News | Mobile Devices | April 25, 2016

FTC Creates Compliance Tool for Mobile Health App Developers

Tool and related business guidance designed to help developers stay compliant with federal and state privacy regulations

mobile health apps, FTC, compliance tool, business guidance, privacy

April 25, 2016 — The Federal Trade Commission (FTC) announced that it has created a Web-based guidance tool for developers of health-related mobile applications (health apps). FTC did not take this action alone, but rather developed the tool in conjunction with the Department of Health and Human Services’s (HHS) Office of the National Coordinator for Health Information Technology (ONC), Office for Civil Rights (OCR), and the U.S. Food and Drug Administration (FDA). 

FDA released a seminal guidance document on mobile medical apps early last year. In its guidance document, FDA addresses, among other things, those apps it intends to regulate as medical devices under the Federal Food, Drug, and Cosmetic Act (FD&C Act) and those for which the agency intends to exercise its enforcement discretion. OCR has also recently issued guidance in this area, providing examples of scenarios where the Health Insurance Portability and Accountability Act (HIPAA) regulations might apply to health information created, managed or organized through the use of health apps.

The FTC’s new health apps tool asks developers a series of high-level questions about the nature of the app, including questions about its function, the data it collects and the services it provides to users.  These questions include the following:

  • Do you create, receive, maintain or transmit identifiable health information?;
  • Are you a healthcare provider or health plan?;
  • Do consumers need a prescription to access your app?;
  • Are you developing this app on behalf of a HIPAA-covered entity?;
  • Is your app intended for use in the diagnosis of disease or other conditions, or in the cure, mitigation, treatment or prevention of disease?;
  • Does your app pose “minimal risk” to a user?;
  • Is your app a “mobile medical app”?;
  • Are you a nonprofit organization?; and
  • Do you offer health records directly to consumers (or do you interact with or offer services to someone who does)?

Based on the answers to these questions, the tool will point the app developer toward detailed information about certain federal laws that might apply to the app, including the FTC Act, the FTC’s Health Breach Notification Rule, HIPAA and the FD&C Act.

Simultaneous with the release of the guidance tool, the Commission also issued a business guidance aimed at helping health app developers comply with the FTC Act by building privacy and security into their apps. Beyond the laws identified above, FTC notes in its business guidance that health apps could be subject to, among other things, the Children’s Online Privacy Protection Rule; the Gramm-Leach-Bliley Act’s Safeguards Rule and Privacy Rule; myriad state laws; and basic truth-in-advertising and privacy principles.

Given the proliferation of health apps, developers can expect increasing federal and state scrutiny over these products.  The veritable alphabet soup of potentially-applicable laws require that developers maintain a sophisticated understanding of both existing requirements and new requirements that are sure to come online over the coming months and years.

For more information: www.venable.com

Related Content

Johns Hopkins Named Qualified Provider-led Entity to Develop Criteria for Diagnostic Imaging
News | Clinical Decision Support | July 18, 2019
On June 30, 2019, the Centers for Medicare & Medicaid Services (CMS) announced the Johns Hopkins University School...
Anatomage Releases Anatomage Cloud Platform
News | Remote Viewing Systems | July 16, 2019
Anatomage Inc. released an update to the Anatomage Cloud platform that allows medical and dental professionals to...
Graphic courtesy Pixabay

Graphic courtesy Pixabay

Feature | Artificial Intelligence | July 15, 2019 | By Greg Freiherr
Siemens has long focused on automation as a way to make diagnostic equipment faster and more efficient.
Videos | Artificial Intelligence | July 12, 2019
Khan Siddiqui, M.D., founder and CEO of HOPPR, discusses the economic advantages and costs presented by...
360 Photos | Ultrasound Imaging | July 11, 2019
This 360 degree photo shows a basic, point-of-care cardiac echocardiogram being performed using a smartphone turned i
Videos | Enterprise Imaging | July 09, 2019
ITN Associate Editor Jeff Zagoudis speaks with Don Dennison
Videos | Enterprise Imaging | July 08, 2019
ITN Associate Editor Jeff Zagoudis speaks with Don Dennison
Infervision Releases InferTEST Program at SIIM 2019
News | Artificial Intelligence | July 08, 2019
Infervision announced their InferTEST program at the recent Society for Imaging Informatics in Medicine (SIIM)...
Hyland Healthcare Adds ImageNext Imaging Workflow Optimizer to Enterprise Imaging Suite
Technology | Enterprise Imaging | July 05, 2019
Hyland Healthcare is launching ImageNext, a vendor-neutral imaging workflow optimizer that combines intelligent imaging...
TeraRecon Unveils iNtuition AI Data Extractor
News | Advanced Visualization | July 03, 2019
Artificial Intelligence (AI) and advanced visualization company TeraRecon announced its new iNtuition AI Data Extractor...