This week, the FTC ordered Cerebral to pay a $7 million fine, accusing the company of mishandling users’ sensitive health data and misleading consumers about cancellation policies. Experts agree that other virtual healthcare providers need to work on their legal and compliance strategies in order to avoid a similar fate.
Increasing innovation in, and consumer demand for, healthcare technology continue to transform the Medtech industry, including in digital health, wearables, diagnostics, telemedicine and other health IT solutions.
Munck Wilson Mandala Partner Greg Howison shared his perspective on some of the legal ramifications around AI, IP, connected devices and the data they generate, in response to emailed questions.
Navigating the complexities of HIPAA compliance requires a multifaceted strategy that combines efficient processes, continuous training, technological innovation, and proactive engagement with regulatory bodies. While meeting compliance benchmarks is non-negotiable, the ultimate goal should be to provide high-quality, patient-centric care.
WebMD Ignite — the company’s division that offers tech solutions to providers and health plans — teamed up with healthcare privacy platform Freshpaint. Through the partnership, WebMD Ignite is seeking to help its customers — which include organizations such as Providence, Trinity Health, Advocate Aurora, VillageMD and Centene — use web tracking technology to grow their businesses while staying clear of data privacy risks.
Integral raked in $6.9 million in seed funding in this week. The San Francisco-based startup is developing technology that seeks to speed up the process of exchanging sensitive health data while still maintaining robust privacy protection.
The average cost of a healthcare data breach is now $10.93 million, up from $10.10 million in 2022, according to a new report. Healthcare has the highest data breach costs of all industries — breaches are second costliest in the financial sector, where the average cost is $5.9 million.
At the Abarca Forward conference earlier this year, George Van Antwerp, managing director at Deloitte, discussed how social determinants of health and a personalized member experience can improve medication adherence and health outcomes.
To prevent the proliferation of data security incidents in the healthcare industry, providers must examine their use of legacy systems as well as their reliance on third parties, according to a new report. It pointed out that most providers fail to probe their third-party partners' cybersecurity measures, and many continue to use legacy systems that are no longer supported by vendors or are hard to patch and update.
In the EU, there is a widespread distrust of American tech companies, according to a recent conference presentation by an international healthcare lawyer. Because of this, the EU has established a number of new laws protecting its citizens' data privacy and creating frameworks for the secure exchange of information — laws that American health tech companies will have to comply with if they do business in the EU.
Cerebral recently notified 3.1 million of its users that their private health information was shared with tech companies like Meta, Google and TikTok. The data breach stemmed from Cerebral's use of pixel tracking technology, which the company said has been discontinued or reconfigured.
Three senators recently introduced legislation that would ban the use of health data for advertising and marketing purposes. The proposed legislation comes amid media reports claiming that data brokers are selling social media companies patients' location data, as well as reports that hospitals and digital health startups are collecting patients’ online data and sharing it with tech giants such as Facebook and Google.
We will highlight Build My Health's revenue practice management tools, which could help physician practices add up to $250,000 to their practices.
Patient privacy is evolving rapidly in the post-Dobbs era, according to healthcare and life science lawyers in a webinar hosted by the American Bar Association on Wednesday.
In the lawsuit, two patients claimed Facebook's pixel tracking tool is being improperly used on hospital websites, and redirecting people to sign in through their Facebook account to be able to sign-in or out of the hospital’s patient portal to request an appointment or talk with a provider.
The patient is alleging that the patient portal he used to communicate with his doctors at Advocate Aurora and to schedule appointments used a pixelated code that also enabled logging in via Facebook and then shared data with Facebook.
Kochava allegedly sold geolocation data from hundreds of millions of cell phones that showed people’s visits to reproductive health clinics, places of worship, homeless and domestic violence shelters and addiction recovery facilities.
Here are three considerations for ways HIPAA can navigate the intersection between personalization and data privacy while meeting regulatory requirements.