1. Apps handling health record data (including from Health Connect) must meet stricter qualification standards; 2. Health data must not be used for ad targeting or sold to third parties; 3. Provide a clear data deletion mechanism — user deletion requests must be fulfilled within 30 days; 4. Add a separate 'Health Data Processing' section to your privacy policy; 5. Data obtained from healthcare institutions requires additional compliance certification.