Health Data
-
October 14, 2024
Washington Healthcare Provider to Pay $250,000 Settlement Over Alleged HIPAA Violations
On September 26, 2024, the U.S. Department of Health and Human Services Office for Civil Rights (OCR) announced a $250,000 settlement with Cascade Eye and Skin Centers due to alleged violations of the HIPAA Rules. OCR enforces...
Ben MacLean, Paul Rice, Anna Hsia
-
May 8, 2024
Updated MHMDA Guidance Says Non-Prescription Medication Purchases Are Not Consumer Health Data
The Washington Attorney General (“WA AG”) recently updated its My Health, My Data Act (“MHMDA”) FAQs to clarify that consumer health data (“CHD”) does not include the purchase of non-prescription medication, but does include inferences about a consumer’s health based on that purchase....
Hannah Schaller, Kelsey Harclerode, Marci Rozen, Anna Hsia
-
February 6, 2024
Updated MHMDA Guidance Elaborates on Consumer Health Data Privacy Policy Requirements
On March 31, 2024, most of Washington’s My Health, My Data Act (“MHMDA”) will go into effect for all in-scope business other than small businesses. As we’ve previously blogged, the geofencing provision went into effect last July. Notably,...
Kelsey Harclerode, Hannah Schaller, Noah Katz, Kandi Parsons
-
December 20, 2023
HHS Concept Paper to Enhance Health Care Sector Security
The U.S. Department of Health and Human Services (HHS) released a concept paper outlining the Department’s cybersecurity strategy to address rising health sector security incidents. This concept paper is a result of the Biden administration’s efforts to strengthen...
Paul Rice, Kady Hammer, Marci Rozen
-
September 13, 2023
FTC Continues Enforcement of Health Data Privacy and Security
The FTC finalized an order against 1Health.io (formerly Vitagene), alleging that the company misrepresented consumers’ rights regarding their genetic and health data, including the ability to have their data deleted; inadequately secured such data; and...
Daniel Levin, Anna Hsia, Kady Hammer
-
May 12, 2023
Washington’s “My Health, My Data” Act Prescribes Restrictive Health Data Rules
Enacted on April 27, 2023, Washington’s “My Health, My Data” Act (the “Act”) creates significant compliance obligations for companies processing data in its scope. The expansive reach of the Act, coupled with a private right of action...
Hannah Schaller, Melissa Maalouf, Anna Hsia
-
March 3, 2023
FTC Reinforces Restriction on Health Data Disclosures for Advertising
In a continuation of the trend of regulatory guidance and actions on online advertising, the FTC issued a proposed order against online counseling service, BetterHelp, alleging that BetterHelp unlawfully shared consumers’ health data for advertising...
Daniel Levin, Rushil Mehta, Anna Hsia
-
February 2, 2023
FTC Sends Strong Warning Against Online Tracking and Advertising Using Health Data
On February 1, 2023, the FTC announced an enforcement action against GoodRx for unlawfully disclosing users’ health information through the use of third-party tracking technologies, sending a strong warning to the online health industry against tracking health-related...
Anna Hsia, Hannah Schaller, Melissa Maalouf
