"[T]he FTC [has taken] the position that mobile health applications that are not covered by [HIPAA] are covered by the [Health Breach Notification Rule (HBNR)].... The FTC's proposed amendments to the HBNR attempt to codify this broad interpretation.... [T]he amendments would ... include 'unauthorized disclosure' in the definition of 'breach of security,' and bring 'websites' and 'mobile applications' into the scope of the law[.]"  MORE >>