
Sold private health data after promising customers not to?
Seems like there should be an extra digit or two on that fine. So what that they didn't turn a profit; intentionally violating both the law and your own terms of service should result in a fine that's an existential threat!