On December 2, 2022, the U.S. Department of Health and Human Services (“HHS”), through the Office for Civil Rights (“OCR”) and the Substance Abuse and Mental Health Services Administration (“SAMHSA”), issued a proposed rule to implement statutory amendments enacted by Section 3221 of the 2020 Coronavirus Aid, Relief, and Economic Security Act (“CARES Act”). Specifically,
Covington Digital Health
Latest from Covington Digital Health - Page 2
California Expands the Scope of the CMIA to Cover Certain Digital Mental Health Services and Information
On September 28, the governor of California signed into law AB 2089, which expands the scope of California’s Confidentiality of Medical Information Act (“CMIA”) to cover mental health services that are delivered through digital health solutions and the associated health information generated from these services. …
Change is Coming for Software and AI Medical Devices in the UK

The UK has reaffirmed its commitment to leading the way in regulatory innovation in software as a medical device (“SaMD”) and artificial intelligence as a medical device (“AIaMD”). On 17 October 2022, the UK Medicines & Healthcare products Regulatory Agency (“MHRA”) published its Guidance on “Software and AI as a Medical Device Change Programme…
California AG Probes for Potential Bias in Healthcare Algorithms, Federal Attention Continues
Digital health technologies, including algorithms for use in health care, are being developed to aid healthcare providers and serve patients, from use with administrative tasks and workflow to diagnostic and decision support. The use of artificial intelligence (“AI”) and machine learning algorithms in health care holds great promise, with the ability to help streamline care…
Notified body capacity needed! MDCG proposals recognize need to increase notified body capacity to ensure device availability

The Medical Device Coordination Group (“MDCG”) has published a new position paper (MDCG 2022-14) acknowledging the significant and urgent lack of capacity of EU notified bodies. It acknowledges the risk that this could lead to many existing and new medical devices and in vitro diagnostic medical devices (“IVDs”) not undergoing timely conformity assessments…
German Federal Office for Information Security Publishes Security Requirements for Healthcare Apps
On June 23, 2022, the German Federal Office for Information Security (“Office”) published technical guidelines on security requirements for healthcare apps, including mobile apps, web apps, and background systems. Although the technical guidelines are aimed at healthcare app developers, they contain useful guidance for developers of any app that processes or stores sensitive data.
The…
OIG Issues Advisory Opinion on Digital Program for the Treatment of Substance Use Disorders
On March 2, 2022, the Office of Inspector General (“OIG”) for the Department of Health and Human Services (“HHS”) posted an advisory opinion concluding that a digital program for the treatment of substance use disorders would raise minimal fraud and abuse risk. OIG advisory opinions address the application of certain fraud and abuse enforcement authorities…
3 Takeaways Digital Health Innovators Should Be Watching in the PREVENT Pandemics Act

On January 25, 2022, Senators Patty Murray and Richard Burr (Chair and Ranking Member of the Senate Health, Education, Labor, and Pensions (HELP) Committee, respectively) released a “discussion draft” of bipartisan legislation—the Prepare for and Respond to Existing Viruses, Emerging New Threats, and Pandemics Act (“PREVENT Pandemics Act”)—which contains notable provisions related to digital health. …
FDA Webinar Provides New Insights on Use of Digital Health Technologies in Clinical Trials
Spurred by the realities of the COVID-19 pandemic, FDA has taken a number of regulatory actions to advance the use of digital health technologies (“DHTs”) in clinical trials. DHTs provide sponsors with opportunities to capture a broader array of information from study subjects than is typically available through traditional study designs. This includes information from…
FTC Releases New Health Breach Notification Rule Guidance, Targets Health Apps and Connected Devices
On January 21, the Federal Trade Commission (“FTC”) announced new resources to help companies determine their obligations under the Health Breach Notification Rule (the “Rule”): the Health Breach Notification Rule: Basics for Business, which provides a quick introduction to the Rule, and Complying with FTC’s Health Breach Notification Rule (“Compliance Guidance”), a more in-depth…