Loading…

FTC enforcement actions against HIPAA covered entities

The Federal Trade Commission (FTC) is most commonly associated with consumer protection actions. In this capacity, it regulates unfair and deceptive practices affecting consumers, including deceptive advertising, spam emails, and unfair debt collection practices. Over the years, the FTC's autho...

Full description

Saved in:
Bibliographic Details
Published in:Administrative & Regulatory Law News 2014-07, Vol.39 (4), p.9
Main Author: Hudson, Stephanie E
Format: Article
Language:English
Subjects:
Online Access:Get full text
Tags: Add Tag
No Tags, Be the first to tag this record!
Description
Summary:The Federal Trade Commission (FTC) is most commonly associated with consumer protection actions. In this capacity, it regulates unfair and deceptive practices affecting consumers, including deceptive advertising, spam emails, and unfair debt collection practices. Over the years, the FTC's authority to regulate unfair and deceptive practices has grown to encompass data security practices and standards. The FTC uses its broad regulatory authority under 15 U.S.C. Section 45, and in particular Section 5, to bring enforcement actions against companies experiencing data breaches. This article focuses on the seminal case In the Matter of LabMD Inc, the FTC's first major enforcement action against an entity principally subject to HIPAA and HITECH regulations. LabMD is the first entity primarily regulated by HIPAA and HITECH to come under fire through the FTC's new data security enforcement scheme. Logically, then, LabMD routinely interacts with and manages sensitive information deemed "protected health information" under HIPAA and HITECH.
ISSN:1544-1547
2163-1743