"These innovations have the potential to provide numerous benefits for consumers, which can only be realized if they have confidence that the security and confidentiality of their health information will be maintained," according the FTC press release. To address this, the stimulus bill requires the Department of Health and Human Services to conduct a study and report by February 2010, in consultation with the FTC, on potential privacy, security, and breach notification requirements for vendors of personal health records and related entities. In the interim, the statute requires the FTC to issue a temporary rule requiring entities to notify consumers if the security of their health information is breached. The proposed rule the Commission announced Thursday is the first step in implementing this requirement. Read more about the FTC announcement here.