Medical Economics May 23, 2023
Agency wants to expand PHR breach reporting requirements to include entities not covered by HIPAA
The Federal Trade Commission (FTC) is asking for public input on changes it’s proposing to the Health Breach Notification Rule (HBNR) that include clarifying how the rule applies to health apps and similar technologies.
The rule requires vendors of personal health records (PHR) and related entities that are not covered by the Health Insurance Portability and Accountability Act (HIPAA) to notify individuals, the FTC, and, in some cases, the media of a breach of unsecured personally identifiable health data. It also requires third-party service providers to PHR vendors and PHR-related entities to notify such vendors and...