In an unprecedented move, on July 20, 2023, the Department of Health and Human Services (DHHS) via the Office of Civil Rights (OCR) and the Federal Trade Commission (FTC) have jointly issued a cautionary letter to hospital systems and telehealth providers. This letter comes in response to growing concerns related to the privacy and security risks associated with the use of online tracking technologies in the health sector.
The primary focus of the warning letter is the potential for the impermissible disclosure of consumer personal health data to unauthorized third parties. Given the heightened importance of secure data handling in the healthcare industry, this issue has gained significant gravity, calling immediate attention to ensuring best data practices.
This collaborative approach by DHHS’s OCR and the FTC emphasizes their commitment to safeguarding patient data. It provides a stark reminder to all stakeholders in the healthcare sector about the implementation of effective data privacy measures.
As hospital systems and telehealth providers increasingly rely on digital tools, it’s now more crucial than ever to ensure the privacy and security of consumers’ personal health data. Providers must reassess their data protocols to comply with key regulatory standards and prevent the non-consensual exploitation of such data.
This professional advice by the DHHS and FTC is aimed at prompting large corporations and law firms to re-examine privacy and security protocols in the rapidly evolving digital health arena. Legal professionals should expect to navigate complex legal and ethical ground as the sector adapts to the dynamics of digital health data management.