FTC Issues Controversial Breach Notification Rule Despite Two Commissioners’ Dissent

The Federal Trade Commission on Friday (April 26) finalized a controversial plan to extend the scope of its Health Breach Notification Rule to include personal health information collected by health apps and other technology that fall outside the Health Insurance Portability and Accountability Act, despite warnings from stakeholders the agency could be sued and dissenting opinions from two commissioners alleging FTC was overstepping its authority. The rule requires vendors of personal health records and related entities that are not covered...