In 2023 and 2024, privacy policy changes for health data platforms have reshaped the landscape for health and performance coaches, nutritionists, and dietitians. Understanding these changes is essential — not just for compliance, but for building trust and delivering exceptional, data-driven coaching. Here’s what you need to know, and how Ownership.Health empowers you to stay ahead.

The New Era of Health Data Privacy

Recent years have seen a surge in new regulations and enforcement actions targeting health data platforms. The Federal Trade Commission (FTC), Department of Health and Human Services (HHS), and state legislatures have all introduced or updated rules that directly impact how coaches collect, store, and share client health data.

Key drivers of these changes include:

• The explosion of wearable tech and health apps
• Growing concerns about sensitive data (biometrics, reproductive health, genetics)
• A global push for client data ownership and transparency

What’s Changed in 2023–2024?

1. Federal and State Regulations

• FTC Enforcement: The FTC has ramped up enforcement, especially for mobile health apps and platforms that handle biometric and genetic data. In 2023, it proposed updates to the Personal Health Records Breach Rule, broadening its scope and increasing penalties for violations. Read more on FTC guidance
• HIPAA Updates: While major changes to the HIPAA Security Rule are expected in late 2024 or 2025, recent guidance has clarified compliance requirements and corrected common misconceptions. Details from HHS
• State Laws: States like Washington (My Health My Data Act), Nevada, and Connecticut have passed robust new privacy laws with broad definitions of health data and strong enforcement. More states are following suit, creating a complex patchwork of requirements. Overview of state laws
• GDPR: For coaches serving clients in the EU, the GDPR remains the gold standard for data protection, with strict requirements for consent, transparency, and data subject rights. GDPR summary

2. Client Data Ownership and Rights

New laws emphasize that clients — not platforms — own their health data. Clients now have the right to:

• Access and export their health data
• Correct inaccuracies
• Direct how and with whom their data is shared

Platforms must facilitate these rights and be transparent about data practices.

3. Increased Enforcement and Risks

The FTC has already taken action against several health apps for unauthorized disclosures and deceptive privacy practices. Non-compliance can result in:

• Fines and enforcement actions
• Reputational damage
• Loss of client trust

How Privacy Policy Changes Affect Coaches

The Compliance Burden

Health coaches must now navigate a maze of federal, state, and (potentially) international laws. This means:

• Updating privacy policies to reflect current requirements
• Obtaining explicit, informed consent from clients
• Implementing robust data security measures

The Opportunity

While these changes can seem daunting, they also present an opportunity to differentiate your practice. By prioritizing transparency, security, and client empowerment, you can build deeper trust and deliver more personalized, data-driven coaching.

How Ownership.Health Keeps You Ahead

At Ownership.Health, we’ve built our platform from the ground up to help coaches thrive in this new era of health data privacy.

1. Data Privacy & Ownership by Design

• Clients own their data. We never resell or lock in client data. Full data export is available anytime.
• No third-party reselling. Your clients’ data stays between you and them — no exceptions.
• GDPR and HIPAA-compliant. Our platform meets the highest standards for data protection and privacy.

2. Secure, Integrated Coaching Tools

• Encrypted Video Calls: Meet clients securely, without third-party apps or links.
• Cross-Device Sync: Merge and clean data from Oura, Garmin, Fitbit, Apple Health, Withings, and more — always with client consent.
• Custom AI Coaching Assistants: Personalize client engagement while maintaining strict privacy controls.

3. Transparent, Up-to-Date Privacy Policies

We continuously update our privacy policies to reflect the latest legal requirements. Our commitment: clear, accurate, and accessible information for you and your clients.

4. Empowering Coaches and Clients

• Consent management: Clients can manage their data preferences directly.
• Instant data export: Clients can access and download their data at any time.
• Education and support: We provide resources and training to help you stay compliant and confident.

Best Practices for Coaches in 2024

1. Conduct a Data Audit

• Identify all health data you collect, where it’s stored, and who has access.

2. Use Explicit Consent

• Ensure clients give clear, affirmative consent for data collection and sharing — especially for sensitive data.

3. Enhance Security

• Use platforms with end-to-end encryption, access controls, and regular security audits.

4. Stay Informed

• Monitor changes in state, federal, and international laws. Join professional associations or consult legal experts for updates.

5. Communicate Clearly

• Regularly inform clients about their rights and any changes to your privacy practices.

Why Ownership.Health is Different

Unlike generic tracking apps or platforms that treat data as a commodity, Ownership.Health puts privacy, transparency, and client empowerment at the core of everything we do. Our platform is built for modern coaches who want to deliver results at scale — without sacrificing trust or compliance.

Key value points for coaches:

• Save hours with AI-powered analysis and reporting
• Deliver more personalized, data-driven coaching
• Build trust with transparent, client-first data practices
• Stay compliant with evolving privacy laws — without the overwhelm

Learn more about how we support coaches at Ownership.Health.

FAQ: Privacy Policy Changes for Health Data Platforms

Q: Do I need to comply with HIPAA if I’m not a healthcare provider? A: If you work with covered entities or handle protected health information (PHI), HIPAA may apply. However, many new state laws and FTC rules apply to all platforms handling health data, regardless of HIPAA status.

Q: What are my clients’ rights under new privacy laws? A: Clients have the right to access, correct, export, and direct the sharing of their health data. You must facilitate these rights and be transparent about your data practices.

Q: How can I ensure my coaching practice is compliant? A: Use platforms like Ownership.Health that are built for compliance, keep privacy policies up to date, obtain explicit consent, and stay informed about legal changes.

Q: What are the risks of non-compliance? A: Non-compliance can result in fines, enforcement actions, reputational harm, and loss of client trust.

Q: How does Ownership.Health help with privacy compliance? A: We provide GDPR and HIPAA-compliant tools, transparent privacy policies, client data ownership, and ongoing support to help you stay ahead of regulatory changes.

Further Reading

• FTC: Health Privacy Guidance
• HHS: HIPAA Privacy Rule
• IAPP: State Health Data Privacy Laws
• GDPR Overview
• Ownership.Health

Empower your coaching practice with data-driven insights, seamless compliance, and client-first privacy — only with Ownership.Health.