FTC Seeks Comment on Health Breach Notification Rule
The FTC requested comment Friday on potential changes to the health breach notification rule, which dictates data breach guidelines for health record vendors and related entities. Commissioners voted 5-0 to publish a rule review notice in the Federal Register, at…
Sign up for a free preview to unlock the rest of this article
Communications Daily is required reading for senior executives at top telecom corporations, law firms, lobbying organizations, associations and government agencies (including the FCC). Join them today!
which point the agency will accept comment for 90 days. In effect since 2009, the rule requires entities not covered by the Health Insurance Portability and Accountability Act to provide data breach notifications within 60 days after discovery, or 10 days if it affects more than 500 people. The agency is seeking comment on whether the rule is working adequately, in terms of definitions, timing requirements and enforcement implications.