What Updates to the Health Breach Notification Rule Mean for Your Business

On July 29, 2024, the FTC’s revised Health Breach Notification Rule (HBNR) takes effect. The Rule requires vendors of personal health records (PHRs) and related entities not covered by HIPAA to notify individuals, the FTC, and in some cases, the media in the event of a breach of unsecured personal health data. Businesses operating a wide array of services, including health, diet, and fitness apps should take care to review the revised HBNR and assess its applicability to their practices.