found to have made material misstatements in its financial disclosures.",
      "verbatim_text": "A. Judgment in the amount of Two Million and Five Hundred Thousand Dollars ($2,500,000) is entered in favor of Plaintiff against Defendant, as a civil penalty.\n\nB. The judgment is suspended, subject to the sub-Sections below. C. Plaintiff’s agreement to the suspension of the judgment is expressly premised upon the truthfulness, accuracy, and completeness of Defendant’s sworn financial statements and related documents (collectively, “Financial Representations”) submitted to the Commission, namely: 1. the Financial Statement of Defendant signed by Michael Russell, Chief Executive Officer, on October 12, 2023, including the attachments; and 2. the additional documentation submitted by Defendant via counsel to Commission counsel on October 12, 2023, attaching the above-referenced Financial Statement of Defendant, 2020 Tax Return of Defendant, 2021 Tax Return of Defendant, and Consolidated Financial Statements of Defendant as of October 12, 2023 (including a Profit and Loss Statement, Balance Sheet, and Statement of Cash Flows since January 2020).\n\nThe suspension of the judgment will be lifted as to Defendant if, upon motion by D. the Plaintiff, the Court finds that Defendant failed to disclose any material asset, materially misstated the value of any asset, or made any other material misstatement or omission in the financial representations identified above.\n\nIf the suspension of the judgment is lifted, the judgment becomes immediately E. due as to Defendant in the amount specified in sub-Section A above (which the parties stipulate only for purposes of this Section represents the amount of the civil penalty for the violations alleged in the Complaint), less any payment previously made pursuant to this Section, plus interest computed from the date of entry of this Order.",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Monetary Penalty"
      ],
      "case_id": "06.24_monument",
      "company_name": "Monument, Inc.",
      "date_issued": "2024-06-15",
      "year": 2024,
      "administration": "Biden",
      "legal_authority": "Section 5(a) of the Federal Trade Commission Act, 15 U.S.C. § 45(a), and Section 8023 of the Opioid Addiction Recovery Fraud Prevention Act of 2018 (OARFPA), 15 U.S.C. § 45d",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/2323043-monument-inc-us-v",
      "docket_number": "1:24-cv-01034"
    },
    {
      "provision_number": "XII",
      "title": "Additional Monetary Provisions",
      "category": "affirmative_obligation",
      "summary": "Defendant relinquishes all right and title to assets transferred under the Order; the Complaint's allegations may be taken as true in subsequent litigation; the civil penalty is non-dischargeable in bankruptcy; and Defendant's Taxpayer Identification Numbers may be used for collection purposes.",
      "verbatim_text": "Defendant relinquishes dominion and all legal and equitable right, title, and interest in allA a.s sets transferred pursuant to this Order and may not seek the return of any assets.\n\nThe facts alleged in the Complaint will be taken as true, without further proof, in B. any subsequent civil litigation by or on behalf of the Plaintiff or the Commission, including in a proceeding to enforce its rights to any payment or monetary judgment pursuant to this Order, such as a nondischargeable complaint in any bankruptcy case.\n\nC. The facts alleged in the Complaint establish all elements necessary to sustain an action by the Commission pursuant to Section 523(a)(2)(A) of the Bankruptcy Code, 11 U.S.C. § 523(a)(2)(A), and this Order will have collateral estoppel effect for such purposes.\n\nD. Defendant agrees that the judgment represents a civil penalty owed to the government of the United States, is not compensation for actual pecuniary loss, and, therefore, it is not subject to discharge under the Bankruptcy Code pursuant to 11 U.S.C. § 523(a)(7).\n\nE. Defendant acknowledges that its Taxpayer Identification Numbers (Social Security Numbers or Employer Identification Numbers), which Defendant previously submitted to the Commission, may be used for collecting and reporting on any delinquent amount arising out of this Order, in accordance with 31 U.S.C. §7701.",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Consumer Redress"
      ],
      "case_id": "06.24_monument",
      "company_name": "Monument, Inc.",
      "date_issued": "2024-06-15",
      "year": 2024,
      "administration": "Biden",
      "legal_authority": "Section 5(a) of the Federal Trade Commission Act, 15 U.S.C. § 45(a), and Section 8023 of the Opioid Addiction Recovery Fraud Prevention Act of 2018 (OARFPA), 15 U.S.C. § 45d",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/2323043-monument-inc-us-v",
      "docket_number": "1:24-cv-01034"
    },
    {
      "provision_number": "XIII",
      "title": "Order Acknowledgments",
      "category": "acknowledgment",
      "summary": "Defendant must acknowledge receipt of the Order within 7 days, deliver copies to all relevant personnel within 7 days (and to future personnel before they assume responsibilities), and obtain signed acknowledgments from all recipients within 30 days.",
      "verbatim_text": "A. Defendant, within 7 days of entry of this Order, must submit to the Commission an acknowledgment of receipt of this Order sworn under penalty of perjury.\n\nB. For 3 years after entry of this Order, Defendant must deliver a copy of this Order to: (1) all principals, officers, directors, and LLC managers and members; (2) all employees having managerial responsibilities for conduct related to the subject matter of the Order and all agents and representatives who participate in conduct related to the subject matter of the Order; and (3) any business entity resulting from any change in structure as set forth in Section XIV. Delivery must occur within 7 days of entry of this Order for current personnel. For all others, delivery must occur before they assume their responsibilities.\n\nC. From each individual or entity to which Defendant delivered a copy of this Order, Defendant must obtain, within 30 days, a signed and dated acknowledgment of receipt of this Order.",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Order Administration"
      ],
      "case_id": "06.24_monument",
      "company_name": "Monument, Inc.",
      "date_issued": "2024-06-15",
      "year": 2024,
      "administration": "Biden",
      "legal_authority": "Section 5(a) of the Federal Trade Commission Act, 15 U.S.C. § 45(a), and Section 8023 of the Opioid Addiction Recovery Fraud Prevention Act of 2018 (OARFPA), 15 U.S.C. § 45d",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/2323043-monument-inc-us-v",
      "docket_number": "1:24-cv-01034"
    },
    {
      "provision_number": "XIV",
      "title": "Compliance Reporting",
      "category": "compliance_reporting",
      "summary": "Defendant must submit an annual compliance report one year after entry, provide timely notices of any changes in contact information or corporate structure for 10 years, notify the Commission of any bankruptcy filing within 14 days, and submit all filings under penalty of perjury via the designated email address.",
      "verbatim_text": "A. One year after entry of this Order, Defendant must submit a compliance report, sworn under penalty of perjury, which does the following: (1) identify the primary physical, postal, and email address and telephone number, as designated points of contact, which representatives of the Commission and Plaintiff may use to communicate with Defendant; (2) identify all of Defendant’s businesses by all of their names, telephone numbers, and physical, postal, email, and Internet addresses; (3) describe the activities of each business; (4) describe in detail whether and how Defendant is in compliance with each Provision of this Order; and (5) provide a copy of each Order Acknowledgment obtained pursuant to this Order, unless previously submitted to the Commission.\n\nB. For 10 years after entry of this Order, Defendant must submit a compliance notice, sworn under penalty of perjury, within 14 days of any change in the following: (1) any designated point of contact; or (2) the structure of Defendant or any entity that Defendant has any ownership interest in or controls directly or indirectly that may affect compliance obligations arising under this Order, including: creation, merger, sale, or dissolution of the entity or any subsidiary, parent, or affiliate that engages in any acts or practices subject to this Order.\n\nC. Defendant must submit to the Commission notice of the filing of any bankruptcy petition, insolvency proceeding, or similar proceeding by or against such Defendant within 14 days of its filing.\n\nD. Any submission to the Commission required by this Order to be sworn under penalty of perjury must be true and accurate and comply with 28 U.S.C. § 1746, such as by concluding: “I declare under penalty of perjury under the laws of the United States of America that the foregoing is true and correct. Executed on: _____” and supplying the date, signatory’s full name, title (if applicable), and signature.\n\nE. Unless otherwise directed by a Commission representative in writing, all submissions to the Commission pursuant to this Order must be emailed to DEbrief@ftc.gov or sent by overnight courier (not the U.S. Postal Service) to: Associate Director for Enforcement, Bureau of Consumer Protection, Federal Trade Commission, 600 Pennsylvania Avenue NW, Washington, DC 20580. The subject line must begin: United States v. Monument, Inc. [X number].",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Compliance Monitoring"
      ],
      "case_id": "06.24_monument",
      "company_name": "Monument, Inc.",
      "date_issued": "2024-06-15",
      "year": 2024,
      "administration": "Biden",
      "legal_authority": "Section 5(a) of the Federal Trade Commission Act, 15 U.S.C. § 45(a), and Section 8023 of the Opioid Addiction Recovery Fraud Prevention Act of 2018 (OARFPA), 15 U.S.C. § 45d",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/2323043-monument-inc-us-v",
      "docket_number": "1:24-cv-01034"
    },
    {
      "provision_number": "XV",
      "title": "Recordkeeping",
      "category": "recordkeeping",
      "summary": "Defendant must create certain records for 10 years after entry of the Order and retain each such record for 5 years, including accounting records, personnel records, and all records necessary to demonstrate full compliance.",
      "verbatim_text": "IT IS FURTHER ORDERED that Defendant must create certain records for 10 years after entry of the Order, and retain each such record for 5 years. Specifically, Defendant must create and retain the following records: A. accounting records showing the revenues from all goods or services sold;\n\nB. personnel records showing, for each person providing services, whether as an employee or otherwise, that person’s name, addresses, telephone numbers, job title or position, dates of service, and (if applicable) the reason for termination;\n\nC. all records necessary to demonstrate full compliance with each provision of this Order, including all submissions to the Commission.",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Recordkeeping"
      ],
      "case_id": "06.24_monument",
      "company_name": "Monument, Inc.",
      "date_issued": "2024-06-15",
      "year": 2024,
      "administration": "Biden",
      "legal_authority": "Section 5(a) of the Federal Trade Commission Act, 15 U.S.C. § 45(a), and Section 8023 of the Opioid Addiction Recovery Fraud Prevention Act of 2018 (OARFPA), 15 U.S.C. § 45d",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/2323043-monument-inc-us-v",
      "docket_number": "1:24-cv-01034"
    },
    {
      "provision_number": "XVI",
      "title": "Compliance Monitoring",
      "category": "monitoring",
      "summary": "The Commission and Plaintiff are authorized to monitor Defendant's compliance through requests for reports and documents, depositions, direct communications with Defendant's personnel, undercover investigations, and use of compulsory process.",
      "verbatim_text": "A. Within 14 days of receipt of a written request from a representative of the Commission, Defendant must: submit additional compliance reports or other requested information, which must be sworn under penalty of perjury; appear for depositions; and produce documents for inspection and copying. The Commission and Plaintiff are also authorized to obtain discovery, without further leave of court, using any of the procedures prescribed by Federal Rules of Civil Procedure 29, 30 (including telephonic depositions), 31, 33, 34, 36, 45, and 69.\n\nB. For matters concerning this Order, the Commission and Plaintiff are authorized to communicate directly with Defendant. Defendant must permit representatives of the Commission and Plaintiff to interview any employee or other person affiliated with any Defendant who has agreed to such an interview. The person interviewed may have counsel present.\n\nC. The Commission and Plaintiff may use all other lawful means, including posing, through their representatives as consumers, suppliers, or other individuals or entities, to Defendant or any individual or entity affiliated with Defendant, without the necessity of identification or prior notice. Nothing in this Order limits Case 1:24-cv-01034-BAH Document 6 Filed 06/07/24 Page 30 of 34 the Commission’s or Plaintiff’s lawful use of compulsory process, pursuant to Sections 9 and 20 of the FTC Act, 15 U.S.C. §§ 49, 57b-1.",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Compliance Monitoring"
      ],
      "case_id": "06.24_monument",
      "company_name": "Monument, Inc.",
      "date_issued": "2024-06-15",
      "year": 2024,
      "administration": "Biden",
      "legal_authority": "Section 5(a) of the Federal Trade Commission Act, 15 U.S.C. § 45(a), and Section 8023 of the Opioid Addiction Recovery Fraud Prevention Act of 2018 (OARFPA), 15 U.S.C. § 45d",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/2323043-monument-inc-us-v",
      "docket_number": "1:24-cv-01034"
    },
    {
      "provision_number": "XVII",
      "title": "Retention of Jurisdiction",
      "category": "duration",
      "summary": "The Court retains jurisdiction over this matter for purposes of construction, modification, and enforcement of this Order.",
      "verbatim_text": "IT IS FURTHER ORDERED that this Court retains jurisdiction of this matter for purposes of construction, modification, and enforcement of this Order.",
      "violation_type": "both",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Order Administration"
      ],
      "case_id": "06.24_monument",
      "company_name": "Monument, Inc.",
      "date_issued": "2024-06-15",
      "year": 2024,
      "administration": "Biden",
      "legal_authority": "Section 5(a) of the Federal Trade Commission Act, 15 U.S.C. § 45(a), and Section 8023 of the Opioid Addiction Recovery Fraud Prevention Act of 2018 (OARFPA), 15 U.S.C. § 45d",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/2323043-monument-inc-us-v",
      "docket_number": "1:24-cv-01034"
    },
    {
      "provision_number": "I",
      "title": "Prohibition Against Misrepresentations",
      "category": "prohibition",
      "summary": "Respondent must not misrepresent, expressly or by implication, its security or privacy practices, how it handles Personal Information or Health Information, its membership in any privacy/security programs, or any government approvals of its products or services.",
      "verbatim_text": "IT IS ORDERED that Respondent; Respondent’s officers, agents, and employees; and all other persons in active concert or participation with any of them, who receive actual notice of this Order, whether acting directly or indirectly, in connection with any product or service, must not misrepresent in any manner, expressly or by implication: A. The extent to which Respondent meets or exceeds industry-standard security or privacy practices;\n\nB. The extent to which Respondent stores any Health Information with any other element of Personal Information;\n\nC. The extent to which, or the purposes for which, Respondent collects, uses, discloses, maintains, deletes, or destroys a consumer’s: (1) physical DNA sample or (2) Personal Information upon request;\n\nD. The extent to which Respondent is a member of, adheres to, complies with, is certified by, or otherwise participates in any privacy or security program sponsored by a government entity or any third party, including any self-regulatory or standard-setting organization;\n\nE. The extent to which Respondent otherwise protects the privacy, security, availability, confidentiality, or integrity of Personal Information; or\n\nF. The extent to which Respondent has received approval or authorization for its claims, products, or services from any government agency.",
      "violation_type": "deceptive",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Prohibition"
      ],
      "case_id": "09.24_1health.iovitagene",
      "company_name": "1Health.io Inc.",
      "date_issued": "2024-09-15",
      "year": 2024,
      "administration": "Biden",
      "legal_authority": "Federal Trade Commission Act",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/1923170-1healthiovitagene-matter",
      "docket_number": "C-4798"
    },
    {
      "provision_number": "II",
      "title": "Affirmative Express Consent for Disclosure of Health Information to Third Parties",
      "category": "prohibition",
      "summary": "Respondent must not disclose any Health Information to any Third Party unless it first obtains the Affirmative Express Consent of the individual identifiable by that Health Information, except as required by law.",
      "verbatim_text": "IT IS FURTHER ORDERED that Respondent; Respondent’s officers, agents, and employees; and all other persons in active concert or participation with any of them, who receive actual notice of this Order, whether acting directly or indirectly, shall not, unless required by law, disclose to any Third Party any Health Information unless Respondent obtains the Affirmative Express Consent of the individual who is identifiable by the Health Information.",
      "violation_type": "deceptive",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Prohibition"
      ],
      "case_id": "09.24_1health.iovitagene",
      "company_name": "1Health.io Inc.",
      "date_issued": "2024-09-15",
      "year": 2024,
      "administration": "Biden",
      "legal_authority": "Federal Trade Commission Act",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/1923170-1healthiovitagene-matter",
      "docket_number": "C-4798"
    },
    {
      "provision_number": "III",
      "title": "Destruction of Saliva Samples",
      "category": "affirmative_obligation",
      "summary": "Within 30 days of the Order's issuance, Respondent must instruct laboratories to destroy retained physical DNA saliva samples held more than 180 days after Respondent accepted analysis results, and must provide sworn written confirmation of those instructions to the Commission.",
      "verbatim_text": "A. Instruct any laboratory that collected physical DNA saliva samples pursuant to a contract with Respondent to destroy any such sample that the laboratory has retained for more than 180 days after Respondent accepted the results of the laboratory’s analysis of the sample; 5 and\n\nB. Provide a written statement to the Commission, sworn under penalty of perjury, confirming that Respondent has given such instructions, and append to that statement true and correct copies of any such written instructions.",
      "violation_type": "deceptive",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Data Deletion"
      ],
      "case_id": "09.24_1health.iovitagene",
      "company_name": "1Health.io Inc.",
      "date_issued": "2024-09-15",
      "year": 2024,
      "administration": "Biden",
      "legal_authority": "Federal Trade Commission Act",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/1923170-1healthiovitagene-matter",
      "docket_number": "C-4798"
    },
    {
      "provision_number": "IV",
      "title": "Mandated Information Security Program",
      "category": "affirmative_obligation",
      "summary": "Within 60 days of the Order's issuance, Respondent must establish, implement, and maintain a comprehensive information security program protecting the security, confidentiality, and integrity of Personal Information, with specific minimum requirements including documentation, risk assessment, safeguards, testing, and service provider oversight.",
      "verbatim_text": "IT IS FURTHER ORDERED that Respondent, and any business that Respondent controls directly, or indirectly, in connection with the collection, maintenance, use, or disclosure of, or provision of access to, Personal Information, must, within sixty (60) days of issuance of this order, establish and implement, and thereafter maintain, a comprehensive information security program (“Information Security Program”) that protects the security, confidentiality, and integrity of such Personal Information. To satisfy this requirement, Respondent must, at a minimum:\n\nA. Document in writing the content, implementation, and maintenance of the Information Security Program;\n\nB. Provide the written program and any evaluations thereof or updates thereto to Respondent’s board of directors or governing body or, if no such board or equivalent governing body exists, to a senior officer of Respondent responsible for Respondent’s Information Security Program at least once every twelve (12) months and promptly (not to exceed thirty (30) days) after a Covered Incident;\n\nC. Designate a qualified employee or employees to coordinate and be responsible for the Information Security Program;\n\nD. Assess and document, at least once every twelve (12) months and promptly (not to exceed thirty (30) days) following a Covered Incident, internal and external risks to the security, confidentiality, or integrity of Personal Information that could result in the: (1) unauthorized collection, maintenance, use, or disclosure of, or provision of access to, Personal Information; or the (2) misuse, loss, theft, alteration, destruction, or other compromise of Personal Information;\n\nE. Design, implement, maintain, and document safeguards that control for the internal and external risks Respondent identifies to the security, confidentiality, or integrity of Personal Information identified in response to sub-Provision IV.D. Each safeguard must be based on the volume and sensitivity of the Personal Information that is at risk, and the likelihood that the risk could be realized and result in the: (1) unauthorized collection, maintenance, use, or disclosure of, or provision of access to, Personal Information; or the (2) misuse, loss, theft, alteration, destruction, or other compromise of Personal Information. Such safeguards must also include: 1. Policies, procedures, and technical measures to systematically inventory Personal Information in Respondent’s control; 6 2. Policies, procedures, and technical measures to log and monitor access to repositories of Personal Information in Respondent’s control; 3. Data access controls for all repositories of Personal Information in Respondent’s control, such as: (a) restricting inbound connections to approved IP addresses and (b) requiring authentication to access them; and 4. Encryption, or at least equivalent protection, of all Health Information in Respondent’s control that is reasonably linkable to an individual consumer, computer, or device, including in transit and at rest. To the extent that Respondent satisfies this requirement with at least equivalent protection rather than encryption, such protection shall be reviewed and approved by the qualified employee or employees designated to coordinate and be responsible for the Information Security Program;\n\nF. Assess, at least once every twelve (12) months and promptly (not to exceed thirty (30) days) following a Covered Incident, the sufficiency of any safeguards in place to address the internal and external risks to the security, confidentiality, or integrity of Personal Information, and modify the Information Security Program based on the results;\n\nG. Test and monitor the effectiveness of the safeguards at least once every twelve (12) months and promptly (not to exceed thirty (30) days) following a Covered Incident, and modify the Information Security Program based on the results. Such testing and monitoring must include vulnerability testing of Respondent’s network(s) once every four (4) months and promptly (not to exceed thirty (30) days) after a Covered Incident, and penetration testing of Respondent’s network(s) at least once every twelve (12) months and promptly (not to exceed thirty (30) days) after a Covered Incident;\n\nH. Select and retain service providers capable of safeguarding Personal Information they access through or receive from Respondent, and contractually require service providers to implement and maintain safeguards sufficient to address the internal and external risks to the security, confidentiality, or integrity of Personal Information; and\n\nI. Evaluate and adjust the Information Security Program in light of any changes to Respondent’s operations or business arrangements, a Covered Incident, new or more efficient technological or operational methods to control for the risks identified in Provision IV.D of this Order, or any other circumstances that Respondent knows or has reason to know may have an impact on the effectiveness of the Information Security Program or any of its individual safeguards. At a minimum, Respondent must evaluate the Information Security Program at least once every twelve (12) months and modify the Information Security Program based on the results.",
      "violation_type": "deceptive",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Data Security"
      ],
      "remedy_types": [
        "Comprehensive Security Program"
      ],
      "case_id": "09.24_1health.iovitagene",
      "company_name": "1Health.io Inc.",
      "date_issued": "2024-09-15",
      "year": 2024,
      "administration": "Biden",
      "legal_authority": "Federal Trade Commission Act",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/1923170-1healthiovitagene-matter",
      "docket_number": "C-4798"
    },
    {
      "provision_number": "V",
      "title": "Information Security Assessments by a Third Party",
      "category": "assessment",
      "summary": "Respondent must obtain initial and biennial independent third-party assessments of its Information Security Program, covering the first 180 days after the Order and each two-year period thereafter for 20 years, with assessments completed within 60 days after each reporting period and submitted to the Commission.",
      "verbatim_text": "A. The Assessments must be obtained from a qualified, objective, independent third-party professional (“Assessor”), who: (1) uses procedures and standards generally accepted in the profession; (2) conducts an independent review of the Information Security Program; and (3) retains all documents relevant to each Assessment for five (5) years after completion of such Assessment and will provide such documents to the Commission within ten (10) days of receipt of a written request from a representative of the Commission. The assessor may not withhold any documents from the Commission on the basis of a claim of confidentiality, proprietary or trade secrets, work product protection, attorney-client privilege, statutory protection, or any similar claim.\n\nB. For each Assessment, Respondent must provide the Associate Director for Enforcement for the Bureau of Consumer Protection at the Federal Trade Commission with the name, affiliation, and qualifications of the proposed Assessor, whom the Associate Director shall have the authority to approve in her or his sole discretion.\n\nC. The reporting period for the Assessments must cover: (1) the first 180 days after the issuance date of the Order for the initial Assessment; and (2) each two-year period thereafter for twenty (20) years after issuance of the Order for the biennial Assessments.\n\nD. Each Assessment must, for the entire assessment period: 1. Determine whether Respondent has implemented and maintained the Information Security Program required by Provision IV of this Order, titled Mandated Information Security Program; 2. Assess the effectiveness of Respondent’s implementation and maintenance of sub-Provisions IV.A-I; 3. Identify any gaps or weaknesses in, or instances of material noncompliance with, the Information Security Program; 4. Address the status of gaps or weaknesses in, or instances of material non-compliance with, the Information Security Program that were identified in any prior Assessment required by this Order; and 5. Identify specific evidence (including documents reviewed, sampling and testing performed, and interviews conducted) examined to make such determinations, assessments, and identifications, and explain why the evidence that the Assessor examined is: (a) appropriate for assessing an enterprise of Respondent’s size, complexity, and risk profile; and (b) sufficient to justify the Assessor’s findings. No finding of any Assessment shall rely primarily on assertions or attestations by Respondent’s management. The Assessment must be signed by the Assessor, state that the Assessor conducted an independent review of the Information Security Program and did not rely primarily on assertions or attestations by Respondent’s management, and state the number of hours that each member of the assessment team worked on the Assessment. To the extent that Respondent revises, updates, or adds 8 one or more safeguards required under Provision IV of this Order during an Assessment period, the Assessment must assess the effectiveness of the revised, updated, or added safeguard(s) for the time period in which it was in effect, and provide a separate statement detailing the basis for each revised, updated, or additional safeguard.\n\nE. Each Assessment must be completed within sixty (60) days after the end of the reporting period to which the Assessment applies. Unless otherwise directed by a Commission representative in writing, Respondent must submit an unredacted copy of the initial Assessment and a proposed redacted copy suitable for public disclosure to the Commission within ten (10) days after the Assessment has been completed via email to DEbrief@ftc.gov or by overnight courier (not the U.S. Postal Service) to Associate Director for Enforcement, Bureau of Consumer Protection, Federal Trade Commission, 600 Pennsylvania Avenue NW, Washington, DC 20580. The subject line must begin, “In re 1Health.io Inc., FTC File No. 1923170.” Respondent must retain an unredacted copy of each subsequent biennial Assessment as well as a proposed redacted copy of each subsequent biennial Assessment suitable for public disclosure until the order is terminated and must provide each such Assessment to the Associate Director for Enforcement within ten (10) days of request. The initial Assessment and any subsequent biennial Assessment provided to the Commission must be marked, in the upper right- hand corner of each page, with the words “DPIP Assessment” in red lettering.",
      "violation_type": "deceptive",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Data Security"
      ],
      "remedy_types": [
        "Third-Party Assessment"
      ],
      "case_id": "09.24_1health.iovitagene",
      "company_name": "1Health.io Inc.",
      "date_issued": "2024-09-15",
      "year": 2024,
      "administration": "Biden",
      "legal_authority": "Federal Trade Commission Act",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/1923170-1healthiovitagene-matter",
      "docket_number": "C-4798"
    },
    {
      "provision_number": "VI",
      "title": "Cooperation with Third-Party Information Security Assessor",
      "category": "affirmative_obligation",
      "summary": "Respondent must fully cooperate with the third-party Assessor by providing all relevant information, network and IT asset access, and disclosing all material facts without misrepresentation.",
      "verbatim_text": "A. Provide or otherwise make available to the Assessor all information and material in its possession, custody, or control that is relevant to the Assessment for which there is no reasonable claim of privilege;\n\nB. Provide or otherwise make available to the Assessor information about Respondent’s network(s) and all of Respondent’s IT assets so that the Assessor can determine the scope of the Assessment, and visibility to those portions of the network(s) and IT assets deemed in scope; and\n\nC. Disclose all material facts to the Assessor, and not misrepresent in any manner, expressly or by implication, any fact material to the Assessor’s: (1) determination of whether Respondent has implemented and maintained the Information Security Program required by Provision IV of this Order, titled Mandated Information Security Program; (2) assessment of the effectiveness of the implementation and maintenance of sub-Provisions IV.A-I; or (3) identification of any gaps or weaknesses in, or instances of material noncompliance with, the Information Security Program.",
      "violation_type": "deceptive",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Data Security"
      ],
      "remedy_types": [
        "Third-Party Assessment"
      ],
      "case_id": "09.24_1health.iovitagene",
      "company_name": "1Health.io Inc.",
      "date_issued": "2024-09-15",
      "year": 2024,
      "administration": "Biden",
      "legal_authority": "Federal Trade Commission Act",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/1923170-1healthiovitagene-matter",
      "docket_number": "C-4798"
    },
    {
      "provision_number": "VII",
      "title": "Annual Certification",
      "category": "compliance_reporting",
      "summary": "Beginning one year after the Order's issuance and annually thereafter, Respondent must provide the Commission with a certification from a senior corporate manager or officer attesting to compliance with the Order, absence of uncorrected or undisclosed material noncompliance, and describing all Covered Incidents during the certified period.",
      "verbatim_text": "A. One year after the issuance date of this Order, and each year thereafter, provide the Commission with a certification from a senior corporate manager, or, if no such senior corporate manager exists, a senior officer of Respondent responsible for Respondent’s Information Security Program that: (1) Respondent has established, implemented, and maintained the requirements of this Order; (2) Respondent is not aware of any material noncompliance that has not been (a) corrected or (b) disclosed to the Commission; and (3) includes a brief description of all Covered Incidents during the certified period. The certification must be based on the personal knowledge of the senior corporate manager, senior officer, or subject matter experts upon whom the senior corporate manager or senior officer reasonably relies in making the certification.\n\nB. Unless otherwise directed by a Commission representative in writing, submit all annual certifications to the Commission pursuant to this Order via email to DEbrief@ftc.gov or by overnight courier (not the U.S. Postal Service) to Associate Director for Enforcement, Bureau of Consumer Protection, Federal Trade Commission, 600 Pennsylvania Avenue NW, Washington, DC 20580. The subject line must begin: “In re 1Health.io Inc., FTC File No. 1923170.”",
      "violation_type": "deceptive",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Data Security"
      ],
      "remedy_types": [
        "Compliance Monitoring"
      ],
      "case_id": "09.24_1health.iovitagene",
      "company_name": "1Health.io Inc.",
      "date_issued": "2024-09-15",
      "year": 2024,
      "administration": "Biden",
      "legal_authority": "Federal Trade Commission Act",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/1923170-1healthiovitagene-matter",
      "docket_number": "C-4798"
    },
    {
      "provision_number": "VIII",
      "title": "Covered Incident Reports",
      "category": "compliance_reporting",
      "summary": "Respondent must submit a report to the Commission within 10 days of notifying any government entity of a Covered Incident, or within 10 business days of discovering unauthorized access to individually identifiable Health Information, including specified details about the incident.",
      "verbatim_text": "IT IS FURTHER ORDERED that, within: (1) ten (10) days of any notification to a United States federal, state, or local government entity of a Covered Incident; or (2) ten (10) business days of discovery that individually identifiable Health Information of or about an individual consumer was, or is reasonably believed to have been, accessed, acquired, or publicly exposed without authorization, Respondent must submit a report to the Commission. The report must include, to the extent possible: A. The date, estimated date, or estimated date range when the Covered Incident occurred; B. A description of the facts relating to the Covered Incident, including the causes of the Covered Incident, if known; C. A description of each type of information that was affected by the Covered Incident; D. The number of consumers whose information was affected by the Covered Incident; E. The acts that Respondent has taken to date to remediate the Covered Incident and protect Personal Information from further exposure or access, and protect affected individuals from identity theft or other harm that may result from the Covered Incident; and F. A representative copy of any materially different notice sent by Respondent to consumers or to any U.S. federal, state, or local government entity.\n\nUnless otherwise directed by a Commission representative in writing, all Covered Incident reports to the Commission pursuant to this Order must be emailed to DEbrief@ftc.gov or sent by overnight courier (not the U.S. Postal Service) to: Associate Director for Enforcement, Bureau of Consumer Protection, Federal Trade Commission, 600 Pennsylvania Avenue NW, Washington, DC 20580. The subject line must begin: “In re 1Health.io Inc., FTC File No. 1923170.”",
      "violation_type": "deceptive",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Data Security"
      ],
      "remedy_types": [
        "Compliance Monitoring"
      ],
      "case_id": "09.24_1health.iovitagene",
      "company_name": "1Health.io Inc.",
      "date_issued": "2024-09-15",
      "year": 2024,
      "administration": "Biden",
      "legal_authority": "Federal Trade Commission Act",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/1923170-1healthiovitagene-matter",
      "docket_number": "C-4798"
    },
    {
      "provision_number": "IX",
      "title": "Monetary Relief",
      "category": "affirmative_obligation",
      "summary": "Respondent must pay $75,000 to the Commission within 8 days of the Order's effective date by electronic fund transfer.",
      "verbatim_text": "A. Respondent must pay to the Commission $75,000. B. Such payment must be made within eight (8) days of the effective date of this Order by electronic fund transfer in accordance with instructions provided by a representative of the Commission.",
      "violation_type": "deceptive",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy",
        "Data Security"
      ],
      "remedy_types": [
        "Monetary Penalty"
      ],
      "case_id": "09.24_1health.iovitagene",
      "company_name": "1Health.io Inc.",
      "date_issued": "2024-09-15",
      "year": 2024,
      "administration": "Biden",
      "legal_authority": "Federal Trade Commission Act",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/1923170-1healthiovitagene-matter",
      "docket_number": "C-4798"
    },
    {
      "provision_number": "X",
      "title": "Additional Monetary Provisions",
      "category": "affirmative_obligation",
      "summary": "Respondent relinquishes all rights to transferred assets, agrees that Complaint facts may be taken as true in subsequent enforcement proceedings, and acknowledges the Commission's authority to use paid funds for consumer redress or related relief, with interest accruing on any default.",
      "verbatim_text": "A. Respondent relinquishes dominion and all legal and equitable right, title, and interest in all assets transferred pursuant to this Order and may not seek the return of any assets.\n\nB. The facts alleged in the Complaint will be taken as true, without further proof, in any subsequent civil litigation by or on behalf of the Commission to enforce its rights to any payment pursuant to this Order, such as a nondischargeability complaint in any bankruptcy case.\n\nC. The facts alleged in the Complaint establish all elements necessary to sustain an action by or on behalf of the Commission pursuant to Section 523(a)(2)(A) of the Bankruptcy Code, 11 U.S.C. § 523(a)(2)(A), and this Order will have collateral estoppel effect for such purposes.\n\nD. All money paid to the Commission pursuant to this Order may be deposited into a fund administered by the Commission or its designee to be used for relief, including consumer redress and any attendant expenses for the administration of any redress fund. If a representative of the Commission decides that direct redress to consumers is wholly or partially impracticable or money remains after redress is completed, the Commission may apply any remaining money for such other relief (including consumer information remedies) as it determines to be reasonably related to Respondent’s practices alleged in the Complaint. Any money not used is to be deposited to the U.S. Treasury. Respondent has no right to challenge any activities pursuant to this Provision.\n\nE. In the event of default on any obligation to make payment under this Order, interest, computed as if pursuant to 28 U.S.C. § 1961(a), shall accrue from the date of default to the date of payment. In the event such default continues for ten (10) days beyond the 11 date that payment is due, the entire amount will immediately become due and payable.\n\nF. Each day of nonpayment is a violation through continuing failure to obey or neglect to obey a final order of the Commission and thus will be deemed a separate offense and violation for which a civil penalty shall accrue.\n\nG. Respondent acknowledges that its Taxpayer Identification Numbers (Social Security or Employer Identification Number), which Respondent has previously submitted to the Commission, may be used for collecting and reporting on any delinquent amount arising out of this Order, in accordance with 31 U.S.C. § 7701.",
      "violation_type": "deceptive",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy",
        "Data Security"
      ],
      "remedy_types": [
        "Consumer Redress"
      ],
      "case_id": "09.24_1health.iovitagene",
      "company_name": "1Health.io Inc.",
      "date_issued": "2024-09-15",
      "year": 2024,
      "administration": "Biden",
      "legal_authority": "Federal Trade Commission Act",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/1923170-1healthiovitagene-matter",
      "docket_number": "C-4798"
    },
    {
      "provision_number": "XI",
      "title": "Customer Information",
      "category": "affirmative_obligation",
      "summary": "Respondent must provide sufficient customer information to enable the Commission to administer consumer redress to all Covered Customers, and must supply any additional redress-related information requested by the Commission within 14 days.",
      "verbatim_text": "IT IS FURTHER ORDERED that Respondent must directly or indirectly provide sufficient customer information to enable the Commission to efficiently administer consumer redress to all Covered Customers. Respondent represents that it has provided this redress information to the Commission. If a representative of the Commission requests in writing any information related to redress, Respondent must provide it, in the form prescribed by the Commission representative, within fourteen (14) days.",
      "violation_type": "deceptive",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy"
      ],
      "remedy_types": [
        "Consumer Redress"
      ],
      "case_id": "09.24_1health.iovitagene",
      "company_name": "1Health.io Inc.",
      "date_issued": "2024-09-15",
      "year": 2024,
      "administration": "Biden",
      "legal_authority": "Federal Trade Commission Act",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/1923170-1healthiovitagene-matter",
      "docket_number": "C-4798"
    },
    {
      "provision_number": "XII",
      "title": "Acknowledgments of the Order",
      "category": "acknowledgment",
      "summary": "Respondent must submit a sworn acknowledgment of receipt of this Order within 10 days, deliver copies to all relevant personnel within 10 days (and before new personnel assume responsibilities), and obtain signed acknowledgments from each recipient within 30 days of delivery.",
      "verbatim_text": "A. Respondent, within ten (10) days after the effective date of this Order, must submit to the Commission an acknowledgment of receipt of this Order sworn under penalty of perjury.\n\nB. For twenty (20) years after the issuance date of this Order, Respondent must deliver a copy of this Order to: (1) all principals, officers, directors, and LLC managers and members; (2) all employees, agents, and representatives having managerial responsibilities for conduct related to the subject matter of the Order; and (3) any business entity resulting from any change in structure as set forth in the Provision titled Compliance Report and Notices. Delivery must occur within ten (10) days after the effective date of this Order for current personnel. For all others, delivery must occur before they assume their responsibilities.\n\nC. From each individual or entity to which Respondent delivered a copy of this Order, Respondent must obtain, within thirty (30) days, a signed and dated acknowledgment of receipt of this Order.",
      "violation_type": "deceptive",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy",
        "Data Security"
      ],
      "remedy_types": [
        "Order Administration"
      ],
      "case_id": "09.24_1health.iovitagene",
      "company_name": "1Health.io Inc.",
      "date_issued": "2024-09-15",
      "year": 2024,
      "administration": "Biden",
      "legal_authority": "Federal Trade Commission Act",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/1923170-1healthiovitagene-matter",
      "docket_number": "C-4798"
    },
    {
      "provision_number": "XIII",
      "title": "Compliance Reports and Notices",
      "category": "compliance_reporting",
      "summary": "Respondent must submit an initial compliance report on saliva sample destruction within 90 days, a comprehensive annual compliance report one year after issuance, compliance notices within 14 days of specified changes, and notice of any bankruptcy filing within 14 days.",
      "verbatim_text": "A. Ninety (90) days after entry of this Order, Respondent must submit a compliance report, sworn under penalty of perjury, describing in detail its compliance with Provision III of this Order, titled Destruction of Saliva Samples. The report shall include, for each laboratory that Respondent instructed to destroy physical DNA saliva samples, a statement setting forth in detail the laboratory’s response to Respondent, if any, including, but not limited to, whether the laboratory destroyed such saliva samples and, if not, why the laboratory did not destroy such saliva samples, to the extent that the laboratory provided such information to Respondent.\n\nB. One year after the issuance date of this Order, Respondent must submit a compliance report, sworn under penalty of perjury, in which Respondent must: (1) identify the primary physical, postal, and email address and telephone number, as designated points of contact, which representatives of the Commission, may use to communicate with Respondent; (2) identify all of Respondent’s businesses by all of their names, telephone numbers, and physical, postal, email, and Internet addresses; (3) describe the activities of each business, including the goods and services offered, what Personal Information is collected, and the means of advertising, marketing, and sales; (4) describe in detail whether and how Respondent is in compliance with each Provision of this Order, including a discussion of all of the material changes Respondent made to comply with the Order; and (5) provide a copy of each Acknowledgment of the Order obtained pursuant to this Order, unless previously submitted to the Commission.\n\nC. Respondent must submit a compliance notice, sworn under penalty of perjury, within fourteen (14) days of any change in the following: (1) any designated point of contact; (2) the structure of Respondent or any entity that Respondent has any ownership interest in or controls directly or indirectly that may affect compliance obligations arising under this Order, including: creation, merger, sale, or dissolution of the entity or any subsidiary, parent, or affiliate that engages in any acts or practices subject to this Order; or (3) ownership of Respondent’s assets where such assets include Health Information, even if such change in ownership does not otherwise require the submission of a compliance notice.\n\nD. Respondent must submit notice of the filing of any bankruptcy petition, insolvency proceeding, or similar proceeding by or against Respondent within fourteen (14) days of its filing.\n\nE. Any submission to the Commission required by this Order to be sworn under penalty of perjury must be true and accurate and comply with 28 U.S.C. § 1746, such as by concluding: “I declare under penalty of perjury under the laws of the United States of America that the foregoing is true and correct. Executed on: ” and supplying the date, signatory’s full name, title (if applicable), and signature.\n\nF. Unless otherwise directed by a Commission representative in writing, all submissions to the Commission pursuant to this Order must be emailed to DEbrief@ftc.gov or sent by overnight courier (not the U.S. Postal Service) to: Associate Director for Enforcement, Bureau of Consumer Protection, Federal Trade Commission, 600 Pennsylvania Avenue NW, Washington, DC 20580. The subject line must begin: “In re 1Health.io Inc., FTC 13 File No. 1923170.”",
      "violation_type": "deceptive",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy",
        "Data Security"
      ],
      "remedy_types": [
        "Compliance Monitoring"
      ],
      "case_id": "09.24_1health.iovitagene",
      "company_name": "1Health.io Inc.",
      "date_issued": "2024-09-15",
      "year": 2024,
      "administration": "Biden",
      "legal_authority": "Federal Trade Commission Act",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/1923170-1healthiovitagene-matter",
      "docket_number": "C-4798"
    },
    {
      "provision_number": "XIV",
      "title": "Recordkeeping",
      "category": "recordkeeping",
      "summary": "Respondent must create and retain specified records for 20 years after the Order's issuance (retaining each for at least 5 years), including accounting records, personnel records, consumer complaints, privacy/security representations, consent documents, Assessment materials, and all compliance records.",
      "verbatim_text": "A. Accounting records showing the revenues from all goods or services sold, the costs incurred in generating those revenues, and resulting net profit or loss;\n\nB. Personnel records showing, for each person providing services in relation to any aspect of the Order, whether as an employee or otherwise, that person’s: name, addresses, telephone numbers, job title or position, dates of service, and (if applicable) the reason for termination;\n\nC. Copies or records of all consumer complaints and refund requests concerning the subject matter of the Order, whether received directly or indirectly, such as through a third party, and any response;\n\nD. A copy of each widely disseminated representation by Respondent that describes the extent to which Respondent maintains or protects the privacy, security, availability, confidentiality, or integrity of any Personal Information, including any representation concerning a change in any website or other service controlled by Respondent that relates to privacy, security, availability, confidentiality, or integrity of Personal Information;\n\nE. A sample copy of each different document relating to any attempt by Respondent to obtain the Affirmative Express Consent of consumers and copies of any documents demonstrating such consent provided by consumers, as required by Part II of this Order;\n\nF. For five (5) years after the date of preparation of each Assessment required by this Order, all materials and evidence that the Assessor considered, reviewed, relied upon or examined to prepare the Assessment, whether prepared by or on behalf of Respondent, including all plans, reports, studies, reviews, audits, audit trails, policies, training materials, and assessments, and any other materials concerning Respondent’s compliance with related Provisions of this Order, for the compliance period covered by such Assessment; and\n\nG. All records necessary to demonstrate full compliance with each Provision of this Order, including all submissions to the Commission.",
      "violation_type": "deceptive",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy",
        "Data Security"
      ],
      "remedy_types": [
        "Recordkeeping"
      ],
      "case_id": "09.24_1health.iovitagene",
      "company_name": "1Health.io Inc.",
      "date_issued": "2024-09-15",
      "year": 2024,
      "administration": "Biden",
      "legal_authority": "Federal Trade Commission Act",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/1923170-1healthiovitagene-matter",
      "docket_number": "C-4798"
    },
    {
      "provision_number": "XV",
      "title": "Compliance Monitoring",
      "category": "monitoring",
      "summary": "The Commission is authorized to monitor Respondent's compliance by requesting additional reports, records, and interviews, and may use other lawful means including posing as consumers or suppliers without prior notice.",
      "verbatim_text": "A. Within ten (10) days of receipt of a written request from a representative of the Commission, Respondent must: submit additional compliance reports or other requested information, which must be sworn under penalty of perjury, and produce records for inspection and copying.\n\nB. For matters concerning this Order, representatives of the Commission are authorized to communicate directly with Respondent. Respondent must permit representatives of the Commission to interview anyone affiliated with any Respondent who has agreed to such an interview. The interviewee may have counsel present.\n\nC. The Commission may use all other lawful means, including posing through its representatives as consumers, suppliers, or other individuals or entities, to Respondent or any individual or entity affiliated with Respondent, without the necessity of identification or prior notice. Nothing in this Order limits the Commission’s lawful use of compulsory process, pursuant to Sections 9 and 20 of the FTC Act, 15 U.S.C. §§ 49, 57b-1.",
      "violation_type": "deceptive",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy",
        "Data Security"
      ],
      "remedy_types": [
        "Compliance Monitoring"
      ],
      "case_id": "09.24_1health.iovitagene",
      "company_name": "1Health.io Inc.",
      "date_issued": "2024-09-15",
      "year": 2024,
      "administration": "Biden",
      "legal_authority": "Federal Trade Commission Act",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/1923170-1healthiovitagene-matter",
      "docket_number": "C-4798"
    },
    {
      "provision_number": "XVI",
      "title": "Order Effective Dates",
      "category": "duration",
      "summary": "The Order is final and effective upon publication on the FTC's website and terminates 20 years from its issuance date, or 20 years from the most recent date the Commission files a complaint alleging any violation of the Order, whichever is later.",
      "verbatim_text": "IT IS FURTHER ORDERED that this Order is final and effective upon the date of its publication on the Commission’s website (ftc.gov) as a final order. This Order will terminate\n\npublication on the Commission’s website (ftc.gov) as a final order. This Order will terminate twenty (20) years from the date of its issuance (which date may be stated at the end of this Order, near the Commission’s seal), or twenty (20) years from the most recent date that the United States or the Commission files a complaint (with or without an accompanying settlement) in federal court alleging any violation of this Order, whichever comes later; provided, however, that the filing of such a complaint will not affect the duration of: A. Any Provision in this Order that terminates in less than twenty (20) years; B. This Order’s application to any Respondent that is not named as a defendant in such complaint; and C. This Order if such complaint is filed after the Order has terminated pursuant to this Provision. Provided, further, that if such complaint is dismissed or a federal court rules that the Respondent did not violate any provision of the Order, and the dismissal or ruling is either not appealed or upheld on appeal, then the Order will terminate according to this Provision as though the complaint had never been filed, except that the Order will not terminate between the date such 15 complaint is filed and the later of the deadline for appealing such dismissal or rnling and the date such dismissal or rnling is upheld on appeal.",
      "violation_type": "deceptive",
      "statutory_topics": [
        "Health Breach Notification"
      ],
      "practice_areas": [
        "Privacy",
        "Data Security"
      ],
      "remedy_types": [
        "Order Administration"
      ],
      "case_id": "09.24_1health.iovitagene",
      "company_name": "1Health.io Inc.",
      "date_issued": "2024-09-15",
      "year": 2024,
      "administration": "Biden",
      "legal_authority": "Federal Trade Commission Act",
      "ftc_url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/1923170-1healthiovitagene-matter",
      "docket_number": "C-4798"
    }
  ]
}