FTC Files Security Complaint Over Medical Billing, Payment Portal

Nearly 5,500 consumers who thought they were only joining an online medical bill payment portal ended up having their information sent to 31 companies, a Federal Trade Commission complaint alleges.

Read More

FTC Releases Breach Notification Rule

Yesterday HHS published its breach notification rule for HIPAA covered entities. Today the Federal Trade Commission’s rule appeared in print, making it official also. The FTC rule applies to entities not covered by HIPAA, primarily vendors of personal health records. The rule is effective September 24, 2009. Full compliance is required by February 22, 2010. FTC’s rule requires vendors of personal health records and related entities to...

Read More

FTC Delays “Red Flag” Deadline

The Federal Trade Commission has pushed back the compliance deadline for its identity theft “red flag” rules. The original deadline was less than two weeks away. The new deadline is May 1, 2009. The red flag rules require businesses that extend credit to their customers to develop and implement written identity theft prevention programs. Healthcare organizations fall under the rule, say attorneys. The FTC released the final rules in...

Read More