Last Update: 09/15/2026 at 6:33 PM EST

FTC Rescinds Health App Breach Guidance

Coverage from Epstein Becker Green, MSSP Alert, and others

What's Going On

FTC Rescinds Health App Breach Guidance topic image

The FTC’s September 2026 rescission of its 2021 health-breach guidance changes the federal interpretation applied to some non-HIPAA health apps and connected devices.

The 2024 Health Breach Notification Rule remains in place, while FTC Section 5 authority and state privacy laws continue to shape obligations.

3 Day Timeline

Sep 9Sep 10Sep 11

Additional Articles

⭐⭐⭐⭐⭐

Epstein Becker Green / Alaap B. Shah09-11-2026
On September 9, 2026, the U.S. Federal Trade Commission rescinded expanded Health Breach Notification Rule guidance for non-HIPAA health apps and connected devices.

⭐⭐⭐

MSSP Alert09-10-2026
The Federal Trade Commission recently unanimously rescinded its health breach notification policy in the United States, reducing reporting requirements for health and fitness apps.
CyberScoop / Derek B. Johnson09-09-2026
The Federal Trade Commission unanimously rescinded its 2021 health app breach notification policy in the United States after commission membership changes and new deregulation guidance.
Federal Trade Commission09-09-2026
The Federal Trade Commission rescinded its 2021 health breach policy statement in the United States after a 2024 rule update expanded coverage to health apps and connected devices.