FTC Adopts Policy Statement on Privacy Breaches by Health Apps and Connected Devices

On September 15, the FTC adopted – on a 3-2 party-line vote – a policy statement that takes a broad view of which health apps and connected devices are subject to the FTC’s Health Breach Notification Rule and what triggers the Rule’s notification requirement.