You thought you were doing a good thing. Handing out subsidized fitness trackers, offering a mental health app, setting up digital biometric screenings—it all looks great on a recruiting brochure or an onboarding platform. You assume that because it’s "health data," HIPAA has it locked down and your hands are clean.
I hate to be the bearer of bad news, but that assumption is putting your business in serious jeopardy.