[…] Health Breach Notification Rule requires vendors of personal health records and other entities to notify customers, the FTC and occasionally the media when data is acquired …