Skip to content
Stetwright

Rule CG-PRV-014

Patient privacy: what rule CG-PRV-014 checks

Rule CG-PRV-014 is one of the checker's patient privacy rules. It cites 45 CFR 164.508(a)(3), 16 CFR Part 318. The reason, source and safer wording are below.

  1. CG-PRV-014 · Blocks approval · Citation checked against stored text

    Tracking pixels on health pages, retargeting based on health interest, pre-checked consent, and sharing health data with advertisers disclose protected information without valid authorization.

    Source: HIPAA Privacy Rule, 45 CFR 164.508(a)(3); HHS OCR Bulletin on online tracking technologies; FTC Health Breach Notification Rule, 16 CFR Part 318; FTC Act section 5

    Safer wording: Do not send health-page visits or answers to advertisers, do not pre-check consent boxes, and describe data sharing accurately in the privacy notice.

    45 CFR 164.508(a)(3), 16 CFR Part 318 · Needs counsel review

Next step

Check your copy against this rule

Run the checker and every flag cites its rule and source.