Skip to content
Stetwright

Rule CG-PRV-012

Patient privacy: what rule CG-PRV-012 checks

Rule CG-PRV-012 is one of the checker's patient privacy rules. It cites 45 CFR 164.508(a)(3), 16 CFR Part 318. The reason, source and safer wording are below.

  1. CG-PRV-012 · Blocks approval · Citation checked against stored text

    Tracking people's health information or behavior to profile their conditions and target them, or feeding intake and appointment data to ad platforms, is health-data sharing that HIPAA, the FTC and state health-privacy laws restrict.

    Source: HIPAA Privacy Rule, 45 CFR 164.508(a)(3); FTC Health Breach Notification Rule, 16 CFR Part 318; FTC Act section 5

    Safer wording: Do not describe tracking or profiling patients or visitors by health condition. Keep health data off ad-platform pixels and get separate consent for any lawful use.

    45 CFR 164.508(a)(3), 16 CFR Part 318 · Needs counsel review

Next step

Check your copy against this rule

Run the checker and every flag cites its rule and source.