In this letter to the FTC, the Confidentiality Coalition responds to the commercial surveillance rulemaking by arguing that HIPAA should stay in place for health data it covers. It asks for HIPAA-aligned national protections for health data held by non-HIPAA entities, including clear notice, consumer authorization, and risk-based security standards with a safe harbor for recognized security practices.
