On September 15, 2026, the FTC announced that it withdrew its 2021 policy statement on breaches involving health apps and connected devices, describing that earlier statement as obsolete. The action signals a change in how the agency frames privacy and breach oversight for digital health technologies. For organizations handling sensitive health data outside traditional clinical settings, the move is a notable federal privacy development to watch.
