Lexology August 2, 2022
Numerous data privacy and security laws govern the private sector’s collection and use of health data in the USA. These laws vary in scope and substance but some combination of them would probably apply to your company if, for example, it does any of the following in the country:
- Diagnoses or treats patients’ health conditions;
- Offers an app intended to promote the health or wellness of consumers;
- Provides health insurance or helps to process health insurance claims;
- Collects health information from employees or other workers;
- Performs research and receives health information from research subjects and respondents; or
- Provides data processing services to organizations that perform the above functions.
In many situations, companies have to obtain express consent to...