CEA Publishes Guidelines on Personal Wellness Data Security and Privacy | Practical Law

CEA Publishes Guidelines on Personal Wellness Data Security and Privacy | Practical Law

The Consumer Electronics Association (CEA) has published Guiding Principles on the Privacy and Security of Personal Wellness Data, voluntary guidelines for companies to handle personal wellness data often produced by wearable technologies.

CEA Publishes Guidelines on Personal Wellness Data Security and Privacy

Practical Law Legal Update w-000-7334 (Approx. 3 pages)

CEA Publishes Guidelines on Personal Wellness Data Security and Privacy

by Practical Law Intellectual Property & Technology
Published on 03 Nov 2015 • USA (National/Federal)
The Consumer Electronics Association (CEA) has published Guiding Principles on the Privacy and Security of Personal Wellness Data, voluntary guidelines for companies to handle personal wellness data often produced by wearable technologies.
On October 20, 2015, the Consumer Electronics Association (CEA) published Guiding Principles on the Privacy and Security of Personal Wellness Data, designed to provide voluntary guidelines for companies to handle personal wellness (PW) data often produced by wearable technologies.
Among other things, the Guidelines recommend that companies:
  • Ensure that they and their vendors take reasonable measures to secure PW data, taking into account consumers' higher expectation of privacy with respect to such data.
  • Provide a clear and easily understood written policy on, and concise notice of, how it collects and handles PW data, including how the company responds to law enforcement requests for the data.
  • Obtain consent before transferring PW data to unaffiliated third parties, unless otherwise required by law or disclosed in their privacy policy.
  • Refrain from knowingly using or disclosing PW data that may hurt consumers' access to employment, healthcare, financial products and services, credit, housing, or insurance.
  • Provide consumers with a way to review, correct, or delete any stored PW data, as well as a way to opt out of tailored advertising based on the consumer's PW data.