FTC Finalizes Health Breach Notification Rule Update

Regs Now Cover Wearables and Health Apps, Extend to More Types of Breaches Marianne Kolbasuk McGee (HealthInfoSec) • April 26, 2024

The Federal Trade Commission has finalized changes to its Health Breach Notification Rule, expanding the type of technologies that apply to regulations pertaining to non-HIPAA-regulated entities. The rule has been on the books for about 15 years, but the agency only recently began to enforce it.

See Also: Webinar | Charting the Course: The Right Path to "Shifting Left" for Container Security Excellence

The FTC said revising the Health Breach Notification Rule "strengthens and modernizes" its applicability to health apps and other similar technologies.

The agency last year provided an advance peek at the changes in a proposed rule updating the regulations (see: FTC Pushes Boundaries With Proposed Health Rule Change).

The rule requires vendors of ...