The Federal Trade Commission (FTC) and the U.S. Health and Human Services Office for Civil Rights (OCR) have issued a joint letter reminding healthcare organizations about their responsibilities for third-party disclosures of protected health information. The agencies warn about the privacy and security risks related to third-party tracking tools that can gather sensitive medical data without users’ knowledge. The letter emphasizes that HIPAA Rules apply to the collection and disclosure of PHI through tracking technologies. The FTC also highlights the importance of consumer protection laws in safeguarding health information.

Developer guilty of using kill switch to sabotage employer’s systems
A software developer, Davis Lu, has been found guilty of sabotaging his former employer’s systems by installing custom malware and a “kill switch”. After being