Health Breach Notification Rule

Document Headings Document headings vary by document type but may contain the following: the agency or agencies that issued and signed a document the number of the CFR title and the number of each part the document amends, proposes to amend, or is directly related to the agency docket number / agency internal file number the RIN which identifies each regulatory action listed in the Unified Agenda of Federal Regulatory and Deregulatory Actions See the Document Drafting Handbook for more details. Federal Trade Commission 16 CFR Part 318 AGENCY: Federal Trade Commission. ACTION: Notice of proposed rulemaking; request for public comment. SUMMARY: The Federal Trade Commission (“FTC” or “Commission”) proposes to amend the Commission's Health Breach Notification Rule (the “HBN Rule” or the “Rule”) and requests public comment on the proposed changes. The HBN Rule requires vendors of personal health records (“PHRs”) and related entities that are not covered by the Health Insurance Portability and Accountability Act (“HIPAA”) to notify individuals, the FTC, and, in some cases, the media of a breach of unsecured personally identifiable health data. DATES: Written comments must be received on or before August 8, 2023. ADDRESSES: Interested parties may file a comment online or on paper by following the Request for Comment part of the SUPPLEMENTARY INFORMATION section below. Write “Health Breach Notification Rule, Project No. P205405” on your comment and file your comment online at https://www.regulations.gov by following the instructions on the web-based form. If you prefer to file your comment on paper, mail your comment to the following address: Federal Trade Commission, Office of the Secretary, 600 Pennsylvania Avenue NW, Suite CC-5610 (Annex H), Washington, DC 20580. FOR FURTHER INFORMATION CONTACT: Ryan Mehm (202) 326-2918, Elisa Jillson, (202) 326-3001, Ronnie Solomon, (202) 326-2098, Divis…