A Due-Diligence Checklist for DTC Health Audiences
Vet DTC health audience data for provenance, permissions, construction, recency, identity, validation, activation, and measurement.
The short answer
Before buying a DTC health audience, establish where the data originated, what people were told, how the segment was constructed, when it was refreshed, how identity is resolved, and how performance can be validated. Do not treat a condition label as a verified diagnosis unless the documented methodology supports that claim.
Follow the data from source to impression
| Stage | Required questions |
|---|---|
| Collection | What source produced the signal? What notice and choices applied? |
| Construction | Is membership observed, modeled, contextual, or a combination? |
| Refresh | How quickly do people enter and leave? |
| Identity | Is activation person, household, device, or cookie based? |
| Distribution | Which processors and platforms receive the data? |
| Controls | How are suppression, opt-out, deletion, retention, and geography handled? |
| Validation | What truth set, error metrics, and independent review exist? |
| Measurement | Can audience accuracy be separated from campaign outcome? |
The FTC's Health Breach Notification Rule materials address certain vendors of personal health records and related entities, while HHS publishes separate HIPAA tracking guidance for regulated entities. Applicability is fact-specific. Privacy and legal specialists should review the actual product and data flow (FTC; HHS).
Interrogate the segment definition
Ask whether the segment reflects diagnosis, treatment, content consumption, shopping behavior, survey response, modeled similarity, or proximity to a care location. Each signal has different false-positive, sensitivity, and recency risks. Require inclusion and exclusion rules in plain language.
Small apparent scale can be legitimate for a rare condition. Large scale can reflect a broad definition rather than superior coverage. Compare resolved eligible counts in the intended platform and test overlap with existing audiences.
Separate three kinds of evidence
- Construction evidence: why a person enters the segment.
- Accuracy evidence: how well membership corresponds to the stated definition.
- Outcome evidence: whether media using the segment changes a business result.
One does not prove another. A precise audience may not respond to the message; a favorable outcome study may be confounded by baseline differences.
Red flags
- Unclear source categories or downstream recipients.
- “Deterministic” used without describing the observed linkage.
- Scale claims made before platform resolution and exclusions.
- No expiry rule for sensitive signals.
- Validation based only on engagement.
- Contract language that permits materially broader reuse than the brief assumes.
- Outcome claims without a comparison method or uncertainty.
Practical takeaway
Health audience selection is a governance and evidence decision, not a catalog search. The next step is to make data lineage, permitted use, validation, and deletion responses mandatory attachments to every recommendation.
Sources
- FTC, Health Breach Notification Rule: The Basics for Business
- HHS, HIPAA and Online Tracking Technologies
- NIST, Privacy Framework
External guidance and platform documentation change. Links were current at publication; check them again before relying on them for a decision.
Editorial note. Analysis and frameworks are the author's own and do not represent Acxiom or any current or former employer, client, or named platform. Examples labeled hypothetical or illustrative are not results from real campaigns. Nothing here is legal, regulatory, or medical advice.
New pharma programmatic breakdowns, occasionally
One email when I publish something worth reading. Benchmarks, measurement teardowns, and case studies with the caveats attached. No cadence promises, no reselling your address.
Unsubscribe any time. See the privacy policy.
Working through this decision on a real plan?
I work on health and pharma data, identity, and activation, after five years running HCP and DTC programmatic agency-side. Happy to talk through how this applies to your situation.