What entities are the new targets for data security enforcement? HIPPA adjacent health and wellness companies.
Why are HIPPA adjacent health and wellness companies the focus of regulators? These companies collect and store personal health information. For example:
- Fitbit & health apps. That data from your fitbit gets stored somewhere and if it was collected and stored by a health care provider, it would be protected information.
- Medical billing companies
- Medical Transcription Services.
What kind of enforcement actions are being considered for this health care app data? Regulators are looking for reasonable & appropriate data storage and data security protection.
Health Data Management | FTC steps up protection of consumer health data