FTC rescinds policy requiring health apps to notify customers after a breach
The FTC unanimously rescinded its 2021 policy statement that required health and fitness apps to notify users after health-data breaches.
The FTC voted to rescind a September 2021 Biden-era policy statement that extended federal health-data breach notification rules to health apps, fitness trackers, and connected devices, which had exposed violators to fines of $43,792 per violation per day. The 2021 statement, adopted in a divided 3-2 vote under then-chair Lina Khan, cited HIPAA coverage gaps for consumer health applications. The commission said the statement provided minimal benefit, was superseded by rulemaking, and aligns with the White House deregulatory agenda.
- Rescission removes federal breach-notification expectations for consumer health apps
- 2021 statement passed 3-2 under Chair Lina Khan
- Unanimous 2026 vote follows replacement of Democratic commissioners
- Experts note similar regulatory gaps persist for healthcare AI models
- Organizations
- FTCFederal Trade Commission
- Countries
- United States
From the original article
3 min read at cyberscoop.com
The policy, passed under the Biden administration, forced health apps to disclose when users’ personal health records were exposed in a breach or shared without authorization. The post FTC rescinds policy requiring health apps to notify customers after a breach appeared first on CyberScoop.
By djohnson · cyberscoop.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.