FTC Health Breach Notification Rule
What is FTC Health Breach Notification Rule?
The FTC Health Breach Notification Rule (16 CFR Part 318) is the FTC regulation requiring VENDORS OF PERSONAL HEALTH RECORDS (PHR) + PHR-RELATED ENTITIES + THIRD-PARTY SERVICE PROVIDERS to NOTIFY individuals + the FTC + (where applicable) the media of breaches of security involving identifiable health information. The Rule applies to entities NOT COVERED BY HIPAA (Health Insurance Portability and Accountability Act of 1996 + HIPAA Breach Notification Rule at 45 CFR Subpart D) - i.e. It comprises 11 controls organised across 7 domains, and applies in the United States.
How FTC Health Breach Notification Rule maps to other frameworks
All 11 controls, each one mapped to the equivalent requirement in other standards, with the evidence that carries across and the mappings that were judged and rejected shown alongside. No account needed to look.
See the control mappings →The 7 domains FTC Health Breach Notification Rule groups its controls into
Where FTC Health Breach Notification Rule overlaps with the standards you already hold
What FTC Health Breach Notification Rule means in your sector
What FTC Health Breach Notification Rule means for your job
Questions people ask about FTC Health Breach Notification Rule
What is FTC Health Breach Notification Rule?
How many controls does FTC Health Breach Notification Rule have?
Where does FTC Health Breach Notification Rule apply?
How do I get started with FTC Health Breach Notification Rule compliance?
Query FTC Health Breach Notification Rule programmatically
FTC Health Breach Notification Rule, its 11 controls and every mapping into other standards are available over a REST endpoint and an MCP server, so an agent can read them directly. The free tier is 10 calls a day and needs no signup.
FTC Health Breach Notification Rule API reference and MCP config →How ready are you for FTC Health Breach Notification Rule?
Answer 25 questions and get a professional readiness report with gap analysis, maturity scores, and prioritised action items. Results in 5 minutes.