Skip to main content

FTC Health Data Rule

Meaning

The FTC Health Data Rule, more formally known as the Health Breach Notification Rule (HBNR), is a regulation enforced by the Federal Trade Commission (FTC) that mandates certain vendors of personal health records (PHR) and related entities not covered by HIPAA to notify consumers following a breach of their unsecured personal health information. This rule is particularly relevant in the wellness space, as it covers direct-to-consumer mobile health apps, fitness trackers, and other non-traditional healthcare technology that collects sensitive physiological data, including hormonal or metabolic markers. The rule ensures transparency and consumer awareness when their intimate health data is compromised outside of traditional clinical settings.