Employer and Insurer Wellness Programs and Your Data

Read this first

Wellness programs are not medical care, and a program's step goal or score is not a health check. If you have symptoms such as chest pain, severe breathlessness or signs of stroke, get emergency help (in the US, call 911) rather than finishing a program task. See Symptoms That Need Assessment, Not Tracking. In the US, 988 reaches the Suicide & Crisis Lifeline. [1]

Scope of this page

This page covers the United States only, and only what we could read from official sources on 2026-10-22. Laws change, differ by state, and this is not legal advice. Rules in other countries (for example the European Union or the United Kingdom) are different and are not covered. Two official sources we tried, the US Department of Health and Human Services (HHS) and the Department of Labor, could not be read, so we make no statement here about how HIPAA (the US health privacy law) applies to any particular employer plan. Ask the plan administrator or an employment lawyer.

What these programs often ask for

Employer and insurer programs vary. The US Equal Employment Opportunity Commission (EEOC) describes employer programs that sometimes use medical questionnaires, health risk assessments and biometric screenings to identify risk factors such as weight, cholesterol and blood glucose. [2] Some also ask you to connect a tracker or app. We found no official source describing how common that is.

Data held outside an employer plan

A wearable maker or a wellness app is often not covered by HIPAA. The Federal Trade Commission (FTC) explains that its Health Breach Notification Rule applies to certain businesses that are not covered by HIPAA, such as vendors of personal health records, and gives as an example an app that collects health information from consumers and syncs with a fitness tracker. [3][4] The FTC says a covered "breach" is not limited to hacking and includes disclosing identifiable health information without the person's consent. [3] The rule does not apply to businesses covered by HIPAA. [3] This is guidance for businesses, dated July and August 2024, not a promise about any particular company. See Health Data vs Consumer-App Data.

Insurers and wearable data

Evidence label: Proper evidence not found for how insurers use wearable data in pricing. We checked the National Association of Insurance Commissioners (NAIC) page on accelerated underwriting, which describes insurers using external data such as prescription history and motor vehicle records to speed up policy decisions, with regulatory guidance approved by its Life Insurance and Annuities Committee on 14 August 2024. [5] That page does not mention wearables, so we do not claim insurers use them for pricing. Insurance rules are mainly set by each state.

A 2019 US survey of 997 adults used hypothetical scenarios in which wearing a device and sharing data with a health insurer was required. 69.5% of respondents said they would be willing, but 77.8% were concerned about economic benefits, data privacy or accuracy, and financial incentives raised willingness. [6] That shows attitudes in a survey, not real programs.

Do these programs improve health?

A large randomized trial at 160 worksites of a US retailer tested a program built around nutrition, physical activity and stress modules. After 18 months, self-reported regular exercise and weight management were higher with the program, but there were no significant differences in cholesterol, blood pressure, body mass index, health care spending or work outcomes. [7] A three-year follow-up found better self-reported behaviors but no detectable clinical, economic or employment effects. [8] This program was not wearable-based, and results may not apply to other programs. Evidence label: mixed.

Questions worth asking before you join

• Is participation voluntary, and what happens if I say no?
• What exactly is collected, and who sees individual data and who sees only totals?
• Is the data held by a company that sells or shares data? See Third-Party Data Sharing and Data Brokers.
• Can I delete my account and export my data later? See Account Deletion and Exporting Your Data.
• Does the program push me toward targets that are not right for me? See Overexertion and Chasing Device Targets.

If you live with an eating disorder, diabetes treated with medicine, pregnancy or a heart condition, talk with your clinician before taking on program targets for weight, steps or calories.