Offering corporate wellness perks sounds like an easy win. You subsidize a few dozen smartwatches, hand out subscriptions to a meditation app, and maybe sponsor a company-wide step challenge to burn off holiday catered lunches. It boosts morale, looks great on your recruiting brochures, and shows you care about your team.
Most business owners assume that because this involves health metrics, federal healthcare privacy laws automatically handle the security. After all, if it tracks heart rates and sleep cycles, HIPAA must have it covered, right?