Agencies warn hospitals, others about tracking technology compliance risks

Jul 21, 2023 - 02:28 PM
cybersecurity

The Department of Health and Human Services’ Office for Civil Rights and Federal Trade Commission yesterday sent a letter to about 130 hospital systems and telehealth providers reminding them to comply with HIPAA Privacy, Security and Breach Notification Rules, the FTC Act and FTC Health Breach Notification Rule when using technologies that can track a user’s online activities, such as Meta/Facebook Pixel and Google Analytics.  
 
“Both agencies are closely watching developments in this area,” the letter states. “To the extent you are using the tracking technologies described in this letter on your website or app, we strongly encourage you to review the laws cited in this letter and take actions to protect the privacy and security of individuals’ health information.”
 
For more information, see the HHS press release.

Related News Articles

Headline
CISA shares low-cost cybersecurity strategy for hospitals
New guidance from the Cybersecurity and Infrastructure Security Agency encourages healthcare organizations to consider internal network and internet facing…
Headline
NIST, CISA issue guidelines on protecting authentication tools from forgery, theft
The National Institute of Standards and Technology and the Cybersecurity and Infrastructure and Security Agency have released guidelines to protect…
Headline
AHA comments on proposals regarding Medicare provider payment, cybersecurity during House subcommittee hearing
The House Energy and Commerce Subcommittee on Health held a hearing Sept. 15 to discuss more than a dozen legislative proposals regarding Medicare provider…
Headline
NSA releases best practices guide on cyber hygiene for defending against advanced threats 
The National Security Agency has released a best practices guide on effective cyber hygiene for defending against advanced cyber threats, including those…
Headline
FBI warns of cyber actors deceiving individuals through ‘OAuth consent phishing’
An FBI alert released Sept. 1 warns of cyber actors impersonating government officials, media and other public individuals on a commercial messaging app to…
Headline
AHA podcast: Top 3 Healthcare Cyber Threats in 2026 
In this conversation, John Riggi, AHA national advisor for cybersecurity and risk, and Scott Gee, AHA deputy national advisor for cybersecurity and risk, break…