Health Breach Notification Rule

HBNR
active

FTC rule requiring vendors of personal health records and related entities to notify consumers and the FTC of breaches of unsecured health information.

Jurisdiction

United States

Jurisdiction Type

federal

Country

United States

Effective Date

9/24/2009

Enforcing Authority

Federal Trade Commission (FTC)

Maximum Fine

Up to $50,120 per violation per day

Fines Under This Regulation

0

Total Fine Amount (USD)

--

Privacy Topics

health_databreach_notificationhealth_apps

Key Articles

ArticleDescription
§318.1Purpose and scope
§318.2Definitions
§318.3Breach notification requirement
§318.4Timeliness
§318.5Methods of notice
§318.6Content of notice