FTC’s PHR Breach Rule = Confusion

The Federal Trade Commission has released a final rule requiring vendors of personal health records–and entities that offer third-party PHRs–to notify consumers when the security of their PHR data is breached. Despite efforts of the FTC and the Department of Health and Human Services to harmonize separate rules governing notification of breaches, the FTC rule takes confusion to a new level and will require considerable study.

via FTC’s PHR Breach Rule = Confusion.

Related posts

• Why Do Bad Things Happen to PCI-Compliant Companies? (0)
• USAJobs hacking raises further security questions (0)
• The Two Scenarios Coming From The PWC PCI Report (0)
• Retailer Wireless Devices Largely Unprotected (0)
• PCI’s Post-Audit Pain Points (0)

---

Did you enjoy this post? Why not leave a comment below and continue the conversation, or subscribe to my feed and get articles like this delivered automatically each day to your feed reader. If you don't have a feed reader, you can always have these articles delivered to your email inbox every day. Click here to sign up.