When Health Data Vendors Fail at the Basics

Most health data vendors are not doing the basics.

I have checked.

Some do not offer consumer rights in every state. Some skip key rights altogether, such as deletion.

These are not edge cases. They are requirements. And they are relatively easy to implement.

If a vendor cannot get this right, they are not taking privacy seriously. Full stop.

If a vendor is missing the basics, what else might they be missing?

Healthcare marketers need to be confident that their vendors are meeting the minimum obligations of state privacy laws. Opt-outs and consumer rights are table stakes. When those fail, the risks land on you.

The test is simple:

• Go to their website.
• Try to opt out.
• See if it works.
• Confirm that it covers all the rights required across all states where you operate.

It does not take long, but it can reveal a lot.

If a vendor cannot manage an opt-out, should they be managing your audiences?

Because when something goes wrong, it is not their name on the campaign. It is yours.