In many instances, digital products are not squarely regulated by the US Food and Drug Administration (FDA), or by the Department of Health and Human Service (HHS) Office of Civil Rights (OCR)-which enforces the Health Insurance Portability and Accountability Act (HIPAA). Instead, a patchwork of various state data privacy and security laws may apply, in addition to consumer protection laws. We expect to see states continue to pass laws, which means companies have to monitor state law developments to ensure the data they collect meets regulatory requirements.
Comments