When the Health Insurance Portability and Accountability Act was enacted in 1996, today’s vast digital space didn’t exist. Even if organizations comply with HIPAA, the Genetic Information Nondiscrimination Act, and other laws that protect health-related data, that doesn’t necessarily mean the data is protected in many contexts. There are gaps that have yet to be legally addressed. Meanwhile, employees increasingly share health information on digital health apps or online. So, as collectors of employee data, employers should be aware of the health data privacy landscape and the concerns employees may have. Our own Ed Oleksiak speaks to this in a Workforce Magazine article titled, “Maneuvering the complicated intersection of data privacy, health, and technology.”