Our Work

Digital Library

Sort By

EPIC Praises CFPB’s Proposal to Ban Medical Debt from Credit Reports

August 13, 2024

In comments to the Consumer Financial Protection Bureau, EPIC expressed support for the CFPB’s proposed rules to largely prohibit the inclusion of medical debt information on credit reports. The proposed rules would protect the privacy of consumers’ sensitive medical information and promote fairness and accuracy in credit reporting.
- Consumer Privacy
- Data Brokers
- Data Protection
- Health Privacy
- Updates
FTC Finalizes Health Breach Notification Rule Modifications, Improving Health Privacy Safeguards for Consumers

May 6, 2024

The Federal Trade Commission recently finalized changes to modernize the Health Breach Notification Rule (HBNR), expanding its scope and improving its efficacy to address health privacy and data security risks that fall outside of HIPAA.
- Cybersecurity
- Data Protection
- Data Security
- Health Privacy
- Updates
HHS Issues Final Rule in an Important Effort to Safeguard Reproductive Privacy

April 24, 2024

The Department of Health and Human Services published a final rule this week strengthening privacy protections for reproductive health information. The rule extends the Health Insurance Portability and Accountability Act (HIPAA) Privacy Rule by prohibiting regulated entities from using or disclosing personal health information for the “mere act of seeking, obtaining, providing, or facilitating reproductive health care.” This is an important reproductive privacy safeguard for millions of Americans, particularly in the wake of the U.S. Supreme Court’s decision invalidating the constitutional right to abortion in Dobbs v. Jackson Women's Health Organization.
- Cybersecurity
- Data Protection
- Data Security
- Health Privacy
- Updates
EPIC, National Consumer Law Center Urge Massachusetts Supreme Judicial Court to Limit Harmful Tracking and Disclosure of Private Health Information

March 21, 2024
- Consumer Privacy
- Data Protection
- Health Privacy
- Updates
EPIC Applauds Proposed FTC Order With Blackbaud, Urges Stronger Protections for Donor Privacy

March 20, 2024

EPIC submitted comments in response to the FTC’s proposed order with Blackbaud, a donor management software company used by nonprofits, which failed to implement basic cybersecurity measures and failed to appropriately notify impacted consumers when a months-long breach occurred.
- Consumer Privacy
- Cybersecurity
- Data Protection
- Data Security
- Health Privacy
- Updates
Pharmacies Warrantlessly Disclose Medical Records to Law Enforcement, Congress Finds

December 12, 2023

Today the Washington Post published the results of a congressional investigation that revealed how most major pharmacy chains in the US regularly share customers’ medical records with law enforcement.
- Data Protection
- Health Privacy
- Updates
PRESS RELEASE: EPIC Urges FTC to Investigate Grindr’s Personal Data Practices

October 4, 2023

In a complaint filed Wednesday, the Electronic Privacy Information Center (EPIC) called on the Federal Trade Commission (FTC) to investigate the popular LGBTQ+ dating app Grindr for its potentially unlawful retention and disclosure of users’ sensitive personal data.
- Consumer Privacy
- Data Protection
- Enforcement of Privacy Laws
- Health Privacy
- Updates
EPIC Encourages Senate HELP Committee to Protect Health Data and Patient Privacy

September 29, 2023

EPIC submitted comments to the U.S. Senate Committee on Health, Education, Labor, and Pensions (HELP) in response to its Request for Information related to patient privacy and health data privacy. EPIC provided resources and recommendations about the privacy and data security risks unique to health information, as well as the importance of centering data minimization principles in the collection and sharing of health data, including types of location data, biometric data, and genetic information.
- Consumer Privacy
- Cybersecurity
- Data Protection
- Data Security
- Health Privacy
- Updates
EPIC Commends FTC Rulemaking to Expand Health Breach Notification Rule, Urges Expansion

August 9, 2023

In comments to the Federal Trade Commission, EPIC applauded the proposed modifications to the Health Breach Notification Rule (HBNR).
- Cybersecurity
- Data Protection
- Data Security
- Health Privacy
- Updates
EPIC Commends FTC’s Vitagene Genetic and Health Data Settlement

July 25, 2023

In comments to the Federal Trade Commission, EPIC commended the FTC for taking enforcement action against direct-to-consumer genetic testing company Vitagene for unfair and deceptive trade practices involving genetic and health information.
- Cybersecurity
- Data Protection
- Data Security
- Health Privacy
- Updates

Support Our Work

EPIC's work is funded by the support of individuals like you, who allow us to continue to protect privacy, open government, and democratic values in the information age.

Donate