{"data":{"id":"us/16-cfr-318.8","jurisdiction":"us","citation":"16 CFR 318.8","heading":"Applicability date.","body":"This part shall apply to breaches of security that are discovered on or after September 24, 2009.","path":["Title 16—Commercial Practices","CHAPTER I—FEDERAL TRADE COMMISSION","SUBCHAPTER C—REGULATIONS UNDER SPECIFIC ACTS OF CONGRESS","PART 318—HEALTH BREACH NOTIFICATION RULE"],"source_url":"https://www.ecfr.gov/api/versioner/v1/full/2026-08-25/title-16.xml","current_through":"2026-08-25","vintage":"","retrieved_at":"2026-08-27T02:24:29Z","sha256":"5c681f1a6be043d7f8ff67c2b8b0b39848a4496cbb19b51057779fa768f43bd0","source_id":"us-cfr","stale":true,"prev":"us/16-cfr-318.7","next":"us/16-cfr-318.9"},"notice":"GroundRules: Original legal text. Not legal advice."}