Devices and services like wellness apps, chatbots, activity trackers, and DNA mail-order kits collect vast amounts of personal health and health care data, largely outside of federal health privacy law in the U.S.
CDT’s health privacy work looks to increase the privacy protections for data that falls outside of current laws and regulations. We focus on important privacy rights, ethics, and fair processing of information questions.
We need to move beyond outdated notice-and-consent health privacy regimes that over-burden individuals, and instead place the onus on companies that collect, use, and share health data to be better stewards of that data. That means companies need to empower people to have a meaningful say in how their data is used, while also limiting the health data they collect, use, and share to align with the product or service the user is requesting.
Latest Insights
CDT Comments to FDA on How to Measure and Evaluate AI-Enabled Medical Devices
CDT Joins 80 Other Orgs in Raising Major Concerns with NIH Proposal to Compile Federal Data for Autism “Registry”
Mind Matters: Mental Privacy in the Era of Brain Tracking Technologies
