FTC Seeks Input on Health Data Breach Notification Rule

The Federal Trade Commission is weighing potential changes to a decade-old rule governing when certain health tech companies must notify individuals of a data breach.

The FTC said Friday it’s seeking public comment on whether to modify its health breach notification rule, which requires personal health records vendors and other companies not covered by the Health Insurance Portability and Accountability Act to notify affected individuals, the agency, and in some cases, the media in the event of a health data breach.

The agency is asking for input on the rule’s effectiveness and benefits, and whether it should be left as ...