Share A call for independent policing of non-HIPAA health data. The Center for Democracy & Technology, a nonprofit organization focused on tech policy and architecture, and the eHealth Initiative & Foundation, a coalition of industry and academic stakeholders, yesterday released a framework proposal calling for self-regulation of consumer data use by health devices and products that don't legally require HIPAA compliance. Under the framework, companies making these products would agree to a new set of standards that rely less on simply providing consumers with notice and consent, and instead place more emphasis on limiting which data is being collected while allowing consumers to request or delete their saved information. These standards would be handled by a group that could be funded by annual fees from participating entities but would otherwise have no conflicts of interest. The program itself would include annual audits and compliance assessments, random spot checks, public commitments to follow the standards, an active complaint-gathering process, potential FTC or state attorney general enforcement of violations, and more.