FTC Warns Health App Makers to Protect Privacy of Personal Data

The Federal Trade Commission issued a policy statement clarifying mobile health app makers’ obligations to notify consumers if their data is exposed or shared without their permission.

FTC chair Lina Khan said the health privacy policy, issued Wednesday, is meant to fill a “gap” in regulations for health apps, which generally aren’t covered by the Health Insurance Portability and Accountability Act, known as HIPAA. The federal law directs health-care providers and insurers to safeguard the privacy and security of personal health data.

A related rule from the FTC called the health breach notification rule requires vendors of digital health ...