Regulatory Watch  /  United States (federal)  /  Guidance
Moderate impactGuidanceRepealed

FTC rescinds 2021 Policy Statement on Breaches by Health Apps and Connected Devices

The Federal Trade Commission announced it is rescinding the 2021 Policy Statement on Breaches by Health Apps and Other Connected Devices. The guidance is deemed obsolete and is being withdrawn. The rescission was published on 2026-09-09.

Why it matters: The FTC's withdrawal of this guidance removes a previously stated compliance expectation for health app and IoT device developers.

Summary generated from the sources below. Check the primary source before relying on it; this is not legal advice.

Sources
FTC Withdraws Obsolete Policy Statement
Federal Trade Commission press releases · primary source · Sep 9, 2026
FTC Rescinds 2021 Policy Statement on Health App Data Breaches
Hunton Privacy & Cybersecurity Law Blog · Sep 16, 2026
Details
JurisdictionUnited States (federal)
RegulatorFederal Trade Commission
StatusRepealed
PublishedSeptember 9, 2026
EffectiveSeptember 9, 2026
Topicssecurity, breach notification, health, privacy
Datapersonal, health