WPF urges US Federal Trade Commission to re-examine data breach notification requirements for health data in Flo Health proposal

The World Privacy Forum has submitted comments to the FTC regarding its proposed consent order In the Matter of Flo Health, Inc. requesting that the FTC conduct further analysis regarding the FTC Health Data Breach Rule and its potential applicability to the alleged unconsented sharing of women’s pregnancy, menstruation, mental health, and other data with third parties, including Facebook and Google.

WPF also asked the FTC that the compliance reports that it is requiring from Flo Health be made public proactively, so that members of the public do not have to submit Freedom of Information Act requests to see the information.

Flo Health claims that more than 100 million people have downloaded its app. It is of vital public interest to any individual who shared sensitive health data with Flo Health to be able to understand what was done with that data, and what the company is doing to correct its alleged past unconsented sharing of the data.

Related Documents: