Do the examples you have in mind work with data that originates with HIPAA covered entities? That, and/or doing work on behalf of a CE would likely be a situati

Do the examples you have in mind work with data that originates with HIPAA covered entities? That, and/or doing work on behalf of a CE would likely be a situation in which you’d have to comply: https://www.techhealthperspectives.com/2012/09/25/when-does-a-health-technology-company-have-to-comply-with-hipaa/ https://www.techhealthperspectives.com/2012/09/25/when-does-... In a future where smartwatch companies integrate with a health plan/hospital’s medical records system, I would expect HIPAA to cover them. But in a case where a company is generating the data (via user consent/input), it might not be the case.