{"data":{"id":"us/16-cfr-318.9","jurisdiction":"us","citation":"16 CFR 318.9","heading":"Sunset.","body":"If new legislation is enacted establishing requirements for notification in the case of a breach of security that apply to entities covered by this part, the provisions of this part shall not apply to breaches of security discovered on or after the effective date of regulations implementing such legislation.","path":["Title 16—Commercial Practices","CHAPTER I—FEDERAL TRADE COMMISSION","SUBCHAPTER C—REGULATIONS UNDER SPECIFIC ACTS OF CONGRESS","PART 318—HEALTH BREACH NOTIFICATION RULE"],"source_url":"https://www.ecfr.gov/api/versioner/v1/full/2026-08-25/title-16.xml","current_through":"2026-08-25","vintage":"","retrieved_at":"2026-08-27T02:24:29Z","sha256":"16007e9614a25b32ea8720e452b3739dc47c554935a405476890920ae58ef398","source_id":"us-cfr","stale":true,"prev":"us/16-cfr-318.8","next":"us/16-cfr-320.1"},"notice":"GroundRules: Original legal text. Not legal advice."}