PrivacySignal
Healthcare

Most Smart Watches, Rings, and Bands Lack Basic Transparency Reports and Key Privacy Features

EFF — Deeplinks · · International · Healthcare Privacy

A review of popular wearable devices — including Oura Ring, Apple Watch, Garmin, and Whoop — finds that most fall short on basic privacy and security standards, lacking transparency reports and strong encryption options despite collecting continuous personal health data from roughly 40 percent of Americans.

Why this matters: These devices sit on your body all day and collect some of the most personal data that exists: heart rate, sleep, menstrual cycles, stress levels, location. That data is worth a lot to insurers, advertisers, and data brokers. Yet most of these companies do not publish transparency reports, so you have no real way to know who they share your data with or how often they hand it to governments. Health data from a wearable is not like a shopping history. It can follow you into a job application, a custody case, or a health insurance decision. The devices got popular. The accountability did not keep up.

Who should care: Healthcare professionals · Privacy officers · Compliance · General readers · Policy

This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.

Analysis

All analysis →

Weekly Editorial Analysis from Experts and Editors

Logged Is Not Authorized

Georgia law restricts police use of license plate data to law enforcement purposes. A new lawsuit alleges deputies searched a man's vehicle five times while he was suing their sheriff. Two recorded reasons were "info" and "37." The system accepted both.

· 6 min read Read →
Deep Signal · Part I of III

The Algorithm Said So

Federal rulemakers are deciding what to do when artificial intelligence produces the kind of conclusion that once required an expert. They disagree about how to regulate it. They also disagree about whether the problem has arrived.

· 10 min read Read →

Related stories

Healthcare
HIPAA Journal · · US Federal

Healthcare Providers Discover Unauthorized PHI Disclosures to AI Tools

At least two healthcare providers have reported data privacy incidents in which patient health information was uploaded to AI tools without authorization. The disclosures were announced separately and involve protected health information shared outside approved channels.

Who should care: Healthcare professionals · Privacy officers · Compliance · AI governance · Lawyers · Administrators · General readers · Policy

#healthcare#ai-governance#ai#privacy Read original →
Healthcare
C CBC · · International

Critics warn of health data privacy concerns as Ottawa ramps up AI strategy

Canada's federal government is advancing its artificial intelligence strategy, and critics are raising concerns about how health data may be collected, used, or shared in that process.

Who should care: Healthcare professionals · Privacy officers · Compliance · General readers · AI governance · Policy

#healthcare#ai#privacy Read original →
Healthcare
The Guardian — Tech · · International

British people don’t trust Palantir – it’s not too late to reverse the NHS’s dependence on it | Ben Coleman

A Labour MP and health committee member is calling on UK ministers to let Palantir's £330 million NHS data platform contract expire next March rather than renew it, arguing the NHS should not remain dependent on a US tech company for control of patient data.

Who should care: Healthcare professionals · Privacy officers · Compliance

#healthcare Read original →
Healthcare
The Record · · International

Medical services company settles with 4 states over 2023 hack of sensitive patient records

Perry Johnson Companies, a Nevada-based medical services firm, has reached a settlement with attorneys general in Connecticut, New Jersey, New York, and Michigan over a 2023 breach that exposed sensitive patient records held by its medical transcription, coding, and imaging subsidiaries.

Who should care: Healthcare professionals · Privacy officers · Compliance

#healthcare Read original →
Healthcare
HIPAA Journal · · US Federal

Security Incident at EHR Vendor Affects Patients of New York Counselling Practices

A security incident at an electronic health records vendor has led to the exposure of personal and health information belonging to patients of Hispanic Counseling Center and Brooklyn Counseling Services, two New York-based mental health practices. Both organizations have begun notifying affected patients.

Who should care: Healthcare professionals · Privacy officers · Compliance

#healthcare Read original →
Healthcare
HIPAA Journal · · US Federal

Judge Certifies Classes in Meta Platforms Healthcare Data Privacy Litigation

A federal judge has certified plaintiff classes in consolidated litigation against Meta over allegations that the company collected health-related data through its tracking tools embedded on healthcare websites. Class certification is a significant procedural step that allows the case to proceed on behalf of a large group of affected individuals.

Who should care: Healthcare professionals · Privacy officers · Compliance · General readers · Policy

#healthcare#privacy Read original →