News | Mobile Devices | April 25, 2016

FTC Creates Compliance Tool for Mobile Health App Developers

Tool and related business guidance designed to help developers stay compliant with federal and state privacy regulations

mobile health apps, FTC, compliance tool, business guidance, privacy

April 25, 2016 — The Federal Trade Commission (FTC) announced that it has created a Web-based guidance tool for developers of health-related mobile applications (health apps). FTC did not take this action alone, but rather developed the tool in conjunction with the Department of Health and Human Services’s (HHS) Office of the National Coordinator for Health Information Technology (ONC), Office for Civil Rights (OCR), and the U.S. Food and Drug Administration (FDA). 

FDA released a seminal guidance document on mobile medical apps early last year.  In its guidance document, FDA addresses, among other things, those apps it intends to regulate as medical devices under the Federal Food, Drug, and Cosmetic Act (FD&C Act) and those for which the agency intends to exercise its enforcement discretion. OCR has also recently issued guidance in this area, providing examples of scenarios where the Health Insurance Portability and Accountability Act (HIPAA) regulations might apply to health information created, managed or organized through the use of health apps.

The FTC’s new health apps tool asks developers a series of high-level questions about the nature of the app, including questions about its function, the data it collects and the services it provides to users.  These questions include the following:

  • Do you create, receive, maintain or transmit identifiable health information?;
  • Are you a healthcare provider or health plan?;
  • Do consumers need a prescription to access your app?;
  • Are you developing this app on behalf of a HIPAA-covered entity?;
  • Is your app intended for use in the diagnosis of disease or other conditions, or in the cure, mitigation, treatment or prevention of disease?;
  • Does your app pose “minimal risk” to a user?;
  • Is your app a “mobile medical app”?;
  • Are you a nonprofit organization?; and
  • Do you offer health records directly to consumers (or do you interact with or offer services to someone who does)?

Based on the answers to these questions, the tool will point the app developer toward detailed information about certain federal laws that might apply to the app, including the FTC Act, the FTC’s Health Breach Notification Rule, HIPAA and the FD&C Act.

Simultaneous with the release of the guidance tool, the Commission also issued a business guidance aimed at helping health app developers comply with the FTC Act by building privacy and security into their apps. Beyond the laws identified above, FTC notes in its business guidance that health apps could be subject to, among other things, the Children’s Online Privacy Protection Rule; the Gramm-Leach-Bliley Act’s Safeguards Rule and Privacy Rule; myriad state laws; and basic truth-in-advertising and privacy principles.

Given the proliferation of health apps, developers can expect increasing federal and state scrutiny over these products.  The veritable alphabet soup of potentially-applicable laws require that developers maintain a sophisticated understanding of both existing requirements and new requirements that are sure to come online over the coming months and years.

For more information: www.venable.com


Related Content

Feature | Information Technology | By Melinda Taschetta-Millane

​The Healthcare Information and Management Systems Society (HIMSS) Global Health Conference and Exhibition brought ...

Home May 01, 2024
Home
Feature | Information Technology

Providing exceptional cardiovascular care for patients to achieve the best possible outcomes is the number one goal for ...

Home March 21, 2024
Home
News | Information Technology

March 7, 2024 — Siemens Healthineers has launched an app designed for Apple Vision Pro that enables users such as ...

Home March 07, 2024
Home
News | Information Technology

November 14, 2023 — To help provide clinicians a comprehensive workflow, GE HealthCare is working towards the seamless ...

Home November 14, 2023
Home
Feature | Information Technology | By Melinda Taschetta-Millane

Healthcare is constantly evolving, finding new ways to innovate and advance digital tools and technology. With this ...

Home July 14, 2023
Home
Videos | Information Technology

HIMMS is working to bring empirical knowledge and evidence of value and impact of digital maturity measured by the HIMSS ...

Home May 17, 2023
Home
Videos | Information Technology

Healthcare is constantly evolving, finding new ways to innovate and advance digital tools and technology. With this ...

Home May 11, 2023
Home
Feature | Information Technology

Many cardiology departments face significant challenges meeting regulatory requirements, quality metrics, and ...

Home February 10, 2023
Home
Case Study | Information Technology

This case study from Change Healthcare presents the following: Customer: Washington Health System Washington, PA ...

Home January 10, 2023
Home
News | Information Technology

February 24, 2022 — Imagine that you are admitted to hospital. A smart scheduling system ensures you have a bed; you ...

Home February 24, 2022
Home
Subscribe Now