信息安全资料FTC如何守护消费者健康信息隐私.pdfVIP

FTCEffortstoProtectthePrivacyof

ConsumerHealthInformation

WELCOMEANDINTRODUCTIONS

RobinRosenSpector,JDAdamGreene,JD,MPH

Attorney,DivisionofPrivacyandPartner,DavisWright

IdentityProtection,FederalTrade

CommissionTremaineLLP

Agenda

•RecentFTCActiononHealthPrivacy

•DifferencesBetweenFTCAuthorityand

HIPAA

•UnderstandingFTC’sExpectationsfor

HealthPrivacy

•AudienceQA

FTCBackground

•Independentlawenforcementagencywith2-part

mandate

–Consumerprotection

–Competition

•PrimarytoolisSection5oftheFTCAct,whichprohibits

unfairordeceptiveactsorpractices

HealthBreachNotificationRule

•Requiresnotificationofthebreachofunsecured

identifiablehealthinformationinpersonalhealth

records(PHRs)toindividuals,FTC,and(insomecases)

themedia

•Appliesto:

•Vendorsofpersonalhealthrecords

•PHRrelatedentities

•Thirdpartyserviceproviders

HealthBreachNotificationRule

•2021PolicyStatement

•2023Enforcementactions

–GoodRx

–EasyHealthcare(Premom)

•2023NoticeofProposedRulemaking

RecentEnforcementActions

•GoodRx

•BetterHelp

•EasyHealthcare(Premom)

•1Health.io(Vitagene)

•Warninglettersto130hospitalsystemstelehealth

providers

•Locationdatabrokercases

GoodRx

•Telehealthanddiscountdrugproviderallegedlyshared

healthinformationwiththirdpartiesforadvertising

withoutconsentandcontraryrepresentationsand

misrepresenteditscompliancewithHIPAA,DAA

•Complaintallegesviolationsof:

–HBNR(firstever)

–Section5(unfairnessanddeception)