Does HIPAA cover every consumer health app?
No. HHS and FTC describe different rules with different scopes. HHS ties HIPAA status to covered-entity and business-associate roles; FTC says its Health Breach Notification Rule applies to most health apps and excludes HIPAA-covered businesses.
Map the data and service relationship before answering an application. Identify which entity collects or maintains the information and whether another organization receives a service involving protected health information.3
Ask counsel which rule applies to your actual product and data. For insurance, separately compare the cyber application and terms with your vendors, notification duties, and customer contracts.1,5
Read the Consumer Health and Wellness Insurance Buying Guide
Sources and Further Reading for Consumer Health and Wellness
Get Help With Insurance Buying and Renewals.
Get help buying coverage and managing renewals, with less paperwork for your team. Create your account and submit an insurance request online.
