FTC: Online billing service deceptively collected medical records

The agency reaches a settlement with a billing service that tried to populate online medical records with customer data

An online service allowing consumers to pay their medical bills failed to adequately inform them that it would also try to collect highly detailed medical information from their pharmacies, medical labs and insurance companies, the U.S. Federal Trade Commission said.

The FTC has reached a proposed settlement with PaymentsMD, an Atlanta health billing company, and former CEO Michael Hughes requiring the company to destroy any medical information it collected related to its separate online medical records service, Patient Health Report, the agency said Wednesday.

PaymentsMD "deceptively" used the sign-up process for its billing service to seek customers' consent to obtain detailed medical information, the FTC said in a press release.

PaymentsMD didn't immediately return a message seeking comment on the settlement. A lawyer for Hughes declined to comment.

PaymentsMD, which launched an expanded medical payments service in 2008, began developing a separate online medical records service with a partner in 2012, the FTC said. To populate the medical records, the company altered the registration process for its billing portal to include permission for the company and its partners to contact health care providers to obtain their medical information, the agency alleged.

The company asked customers consent to the collection of their health information by signing off on four authorizations presented in small windows on the website, displaying only six lines of an extensive text at one time, the FTC alleged. Customers could accept all four authorizations by clicking one box, the agency said.

PaymentsMD customers registering for the Patient Portal billing service would have "reasonably believed" that the authorizations were for billing, not for the collection of medical records, the agency said in its complaints.

"Consumers' health information is as sensitive as it gets," Jessica Rich, director of the FTC's Bureau of Consumer Protection, said in a statement. "Using deceptive tactics to gain consumers' 'permission' to collect their full health history is contrary to the most basic privacy principles."

The medical information PaymentsMD requested included customers' prescriptions, procedures, medical diagnoses, lab tests performed and their results, and other information, the FTC said.

In all but one case, the health care providers contacted for data refused to comply with PaymentsMD's requests, the FTC said. In some cases, company requested medical information about children, the agency said.

After PaymentsMD began telling customers it was attempting to collect their health information, the company received "numerous" complaints from people who believed they had signed up only for a billing portal and not an online health record, the agency said.

Under the proposed settlements, PaymentsMD and former CEO Hughes are banned from deceiving consumers about the way they collect and use information, and they must obtain customers' express consent before collecting their health information from a third party.

Grant Gross covers technology and telecom policy in the U.S. government for The IDG News Service. Follow Grant on Twitter at GrantGross. Grant's email address is grant_gross@idg.com.

Join the newsletter!

Error: Please check your email address.
Rocket to Success - Your 10 Tips for Smarter ERP System Selection

Tags U.S. Federal Trade CommissionPaymentsMDregulationCivil lawsuitslegalJessica Richhealth caregovernmentindustry verticalsprivacyMichael Hughessecurity

Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Grant Gross

IDG News Service
Show Comments

Cool Tech

SanDisk MicroSDXC™ for Nintendo® Switch™

Learn more >

Breitling Superocean Heritage Chronographe 44

Learn more >

Toys for Boys

Family Friendly

Panasonic 4K UHD Blu-Ray Player and Full HD Recorder with Netflix - UBT1GL-K

Learn more >

Stocking Stuffer

Razer DeathAdder Expert Ergonomic Gaming Mouse

Learn more >

Christmas Gift Guide

Click for more ›

Most Popular Reviews

Latest Articles

Resources

PCW Evaluation Team

Walid Mikhael

Brother QL-820NWB Professional Label Printer

It’s easy to set up, it’s compact and quiet when printing and to top if off, the print quality is excellent. This is hands down the best printer I’ve used for printing labels.

Ben Ramsden

Sharp PN-40TC1 Huddle Board

Brainstorming, innovation, problem solving, and negotiation have all become much more productive and valuable if people can easily collaborate in real time with minimal friction.

Sarah Ieroianni

Brother QL-820NWB Professional Label Printer

The print quality also does not disappoint, it’s clear, bold, doesn’t smudge and the text is perfectly sized.

Ratchada Dunn

Sharp PN-40TC1 Huddle Board

The Huddle Board’s built in program; Sharp Touch Viewing software allows us to easily manipulate and edit our documents (jpegs and PDFs) all at the same time on the dashboard.

George Khoury

Sharp PN-40TC1 Huddle Board

The biggest perks for me would be that it comes with easy to use and comprehensive programs that make the collaboration process a whole lot more intuitive and organic

David Coyle

Brother PocketJet PJ-773 A4 Portable Thermal Printer

I rate the printer as a 5 out of 5 stars as it has been able to fit seamlessly into my busy and mobile lifestyle.

Featured Content

Latest Jobs

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?