Healthcare DIVE September 16, 2021
Shannon Muchmore

Dive Brief:

  • The U.S. Federal Trade Commission issued a policy brief Wednesday clarifying when healthcare apps would be subject to the Health Breach Notification Rule that requires entities not covered by HIPAA to notify consumers if private health information is compromised.
  • The FTC said that developers of health apps and connected devices are considered healthcare providers, and if they disclose sensitive information without authorization that would be considered a breach.
  • The agency also noted that a breach must be reported regardless of whether it was the result of malicious action. Any unauthorized access, including sharing information without consent, would trigger the rule.

Dive Insight:

The FTC said apps are subject to the breach notification rule if they are...

Today's Sponsors

LEK
ZeOmega

Today's Sponsor

LEK

 
Topics: Apps, Cybersecurity, Digital Health, Govt Agencies, Health IT, mHealth, Patient / Consumer, Provider, Technology
Hackers disclose personal information stolen in Change Healthcare cyberattack
Hospitals bulk up cybersecurity teams, budgets
CISA director pushes for vendor accountability and less emphasis on victims’ errors
22 state AGs: UnitedHealth's Change Healthcare hack response inadequate
Dropzone raises $17M to build autonomous cybersecurity AI agents

Share This Article