Rule CG-PRV-008
Patient privacy: what rule CG-PRV-008 checks
Rule CG-PRV-008 is one of the checker's patient privacy rules. It cites 45 CFR 164.508(a)(3), 16 CFR Part 318. The reason, source and safer wording are below.
CG-PRV-008 · Blocks approval · Citation checked against stored text
Sharing, selling or tracking health information, health-related location or purchase history for marketing, especially without consent, is regulated by HIPAA, the FTC Health Breach Notification Rule and state consumer health data laws.
Source: HIPAA Privacy Rule, 45 CFR 164.508(a)(3); FTC Health Breach Notification Rule, 16 CFR Part 318; FTC Act section 5
Safer wording: Do not describe sharing or selling health data for advertising, and do not use health-based location or purchase targeting. If any use is lawful, get separate consent and let counsel write the disclosure.
45 CFR 164.508(a)(3), 16 CFR Part 318 · Needs counsel review
Next step
Check your copy against this rule
Run the checker and every flag cites its rule and source.