STAT+: ‘No data more personal’: Patients, digital health players weigh in on the FTC’s data privacy plan
STAT+: ‘No data more personal’: Patients, digital health players weigh in on the FTC’s data privacy plan Katie Palmer
This year has seen the Federal Trade Commission crack down on digital health companies’ irresponsible data use. Since February, it has charged four companies with improperly handling sensitive health information — starting with the first-ever enforcement of its long-stagnant Health Breach Notification Rule, against GoodRx.
Now, the FTC is arming itself for even more aggressive enforcement. In June, it proposed changes to the Health Breach Notification Rule that would clarify its ability to regulate digital health companies and their use of health data — filling in some of the gaps left by the patient privacy law HIPAA, which in many cases doesn’t cover the fast-growing world of online and app-based health and wellness services.
“The FTC is seeking to put developers of these kind of apps on notice that they, too, have responsibilities to protect health data,” said Angie Matney, counsel focused on data privacy at the law firm Reed Smith.