We noted you are experiencing viewing problems
-
Check with your IT department that JWPlatform, JWPlayer and Amazon AWS & CloudFront are not being blocked by your network. The relevant domains are *.jwplatform.com, *.jwpsrv.com, *.jwpcdn.com, jwpltx.com, jwpsrv.a.ssl.fastly.net, *.amazonaws.com and *.cloudfront.net. The relevant ports are 80 and 443.
-
Check the following talk links to see which ones work correctly:
Auto Mode
HTTP Progressive Download Send us your results from the above test links at access@hstalks.com and we will contact you with further advice on troubleshooting your viewing problems. -
No luck yet? More tips for troubleshooting viewing issues
-
Contact HST Support access@hstalks.com
-
Please review our troubleshooting guide for tips and advice on resolving your viewing problems.
-
For additional help, please don't hesitate to contact HST support access@hstalks.com
We hope you have enjoyed this limited-length demo
This is a limited length demo talk; you may
login or
review methods of
obtaining more access.
Printable Handouts
Navigable Slide Index
- Introduction
- Professional background
- Roadmap to understand privacy oversight of digital therapeutics in the U. S.
- What are digital therapeutics?
- What is a “digital therapeutic”? (circa 2013)
- What is a “digital therapeutic”? (circa 2025)
- What changed 2013 to 2025
- In sum
- How is digital health regulated in the U. S.?
- U. S. agencies regulating healthcare and data
- Privacy: Federal vs. state in U. S.
- The U. S. digital health regulatory landscape
- Emerging state oversight
- Emerging state oversight: A visual framework
- Who regulates what, federally?
- Federal regulation of things marketed to consumers
- Regulation of healthcare
- Privacy, security, and therapeutics
- What Office of Civil Rights (OCR) does
- HIPAA (the history)
- To what entities does HIPAA apply?
- HIPAA’s three rules: Privacy, security, and breach notification
- Privacy rule
- Privacy rule: Top line standards
- Privacy rule: When is consent not required
- Privacy rule and research
- Security rule
- Breach notification rule
- If there is a breach?
- Breach investigation timeline: Tracking pixels
- OCR enforcement powers
- OCR and other privacy regulators
- Other privacy regulators
- Case studies: DTx and privacy in the U. S.
- Case 1: DTx is a covered entity
- Case 2: DTx is not providing healthcare services covered by HIPAA
- Case 3: DTx sells its services to a hospital for patients
- DTx and other regulators
- DTx and FDA
- FDA oversight of DTx (reminder)
- If FDA does not regulate privacy, how does it all work together?
- Financial disclosures
Topics Covered
- Digital Therapeutics
- Digital Health
- Virtual Care
- US FDA
- HIPAA
- Privacy
- Security
- US FTC
Links
Series:
Categories:
External Links
Talk Citation
Savage, L.C. (2026, September 30). U.S. privacy law and digital therapeutics [Video file]. In The Biomedical & Life Sciences Collection, Henry Stewart Talks. Retrieved October 1, 2026, from https://doi.org/10.69645/NUPL9654.Export Citation (RIS)
Publication History
- Published on September 30, 2026
Financial Disclosures
- There are no commercial relationships to disclose.
Other Talks in the Series: Digital Therapeutics
Transcript
Please wait while the transcript is being prepared...
0:00
Hello. I'm Lucia Savage.
I'm an attorney based in the US,
and I'm delighted to
do this talk today for
Henry Stewart Talks about
US privacy law and
digital therapeutics.
0:14
A little bit about myself.
I'm a board member,
a strategist,
and a senior advisor to
health tech companies.
I'm currently CEO of Savage
Healthcare Strategies.
I am the former
chief privacy and
regulatory officer
at Omada Health.
I am the former chief
privacy officer at
the US Department of Health
and Human Services Office
for the National
Coordinator of Health IT.
That is a big mouthful.
That agency is now called
the Assistant Secretary
for Technology Policy.
I've served as an attorney
across the healthcare system
throughout my career.
0:49
I love talking about
privacy and digital health,
and digital therapeutics
being a subsection
of the digital health
sector in the US,
we'll talk about
that a lot today.
I wanted to give you
a little roadmap
of what we're going to
cover in our hour together.
I'm going to talk
about what the term
digital therapeutic means
in the US in particular.
I'm going to talk
generally about
how digital therapeutics
are regulated from
a privacy perspective
and generally
so that you have a
structure that is going to
follow us through the
rest of the presentation.
I'm going to talk
about privacy and
security regulation that
impacts digital therapeutics.
I'm going to do a deep dive
into our American law,
the Health Information Portability
and Accountability Act,
which has our primary federal
privacy health law in it,
because of how it impacts
digital therapeutics.
We're going to do
some case studies,
which I hope you will
be able to dig into.
Lastly, we're going to talk
about the role of the FDA
relative to the privacy
of digital therapeutics.
The slides are really
there for your reference.
Enjoy listening to me.
I wish we were having
a real conversation.
Hopefully, we can
someday figure out
how to have Q&A about this.
But I'm delighted to be invited
and happy to be with you today.
Alright! Let's get started.