FTC proposes PHR breach rules

Personal health records have had something of a mixed reception since the idea was first kicked around a few years ago. One of the biggest raps on them has been that because they're not medical records as such, privacy protections familiar to consumers won't apply.

However, the Federal Trade Commission seems ready to lock down PHRs a bit more. The agency has issued a new proposed rule that would require PHR vendors and related entities to let consumers know when their identifiable health information has been breached. The FTC is asking for public comment on this rule through June 1.

The rule stems from the big stimulus package, which requires HHS and the FTC to study privacy, security and breach notification for PHR vendors and related entities.

To learn more about the rules:
- read this Health Data Management piece

Related Articles:
PHRs face serious growing pains
Google Health PHR adds sharing option to service
Google Health beta launches
Aetna offers customers access to Microsoft HealthVault

Post a comment