The U.S. Department of Health and Human Services' Office for Civil Rights released a bulletin updating guidance for covered entities' use of online tracking technologies. The OCR said the Health Insurance Portability and Accountability Act requires providers to keep health data collected through technology safe and not to disclose it improperly, such as by providing the data to marketing vendors without consent.