Regulations library · US federal

FTC HBNR

FTC Health Breach Notification Rule

In force US federal health breach notification

Breach notice for health apps and similar services outside HIPAA, where unauthorized sharing counts as a breach.

At a glance

Who it applies to
Vendors of personal health records and health apps not covered by HIPAA.
Who enforces it
Federal Trade Commission
When
In effect since 24 September 2009. Amendments clarifying coverage of health apps took effect on 29 July 2024.

This is a reference entry. The priority laws get a full practical guide first.

Recent developments

Nothing reported yet. Regulatory Watch lists new rules, enforcement and court decisions as they arrive.

Sources

Primary sources are being added to this entry.

Dates and status are from the association's inventory and are being checked against primary sources. This page explains the law for practitioners; it is not legal advice.