The FTC has rescinded a Biden-era policy statement that expanded federal health data breach notification rules to cover health and fitness apps, citing minimal benefit and a shift toward deregulation. The move removes a rule that had aimed to hold apps and connected devices accountable for disclosing breaches involving sensitive health information and data sharing with third parties. #FTC #LinaKhan #HealthInsurancePortabilityAndAccountabilityAct
Keypoints
- The FTC withdrew its policy covering health and fitness apps under breach notification rules.
- The agency said the statement offered minimal benefit and was superseded by rulemaking.
- The original policy targeted vendors of personal health records and connected devices.
- The rule would have required notification for breaches or unauthorized disclosure of sensitive health data.
- The rescission follows a broader White House push for deregulation and reduced subregulatory guidance.
Read More: https://cyberscoop.com/ftc-rescinds-health-app-data-breach-policy/