Attorney Megan Cox of the FTC Division of Privacy & Identity Protection published guidance in the FTC Business Blog for businesses that collect health data. Cox specifically advises businesses that have collected COVID-related information from their employees or customers. Among other issues, she discusses the need to make accurate representations, review privacy claims, and protect data against security vulnerabilities.