WPF has urged HHS to clarify the intersection between HIPAA compliance and harms resulting from medical identity theft in its response to the Request for Information from the Office of Civil Rights of the Department of Health and Human Services regarding implementation of the HITECH Act. WPF has a long history of work on the issue of medical identity theft, which has informed its response to HHS.

One of the most common questions we receive is: what does HIPAA compliant mean? Well.. If a company or entity or health app is not covered by HIPAA, it may still say that it is “HIPAA compliant.” HIPAA compliant does not mean the same thing as being a HIPAA- covered entity. If you see the

The Italian Institute for International Political Studies (ISPI) will be holding a High Level Forum on Digital Transformation in connection with OECD. The event will be held 16 May 2022 in hybrid format. WPF will be speaking about what risks exists for consumers arising from illicit use of their personal data, and also approaches for

WPF’s Executive Director Pam Dixon will be presenting at an upcoming OECD Workshop on the topic of data stewardship, access, sharing, and control in regards to national data strategies. WPF will be speaking as a organizational member of the formal civil society stakeholder group at OECD (CSISAC).  The topic of digitalization is one that OECD

WPF is pleased to announce a new project examining the intersection between poverty and privacy in the United States. In the United States, the prevailing discussions about privacy rarely contemplate the poor, or how — or where — the poor or financially stressed may experience privacy challenges. This is also true of many legislative discussions regarding data governance, data protection, and privacy; there is generally not routine scrutiny of the intersection and impacts of proposed statutory language or approaches regarding those who live at or below the poverty level.