<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<REGINFO_RIN_DATA xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" RUN_DATE="2026-04-28-04:00" xsi:noNamespaceSchemaLocation="https://www.reginfo.gov/public/xml/REGINFO_XML_Ver10262011.xsd">
    <RIN_INFO>
        <RIN>3084-AB17</RIN>
        <PUBLICATION>
            <PUBLICATION_ID>200904</PUBLICATION_ID>
            <PUBLICATION_TITLE>Unified Agenda of Federal Regulatory and Deregulatory Actions</PUBLICATION_TITLE>
        </PUBLICATION>
        <AGENCY>
            <CODE>3084</CODE>
            <NAME>Federal Trade Commission</NAME>
            <ACRONYM>FTC</ACRONYM>
        </AGENCY>
        <RULE_TITLE>Temporary Breach Notification Requirement for Vendors of Personal Health Records and Other Non-HIPAA Covered Entities</RULE_TITLE>
        <ABSTRACT><![CDATA[Section 13407 of the American Recovery and Reinvestment Act of 2009 requires that the Commission issue temporary breach notification requirements for vendors of personal health records and third parties that offer products or services through the websites of vendors of personal health records.  These entities are generally not covered by the Health Insurance Portability and Accountability Act (HIPAA).  The notification requirements for these entities are triggered when there is a breach of security with respect to individually identifiable health information contained in a personal health record.  The Commission published an NPRM on April 20, 2009, and is seeking comments at that time.  The interim final rule must be issued by August 18, 2009.  The interim rule provision as issued will be effective until Congress enacts new legislation implementing any recommendations contained in a separately required report by the Commission and the Department of Health and Human Services which is due on February 19, 2010.]]></ABSTRACT>
        <PRIORITY_CATEGORY>Other Significant</PRIORITY_CATEGORY>
        <RIN_STATUS>First Time Published in The Unified Agenda</RIN_STATUS>
        <RULE_STAGE>Proposed Rule Stage</RULE_STAGE>
        <MAJOR>Undetermined</MAJOR>
        <UNFUNDED_MANDATE_LIST>
            <UNFUNDED_MANDATE>No</UNFUNDED_MANDATE>
        </UNFUNDED_MANDATE_LIST>
        <CFR_LIST>
            <CFR>To be codified at 16 CFR 318</CFR>
        </CFR_LIST>
        <LEGAL_AUTHORITY_LIST>
            <LEGAL_AUTHORITY>Sec 13407 of the American Recovery and Reinvestment Act of 2009</LEGAL_AUTHORITY>
        </LEGAL_AUTHORITY_LIST>
        <LEGAL_DLINE_LIST>
            <LEGAL_DLINE_INFO>
                <DLINE_TYPE>Statutory</DLINE_TYPE>
                <DLINE_ACTION_STAGE>Final</DLINE_ACTION_STAGE>
                <DLINE_DATE>08/18/2009</DLINE_DATE>
                <DLINE_DESC>Interim Final Regulations</DLINE_DESC>
            </LEGAL_DLINE_INFO>
        </LEGAL_DLINE_LIST>
        <RPLAN_ENTRY>No</RPLAN_ENTRY>
        <TIMETABLE_LIST>
            <TIMETABLE>
                <TTBL_ACTION>NPRM</TTBL_ACTION>
                <TTBL_DATE>04/20/2009</TTBL_DATE>
                <FR_CITATION>74 FR 17914</FR_CITATION>
            </TIMETABLE>
            <TIMETABLE>
                <TTBL_ACTION>NPRM Comment Period End</TTBL_ACTION>
                <TTBL_DATE>06/01/2009</TTBL_DATE>
            </TIMETABLE>
            <TIMETABLE>
                <TTBL_ACTION>Interim Final Rule</TTBL_ACTION>
                <TTBL_DATE>08/00/2009</TTBL_DATE>
            </TIMETABLE>
        </TIMETABLE_LIST>
        <RFA_REQUIRED>Undetermined</RFA_REQUIRED>
        <SMALL_ENTITY_LIST>
            <SMALL_ENTITY>Businesses</SMALL_ENTITY>
            <SMALL_ENTITY>Governmental Jurisdictions</SMALL_ENTITY>
            <SMALL_ENTITY>Organizations</SMALL_ENTITY>
        </SMALL_ENTITY_LIST>
        <GOVT_LEVEL_LIST>
            <GOVT_LEVEL>Undetermined</GOVT_LEVEL>
        </GOVT_LEVEL_LIST>
        <FEDERALISM>No</FEDERALISM>
        <ENERGY_AFFECTED>No</ENERGY_AFFECTED>
        <PRINT_PAPER>No</PRINT_PAPER>
        <INTERNATIONAL_INTEREST>No</INTERNATIONAL_INTEREST>
        <AGENCY_CONTACT_LIST>
            <CONTACT>
                <FIRST_NAME>Maneesha</FIRST_NAME>
                <LAST_NAME>Mithal</LAST_NAME>
                <TITLE>Staff Attorney</TITLE>
                <AGENCY>
                    <CODE>3084</CODE>
                    <NAME>Federal Trade Commission</NAME>
                    <ACRONYM>FTC</ACRONYM>
                </AGENCY>
                <PHONE>202 326-2771</PHONE>
                <EMAIL>mmithal@ftc.gov</EMAIL>
                <MAILING_ADDRESS>
                    <STREET_ADDRESS>600 Pennsylvania Avenue NW,</STREET_ADDRESS>
                    <CITY>Washington</CITY>
                    <STATE>DC</STATE>
                    <ZIP>20580</ZIP>
                </MAILING_ADDRESS>
            </CONTACT>
        </AGENCY_CONTACT_LIST>
    </RIN_INFO>
</REGINFO_RIN_DATA>
