“The Federal Trade Commission, which heretofore has had a minimal role in enforcing privacy and security laws affecting electronic health records, took a big first step Thursday toward its new role as a front line, federal healthcare IT enforcer.
In a 50-page notice and interim proposed rule, the FTC outlined its position on a set of new, federal breach notification requirements for the developers of electronic personal health-record systems and three broadly defined groups of related companies and organizations that send or receive patient information to or from PHRs, about 900 companies and organizations in total.”
Article
Joseph Conn, Healthcare IT Consultant Blog, 20 April 2009
