# Health Breach Notification Rule
> **US Federal Trade Commission** · Final Rule. · Published 2009-08-25 · Effective 2009-09-24 · 74 FR 42962
## Document
- **Document number:** E9-20142
- **Category:** final-rule
- **Agency:** US Federal Trade Commission
- **Federal Register citation:** 74 FR 42962
- **CFR reference:** 16 CFR 318
- **Publication date:** 2009-08-25
- **Effective date:** 2009-09-24
- **Docket:** RIN 3084-AB17
## Abstract

The Federal Trade Commission ("FTC" or "Commission") is issuing this final rule, as required by the American Recovery and Reinvestment Act of 2009 (the "Recovery Act" or "the Act"). The rule requires vendors of personal health records and related entities to notify consumers when the security of their individually identifiable health information has been breached.

## Source
- [Federal Register document](https://www.federalregister.gov/documents/2009/08/25/E9-20142/health-breach-notification-rule)
---
*AI Analytics · CC0 1.0*