FTC Rescinds Health App Breach Guidance | Privacy

Last Update: 09/22/2026 at 11:34 PM EST

Coverage from Epstein Becker Green, MSSP Alert, and others

The FTC’s September 2026 rescission of its 2021 health-breach guidance changes the federal interpretation applied to some non-HIPAA health apps and connected devices.

The 2024 Health Breach Notification Rule remains in place, while FTC Section 5 authority and state privacy laws continue to shape obligations.

Looking Back

3 Day Timeline

Articles published over time. Hover any bar for the period and its article count.

Sep 9

Sep 10

Sep 11

All Articles4 articles

Important1 article · CI Score 60 and above

Epstein Becker Green / Alaap B. Shah

FTC Narrows Health App Breach Notification Obligations

On September 9, 2026, the U.S. Federal Trade Commission rescinded expanded Health Breach Notification Rule guidance for non-HIPAA health apps and connected devices.

9/11/2026 • Regulation, Law & Enforcement • General

Interesting3 articles · CI Score 45–59

MSSP Alert

FTC Drops Health App Data Breach Notification Policy

The Federal Trade Commission recently unanimously rescinded its health breach notification policy in the United States, reducing reporting requirements for health and fitness apps.

9/10/2026 • Regulation, Law & Enforcement • General

CyberScoop / Derek B. Johnson

FTC Withdraws Health App Breach Notification Policy

The Federal Trade Commission unanimously rescinded its 2021 health app breach notification policy in the United States after commission membership changes and new deregulation guidance.

9/9/2026 • Regulation, Law & Enforcement • General

Federal Trade Commission

FTC Rescinds Outdated Health-App Breach Guidance

The Federal Trade Commission rescinded its 2021 health breach policy statement in the United States after a 2024 rule update expanded coverage to health apps and connected devices.

9/9/2026 • Regulation, Law & Enforcement • General