Map the data and service relationship before answering an application. Identify which entity collects or maintains the information and whether another organization receives a service involving protected health information.[3]
Ask counsel which rule applies to your actual product and data. For insurance, separately compare the cyber application and terms with your vendors, notification duties, and customer contracts.[1][5]
Read the Consumer Health and Wellness Insurance Buying Guide
Sources and Further Reading
- Health Breach Notification Rule: The Basics for Business — Federal Trade Commission. Opening applicability and notification discussion; scope paragraph distinguishing HIPAA-covered businesses
Check FTC guidance on health apps, consumer health information, and the boundary with HIPAA-covered organizations.
- Direct-to-Consumer Tests — U.S. Food and Drug Administration. FDA Oversight; Types of Direct-to-Consumer Tests and their Regulatory Pathways; Limitations of Direct-to-Consumer Tests
Describe a consumer test by its intended use and product type before discussing the quote.
- Guidance on HIPAA & Cloud Computing — U.S. Department of Health and Human Services, Office for Civil Rights. Questions 1–3 on covered entities, business associates, and cloud services
- Cybersecurity — National Association of Insurance Commissioners, Center for Insurance Policy and Research. Cyber risk categories and customized-policy qualification
- Cyber Insurance: Cybersecurity for Small Business — National Association of Insurance Commissioners. First-party and third-party coverage sections; vendor-held data and defense wording prompts
Compare first-party incident expenses, third-party claims, vendor-held data, and defense wording as questions for your policy.
- Small Business Insurance — National Association of Insurance Commissioners. General liability and other types of business liability sections
Spot, a product of Tools for Enlightenment, publishes this guide and works in the commercial insurance market. This is general buyer education; policy terms and state-specific obligations determine coverage and requirements.
Updated 2026-09-28. Editorial Policy
Get Help With Insurance Buying and Renewals.
Get help buying coverage and managing renewals, with less paperwork for your team. Start with a free consultation.
