HBNR 2024-2025 implementation status + FTC enforcement cases. STATUS: 2024 Final Rule effective 29 July 2024 + 25 April 2025 for delayed elements; FTC has published enforcement priorities + sample guidance + the FTC Health Breach Notification online form. RECENT FTC ENFORCEMENT (2022-2025 - cases under both HBNR + FTC Section 5(a)): GoodRx (USD 1.5M civil penalty + USD 0M consumer remediation 2023 - advertising-pixel + Facebook + Google + Snapchat + Pinterest health data disclosure); BetterHelp (USD 7.8M consumer remediation 2023 - mental health data disclosure to advertising networks); Premom (USD 100K civil penalty 2023 - fertility-app data sharing); Easy Healthcare (Premom parent + USD 200K 2024 - reproductive-health-data); 1Health (USD 5K + 23andMe-related practices); other cases involving Meta Pixel + Google Tag Manager use on healthcare websites. ANTICIPATED 2025-2026 ENFORCEMENT: (a) reproductive-health-data + post-Dobbs era state-law alignment; (b) mental-health + telehealth app data; (c) AI-enabled health analysis + recommendation systems; (d) cross-app tracking via SDKs + advertising networks; (e) data-broker resale of health information; (f) connected medical device + wearable manufacturer breaches. NO substantive 2025 amendments pending in advance + but the FTC continues issuing guidance + enforcement actions.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.