News | Mobile Devices | April 25, 2016

FTC Creates Compliance Tool for Mobile Health App Developers

Tool and related business guidance designed to help developers stay compliant with federal and state privacy regulations

mobile health apps, FTC, compliance tool, business guidance, privacy

April 25, 2016 — The Federal Trade Commission (FTC) announced that it has created a Web-based guidance tool for developers of health-related mobile applications (health apps). FTC did not take this action alone, but rather developed the tool in conjunction with the Department of Health and Human Services’s (HHS) Office of the National Coordinator for Health Information Technology (ONC), Office for Civil Rights (OCR), and the U.S. Food and Drug Administration (FDA). 

FDA released a seminal guidance document on mobile medical apps early last year. In its guidance document, FDA addresses, among other things, those apps it intends to regulate as medical devices under the Federal Food, Drug, and Cosmetic Act (FD&C Act) and those for which the agency intends to exercise its enforcement discretion. OCR has also recently issued guidance in this area, providing examples of scenarios where the Health Insurance Portability and Accountability Act (HIPAA) regulations might apply to health information created, managed or organized through the use of health apps.

The FTC’s new health apps tool asks developers a series of high-level questions about the nature of the app, including questions about its function, the data it collects and the services it provides to users.  These questions include the following:

  • Do you create, receive, maintain or transmit identifiable health information?;
  • Are you a healthcare provider or health plan?;
  • Do consumers need a prescription to access your app?;
  • Are you developing this app on behalf of a HIPAA-covered entity?;
  • Is your app intended for use in the diagnosis of disease or other conditions, or in the cure, mitigation, treatment or prevention of disease?;
  • Does your app pose “minimal risk” to a user?;
  • Is your app a “mobile medical app”?;
  • Are you a nonprofit organization?; and
  • Do you offer health records directly to consumers (or do you interact with or offer services to someone who does)?

Based on the answers to these questions, the tool will point the app developer toward detailed information about certain federal laws that might apply to the app, including the FTC Act, the FTC’s Health Breach Notification Rule, HIPAA and the FD&C Act.

Simultaneous with the release of the guidance tool, the Commission also issued a business guidance aimed at helping health app developers comply with the FTC Act by building privacy and security into their apps. Beyond the laws identified above, FTC notes in its business guidance that health apps could be subject to, among other things, the Children’s Online Privacy Protection Rule; the Gramm-Leach-Bliley Act’s Safeguards Rule and Privacy Rule; myriad state laws; and basic truth-in-advertising and privacy principles.

Given the proliferation of health apps, developers can expect increasing federal and state scrutiny over these products.  The veritable alphabet soup of potentially-applicable laws require that developers maintain a sophisticated understanding of both existing requirements and new requirements that are sure to come online over the coming months and years.

For more information: www.venable.com

Related Content

Philips Launches IntelliSpace Discovery Research Platform at RSNA
Technology | Artificial Intelligence | November 20, 2018
Ahead of the 2018 Radiological Society of North America Annual Meeting (RSNA), Nov. 25-30 in Chicago, Royal Philips...
QView Medical Showcases QVCAD for ABUS Exams at RSNA 2018
News | Ultrasound Women's Health | November 19, 2018
QView Medical will showcase QVCAD, the first U.S. Food and Drug Administration (FDA)-approved artificial intelligence (...
Technology | Archive Cloud Storage | November 19, 2018
November 19, 2018 — Intelerad Medical Systems announced the launch of the nuage Disaster Recovery (DR) Platform.
Sponsored Content | Case Study | Enterprise Imaging | November 16, 2018
Centricity Clinical Archive Analytics uses Microsoft Azure and Power BI Embedded to derive intelligence from the data
Lunit Unveiling AI-Based Mammography Solution at RSNA 2018
News | Mammography | November 15, 2018
Medical artificial intelligence (AI) software company Lunit will be returning to the 104th Radiological Society of...
Life Image and Mendel.ai Bringing Artificial Intelligence to Clinical Trial Development
News | Artificial Intelligence | November 15, 2018
Life Image and Mendel.ai announced a new strategic partnership that will facilitate the adoption and enhancement of...
News | Enterprise Imaging | November 14, 2018
Konica Minolta Healthcare Americas Inc. will showcase new features and tools for the Exa Enterprise Imaging platform at...
Artificial Intelligence Predicts Alzheimer's Years Before Diagnosis
News | Neuro Imaging | November 14, 2018
Artificial intelligence (AI) technology improves the ability of brain imaging to predict Alzheimer’s disease, according...
MDW Unveils First Radiology Blockchain Platform at RSNA 2018
News | Radiology Business | November 13, 2018
Medical Diagnostic Web (MDW) will debut the first radiology blockchain platform designed to connect all players in the...