The Federal Trade Commission (FTC) is proposing changes to its breach notification rule to include apps and connected devices that collect personal health information. The proposed changes would require these companies to notify consumers and the FTC within 60 days of a data breach and to take steps to protect the security of their users’ data. The FTC’s proposed changes come in response to the growing number of health apps and connected devices on the market, which collect a wide range of personal health information. The changes would help to protect consumers’ privacy and security by requiring companies that collect personal health information to take steps to safeguard it.
The Federal Trade Commission (FTC) is seeking to broaden its breach notification rule to include apps and connected devices that collect personal health information. The proposed changes would require these companies to notify consumers and the FTC within 60 days of a data breach and to take steps to protect the security of their users’ data.
The FTC’s proposed changes come in response to the growing number of health apps and connected devices on the market. These devices collect a wide range of personal health information, including medical history, symptoms, and medications. In some cases, this information is stored on the device itself, making it vulnerable to theft or hacking.
The FTC’s proposed changes would help to protect consumers’ privacy and security by requiring companies that collect personal health information to take steps to safeguard it. The changes would also give consumers more information about how their data is being used and would make it easier for them to take action if their data is compromised.
The FTC is accepting comments on the proposed changes for 60 days after the publication of its notice of proposed rulemaking. The public can submit comments by visiting the FTC’s website.
The FTC’s proposed changes are a positive step towards protecting consumers’ privacy and security. By requiring companies that collect personal health information to take steps to safeguard it, the FTC is helping to ensure that consumers’ data is protected from unauthorized access and use.
Here are some additional details about the FTC’s proposed changes:
- The changes would require companies that collect personal health information to notify consumers and the FTC within 60 days of a data breach.
- The changes would require companies to take steps to protect the security of their user’s data, such as using strong passwords and encryption.
- The changes would require companies to provide consumers with more information about how their data is being used, such as for marketing or analytics.
- The changes would make it easier for consumers to take action if their data is compromised, such as by freezing their credit or disputing charges.
The FTC’s proposed changes are a significant step towards protecting consumers’ privacy and security. By requiring companies that collect personal health information to take steps to safeguard it, the FTC is helping to ensure that consumers’ data is protected from unauthorized access and use.