The American Recovery and Reinvestment Act requires the Department of Health and Human Services, in consultation with the FTC, by February 2010 to release a study on potential privacy, security and breach notification requirements for PHR vendors and related entities.
In the meantime, the act mandates an interim final rule from the FTC by August. The FTC intends to develop the interim final rule following the public comment period on the proposed rule.
The proposed rule is not as formal as most proposed rules. It appears to be a substantial outline, or "first look," at what provisions could be in the interim final rule.
The FTC has posted on its Web site a notice, soon to be published in the Federal Register, that includes the proposed rule. The notice is available at ftc.gov/opa/2009/04/healthbreach.shtm.
To comment on the rule, click here.
--Joseph Goedert
Be the first to comment on this post using the section below.