The Data You Didn't Know You Were Sharing
Modern smartwatches and smart rings do far more than count steps. They continuously track your fitness, sleep patterns, fertility cycles, heart rate, and more, uploading this data to companion apps. While these devices offer convenience and health insights, they also raise critical questions about data privacy, security, and ownership. Who really owns your health data—you or the company that collects it?
According to Jules Polonetsky, CEO of the Future of Privacy Forum, a nonprofit focused on consumer data protection, people are increasingly finding value in accessing their health data but often fail to consider the risks. "The downside is they're not always taking the time to think through where, when, and how they ought to be taking any precautions," Polonetsky told ZDNET.
The Regulatory Patchwork
Contrary to popular belief, the Health Insurance Portability and Accountability Act (HIPAA) does not cover data collected by consumer wearables. HIPAA applies only to healthcare providers, insurers, and their business associates. This leaves a gap in protection for the vast amount of health data generated by smartwatches and rings.
Over 20 states have passed comprehensive data privacy laws, granting consumers rights to access, delete, and opt out of the sale of their personal information. However, these laws vary widely, creating a patchwork of requirements. Without a federal privacy law, consumers must navigate a confusing landscape. "Consumers are increasingly interested in downloading, accessing, and using their health data for fitness, or managing their family's health records, but really have to be sleuths to understand whether or not they are protected based on the state they're in," Polonetsky said.
The Scale of Wearable Adoption
More than 560 million people worldwide now own smartwatches, including over one in four Americans, according to Statista. This widespread adoption means that a significant portion of the population is generating sensitive health data daily. The more data collected, the greater the risk of breaches or unauthorized sharing with third parties for marketing, insurance profiling, or other undisclosed purposes.
What You Can Do
Consumers can take steps to protect their data. Start by reading the privacy policy of your wearable device and its companion app. Understand what data is collected, how it is used, and whether it is shared with third parties. Adjust privacy settings to limit data collection where possible. Regularly review and delete old data. Consider using devices that offer strong encryption and local data storage. Finally, advocate for federal privacy legislation that includes health data protections beyond HIPAA.
As Polonetsky emphasized, "The number one thing we need is a federal privacy law, which includes at least a minimum of health data protection outside of HIPAA." Until then, the onus is on consumers to be vigilant about their health data.
This article is based on reporting by ZDNET. Read the original article.
Originally published on zdnet.com
