FTC Issues Final Breach Notification Rule for Electronic Health Information

Created by Valerie M. Vogel (EDUCAUSE) on August 21, 2009

The Federal Trade Commission (FTC) has issued a final rule on Health Breach Notification, which "requires vendors of personal health records and related entities to notify consumers following a breach involving unsecured information". The rule provides additional details about the "timing, method, and content of notification" in the event of a breach, and requires companies to notify the FTC, as well as the media (in cases involving 500 or more people). This rule is effective September 24, 2009. Full compliance will be required by February 22, 2010.

For more information, please visit the FTC's Health Breach Notification Rule website or recent press release.

Valerie's blog
Login or register to post comments
179 reads

		FTC Issues Final Breach Notification Rule for Electronic Health Information Created by Valerie M. Vogel (EDUCAUSE) on August 21, 2009 The Federal Trade Commission (FTC) has issued a final rule on Health Breach Notification, which "requires vendors of personal health records and related entities to notify consumers following a breach involving unsecured information". The rule provides additional details about the "timing, method, and content of notification" in the event of a breach, and requires companies to notify the FTC, as well as the media (in cases involving 500 or more people). This rule is effective September 24, 2009. Full compliance will be required by February 22, 2010. For more information, please visit the FTC's Health Breach Notification Rule website or recent press release. Cybersecurity Initiative Announcements \| Data Breach Notification \| Federal Trade Commission Valerie's blog Login or register to post comments 179 reads
		© Copyright 1999-2009 EDUCAUSE Need Help? \| Feedback \| Privacy Policy
	Unless otherwise noted, EDUCAUSE holds the copyright on all materials published by the association, whether in print or electronic form. In certain cases the work remains the intellectual property of the individual author(s) (see Special Circumstances). Content from conference speeches, presentations, blogs, wikis and feeds reflect the opinions of the author, and not necessarily those of EDUCAUSE or its members.