In this episode, Rebecca Schaefer interviews Gina Bertolini and Desiree Moore about the recent Federal Trade Commission (FTC) policy statement regarding the FTC Health Breach Notification Rule and its applicability to vendors of personal health records. The presenters discuss the requirements of the FTC Rule, when it applies relative to HIPAA, and the implications of the policy statement for digital health companies and health IT developers. Gina and Desiree also provide practical takeaways for both health care providers and health app vendors.