Regulation & enforcement

FTC rescinds policy requiring health apps to notify customers after a breach

Published September 9, 2026 · CyberScoop

The Federal Trade Commission has withdrawn a Biden-era rule that obligated health applications to inform users when their personal health information was exposed or shared without consent. The reversal removes a breach-notification requirement that had extended to apps handling sensitive medical data outside traditional HIPAA coverage.

Read the full story at CyberScoop

More on regulation & enforcement

This is a short, independently-written summary -- not a copy of the original reporting. Always read the full story at the source link above.