{"abstract":"The Federal Trade Commission (\"FTC\" or \"Commission\") is issuing this final rule, as required by the American Recovery and Reinvestment Act of 2009 (the \"Recovery Act\" or \"the Act\"). The rule requires vendors of personal health records and related entities to notify consumers when the security of their individually identifiable health information has been breached.","action":"Final Rule.","agencies":[{"raw_name":"FEDERAL TRADE COMMISSION","name":"Federal Trade Commission","id":192,"url":"https://www.federalregister.gov/agencies/federal-trade-commission","json_url":"https://www.federalregister.gov/api/v1/agencies/192","parent_id":null,"slug":"federal-trade-commission"}],"body_html_url":"https://www.federalregister.gov/documents/full_text/html/2009/08/25/E9-20142.html","cfr_references":[{"chapter":null,"citation_url":null,"part":318,"title":16}],"citation":"74 FR 42962","comment_url":null,"comments_close_on":null,"correction_of":null,"corrections":[],"dates":"This rule is effective September 24, 2009. Full compliance is required by February 22, 2010.","disposition_notes":null,"docket_ids":["RIN 3084-AB17"],"dockets":[],"document_number":"E9-20142","effective_on":"2009-09-24","end_page":42985,"executive_order_notes":null,"executive_order_number":null,"explanation":null,"full_text_xml_url":"https://www.federalregister.gov/documents/full_text/xml/2009/08/25/E9-20142.xml","html_url":"https://www.federalregister.gov/documents/2009/08/25/E9-20142/health-breach-notification-rule","images":{"ER25AU09.002":{"large":"https://img.federalregister.gov/ER25AU09.002/ER25AU09.002_large.png","medium":"https://img.federalregister.gov/ER25AU09.002/ER25AU09.002_medium.png","original_size":"https://img.federalregister.gov/ER25AU09.002/ER25AU09.002_original_size.png"},"ER25AU09.001":{"large":"https://img.federalregister.gov/ER25AU09.001/ER25AU09.001_large.png","medium":"https://img.federalregister.gov/ER25AU09.001/ER25AU09.001_medium.png","original_size":"https://img.federalregister.gov/ER25AU09.001/ER25AU09.001_original_size.png"},"ER25AU09.000":{"large":"https://img.federalregister.gov/ER25AU09.000/ER25AU09.000_large.png","medium":"https://img.federalregister.gov/ER25AU09.000/ER25AU09.000_medium.png","original_size":"https://img.federalregister.gov/ER25AU09.000/ER25AU09.000_original_size.png"}},"images_metadata":{"ER25AU09.002":{"large":{"identifier":"ER25AU09.002","content_type":"image/png","size":72827,"width":823,"sha":"0e611c63fe4fbacf2ae8561221a3a606","url":"https://img.federalregister.gov/ER25AU09.002/ER25AU09.002_large.png","height":1013},"medium":{"identifier":"ER25AU09.002","content_type":"image/png","size":42590,"width":574,"sha":"a1a8817d2ca099a75666f3622f23fcb0","url":"https://img.federalregister.gov/ER25AU09.002/ER25AU09.002_medium.png","height":706},"original_size":{"identifier":"ER25AU09.002","content_type":"image/png","size":196532,"width":4333,"sha":"c967a433d6a4f5ba51f0ad71e9d9c083","url":"https://img.federalregister.gov/ER25AU09.002/ER25AU09.002_original_size.png","height":5333}},"ER25AU09.001":{"large":{"identifier":"ER25AU09.001","content_type":"image/png","size":79735,"width":823,"sha":"923fd74f5196b7a20c65e779dd094429","url":"https://img.federalregister.gov/ER25AU09.001/ER25AU09.001_large.png","height":1013},"medium":{"identifier":"ER25AU09.001","content_type":"image/png","size":45171,"width":574,"sha":"41514e5f299749b78a70e1a1f4c92b9c","url":"https://img.federalregister.gov/ER25AU09.001/ER25AU09.001_medium.png","height":706},"original_size":{"identifier":"ER25AU09.001","content_type":"image/png","size":193806,"width":4333,"sha":"40e6543eeea0c9503b22f830864f1a1f","url":"https://img.federalregister.gov/ER25AU09.001/ER25AU09.001_original_size.png","height":5333}},"ER25AU09.000":{"large":{"identifier":"ER25AU09.000","content_type":"image/png","size":94154,"width":823,"sha":"71ac0fdf13ff37fb617ca83d75d7d1e3","url":"https://img.federalregister.gov/ER25AU09.000/ER25AU09.000_large.png","height":1013},"medium":{"identifier":"ER25AU09.000","content_type":"image/png","size":55900,"width":574,"sha":"0fd7f7c7b0239c7089a2415b7d1f81c5","url":"https://img.federalregister.gov/ER25AU09.000/ER25AU09.000_medium.png","height":706},"original_size":{"identifier":"ER25AU09.000","content_type":"image/png","size":293549,"width":4333,"sha":"ccfd805a1ab5a6c6c9853ff33e7cd3db","url":"https://img.federalregister.gov/ER25AU09.000/ER25AU09.000_original_size.png","height":5333}}},"json_url":"https://www.federalregister.gov/api/v1/documents/E9-20142?publication_date=2009-08-25","mods_url":"https://www.govinfo.gov/metadata/granule/FR-2009-08-25/E9-20142/mods.xml","not_received_for_publication":null,"page_length":24,"page_views":{"count":1338,"last_updated":"2026-04-04 14:15:05 -0400"},"pdf_url":"https://www.govinfo.gov/content/pkg/FR-2009-08-25/pdf/E9-20142.pdf","presidential_document_number":null,"proclamation_number":null,"public_inspection_pdf_url":null,"publication_date":"2009-08-25","raw_text_url":"https://www.federalregister.gov/documents/full_text/text/2009/08/25/E9-20142.txt","regulation_id_number_info":{},"regulation_id_numbers":[],"regulations_dot_gov_info":{"checked_regulationsdotgov_at":"2009-09-01T14:28:34Z"},"regulations_dot_gov_url":null,"significant":null,"signing_date":null,"start_page":42962,"subtype":null,"title":"Health Breach Notification Rule","toc_doc":"Health Breach Notification Rule","toc_subject":null,"topics":["Consumer protection","Health records","Privacy","Trade practices"],"type":"Rule","volume":74}