Rules and Sources

Founder

Rules last updated November 1, 2026 · Reviewed monthly; next review December 1, 2026

This page lists every check the Founder runs and the rules each check comes from. Florida checks run for firms in or serving Florida. Each month we open every source below, compare it with the checks, and update the audit if anything changed.

Primary sources

Federal

HIPAA Privacy and Security Rules, 45 CFR Part 164 Notice of privacy practices online (§164.520), secure forms and business associates (§164.312, §164.502(e)). Checked November 1, 2026.
HHS Section 504 web accessibility, compliance dates extended (May 11, 2026) WCAG 2.1 AA deadline for HHS-funded providers. Checked November 1, 2026.
HHS OCR, online tracking technologies guidance Pixels and trackers on patient pages, as limited by AHA v. Becerra (N.D. Tex. 2024). Checked November 1, 2026.
FTC Consumer Reviews and Testimonials Rule, 16 CFR Part 465 Fake, bought or suppressed reviews. Checked November 1, 2026.
FTC Endorsement Guides, 16 CFR Part 255 Testimonials and typical results. Checked November 1, 2026.
HIPAA rule-making status (Physicians Practice) Timing of the pending Privacy and Security Rule changes. Checked November 1, 2026.
New HIPAA regulations in 2026 (HIPAA Journal) Status of proposed HIPAA changes. Checked November 1, 2026.

Florida

Fla. Admin. Code 64B8-11.001, physician advertising (amended Mar. 19, 2026) Board-certification claims must name an ABMS, AOA or Board-approved board, or carry the required disclaimer. Checked November 1, 2026.
Fla. Admin. Code 64B8-30.011, physician assistant advertising PA ads name the supervising physician and make no board-certification claims. Checked November 1, 2026.
Fla. Stat. §456.062, advertisement by a health care practitioner Free or discounted service disclaimer. Checked November 1, 2026.
Fla. Stat. §456.072, grounds for discipline License type stated in ads, §456.072(1)(t). Checked November 1, 2026.
Fla. Stat. §458.3312, specialties Who may hold out as a board-certified specialist. Checked November 1, 2026.
Fla. Stat. §466.0282, dental specialties Dental "specialist" claims and the general-dentist disclaimer. Checked November 1, 2026.
Fla. Stat. §456.47, telehealth Telehealth licensure and disclosure. Checked November 1, 2026.
HB 1341 (2025), practitioner titles: died in committee Checked so the audit does not enforce a bill that never passed. Checked November 1, 2026.
SB 36 (2026), practitioner titles: died in committee Checked so the audit does not enforce a bill that never passed. Checked November 1, 2026.
SB 290 (2026) Reviewed for practitioner advertising effects. Checked November 1, 2026.

Changes we are watching

These are proposed or pending. The audit does not enforce them until they take effect.

HIPAA Privacy Rule changes, at OIRA review.
HIPAA Security Rule final rule, projected July 2027.

Every check the audit runs (17)

Check	Rule	Applies
Notice of Privacy Practices is findable	HIPAA Privacy Rule, 45 C.F.R. §164.520(c)(3)(i)	All firms
Contact forms do not collect health details unprotected	HIPAA Security Rule, 45 C.F.R. §164.312(e)(1); §164.502(e)	All firms
Tracking pixels are not exposing patient data	HHS OCR, Use of Online Tracking Technologies (rev. Mar. 18, 2024), as limited by AHA v. Becerra (N.D. Tex. 2024); 45 C.F.R. §164.502(e); FTC Act §5	All firms
Testimonials are written to the FTC Endorsement Guides	FTC Endorsement Guides, 16 C.F.R. §255.2(b); FTC Consumer Reviews and Testimonials Rule, 16 C.F.R. Part 465	All firms
Telehealth offered with consent language	State telehealth laws, e.g. Fla. Stat. §456.47	All firms
Cookie consent or opt-out when ad trackers run	Cal. Civ. Code §§1798.120, 1798.135 (CCPA, where thresholds are met); GDPR Art. 6-7 (EU visitors)	All firms
"Request records" path routes to a secure channel	HIPAA Privacy Rule, 45 C.F.R. §164.524; Security Rule §164.312(e)(1)	All firms
"Board-certified" claims name the certifying board	FTC Act §5; AMA Code of Medical Ethics Op. 9.6.1; NCCPA certification (PA-C)	All firms
Numeric outcome claims are substantiated	FTC Act §5; FTC Policy Statement on Advertising Substantiation; FTC Health Products Compliance Guidance (2022)	All firms
Site shows basic accessibility signals	ADA Title III; 45 C.F.R. §84.84 (Section 504, dates as extended May 11, 2026)	All firms
Telehealth states of licensure are listed	State medical licensing laws, e.g. Fla. Stat. §456.47	All firms
Florida: required statement on free or discounted offers	Fla. Stat. §456.062	Florida
Florida: "board-certified" claims name a recognized board	Fla. Admin. Code 64B8-11.001(2)(f), (j), (8) (amended 3-19-26); Fla. Stat. §458.3312; §458.331(1)(ll)	Florida
Florida: out-of-state telehealth sites link to the Department of Health	Fla. Stat. §456.47	Florida
Florida: physician assistant ads name the supervising physician	Fla. Admin. Code 64B8-30.011; Fla. Stat. §458.347; §456.072(1)(t)	Florida
Florida: dental "specialist" claims are ADA specialties or carry the disclaimer	Fla. Stat. §466.0282; §466.028(1)	Florida
Florida: practitioners named in ads show their license type	Fla. Stat. §456.072(1)(t); Fla. Admin. Code 64B8-11.001(7)	Florida

Run the Founder · All audits

This page explains what our automated scan checks. It is not legal advice, and a passing check is not a finding of compliance. Have a licensed professional review your marketing before you rely on it.