Makers of digital health apps are not often subject to the provisions of the Health Insurance Portability and Accountability Act (HIPAA), but any such liabilities may soon become more onerous. The Department of Health and Human Services released a draft update for HIPAA cybersecurity mandates – the final version of which is sure to be accompanied by much more vigorous enforcement.