If a Third-Party Vendor Manages the Wellness Program Who Is Ultimately Responsible for a Data Breach?
In a data breach, the employer holds ultimate responsibility, a duty shared directly with the wellness vendor under federal law.
HRTioAugust 9, 2025