Rite Aid Corporation and its 40 affiliated entities (RAC) have agreed to fork out $1 million to settle probable violations of the Health Insurance Portability and Accountability Act of 1996 (HIPAA) Privacy Rule, the U.S. In a coordinated motion, RAC also signed a consent order with the Federal Trade Commission (FTC) to settle potential violations of the FTC Act.