FTC Withdraws Obsolete Policy Statement
The FTC has rescinded its 2021 Policy Statement on health app data breach notification, saying the statement became redundant after the agency updated its Health Breach Notification Rule in 2024 to formally cover health apps and connected devices. The withdrawal aligns with a Trump executive order directing agencies to remove unnecessary regulatory guidance.
Why this matters: On paper, this is just housekeeping. The actual rule still stands, so health apps and fitness trackers are still covered. But these withdrawals matter over time. Policy statements shape how the FTC investigates and how companies behave. Pulling them back — even obsolete ones — can quietly narrow the agency's posture. Watch whether the underlying rule stays enforced with the same force, or whether the cleanup becomes a reason to do less.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance · Lawyers
This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.