Rite Aid Corporation and its forty affiliated entities (RAC) have agreed to shell out $1 million to settle prospective violations of the Health Insurance Portability and Accountability Act of 1996 (HIPAA) Privacy Rule, the U.S. In a coordinated motion, RAC also signed a consent get with the Federal Trade Commission (FTC) to settle prospective violations of the FTC Act.