Asking for your insights into the Health Breach Notification Rule
Next on the FTC’s regulatory review calendar: the Health Breach Notification Rule. In place since 2009, the Rule requires vendors of personal health records and related entities that aren’t covered by HIPAA to notify individuals, the FTC, and, in some cases, the media when there has been a breach of unsecured personally identifiable health data. We’d like your perspectives on how the Rule has been working. As it now stands, companies must provide...