Episode 2: HIPAA, Health Data & Who Actually Has to Follow the Rules

In this episode, our hosts outline what HIPAA really covers, and why so many beauty and wellness businesses aren’t actually regulated by it. The team explains the difference between medical vs. health information, who counts as a “covered entity,” and why cash‑pay practices like most med spas fall outside HIPAA’s scope.We also touch on how smartphones and digital health apps created a huge gap in data protection, leading the FTC to roll out its own Health Breach Notification Rule back in 2009, a rule that sat dormant for years until the FTC suddenly started using it in 2022–2023.This episode lays the groundwork for understanding why wellness brands, med spas, and consumer apps are now firmly on regulators’ radar.Disclaimer:The content of this podcast is for informational purposes only. It is not intended to, and does not constitute, legal advice or a solicitation for the formation of an attorney-client relationship. The information in the podcast is not a substitute for obtaining legal advice from an attorney licensed in the appropriate jurisdiction. Podcast listeners should not act upon any information in the podcast without first consulting legal counsel of their own directly. This podcast does not constitute the practice of medicine, nursing or other professional health care services, including the giving of medical advice. The use of information on this podcast or materials mentioned in this podcast is at the user’s own risk.