2023 Privacy Compliance Year In Review

2023 was an eventful year for privacy legislation, regulation and regulatory enforcement. The compliance landscape continues to develop and evolve rapidly, making it difficult for covered businesses to keep up with the myriad requirements. In this post, we discuss some of the year's most interesting privacy compliance developments globally.

U.S. Regulators Crack Down on Tracking Technologies and Health Data

Early in the year, regulators continued to signal increased focus on use of tracking technologies in the context of health-related websites and applications. Following the HHS OCR policy Bulletin on use of trackers in compliance with HIPAA, the FTC jumped into the fray announcing settlement of enforcement actions against GoodRx, Premom and BetterHelp for sharing health data via tracking technologies with third parties resulting in a breach of Personal Health Records under the HBNR. In July, OCR and FTC sent a joint letter to 130 hospital systems and telehealth