FTC rescinds policy requiring health apps to notify customers after a breach

FTC rescinds policy requiring health apps to notify customers after a breach

The policy, passed under the Biden administration, forced health apps to disclose when users’ personal health records were exposed in a breach or shared without authorization.

FTC rescinds policy statement extending breach notification rule to apps, devices that collect health information

The Federal Trade Commission announced Sept. 9 that it rescinded its 2021 policy statement that extended applicability of its health breach notification rule to health apps and connected devices that collect consumer health information. The commission said the 2021 statement was superseded by its 2024 update to the health breach notification rule. The FTC said the recission is part of the administration’s deregulation efforts and follows the com…

FTC Withdraws Obsolete Policy Statement

From the Federal Trade Commission: The Federal Trade Commission rescinded the 2021 Policy Statement on Breaches by Health Apps and Other Connected Devices. This controversial policy statement purported to apply the FTC’s Health Breach Notification Rule to health apps and connected devices that collect consumer health information. In 2024, however, the Commission updated the Health Breach Notification... Source