The U.S. Department of Health and Human Services' Office for Civil Rights is "heavily scrutinizing" health care websites alleged practice of embedding tracking technology that sells patient data to third parties, HHS OCR acting Deputy for Strategic Planning Susan Rhodes said in an interview with GovInfoSecurity. Rhodes said such practices can be potential violations of the U.S. Health Insurance Portability and Accountability Act.