16 CFR § 318.9 - Sunset.

---
identifier: "/us/cfr/t16/s318.9"
source: "ecfr"
legal_status: "authoritative_unofficial"
title: "16 CFR § 318.9 - Sunset."
title_number: 16
title_name: "Commercial Practices"
section_number: "318.9"
section_name: "Sunset."
chapter_name: "FEDERAL TRADE COMMISSION"
subchapter_number: "C"
subchapter_name: "REGULATIONS UNDER SPECIFIC ACTS OF CONGRESS"
part_number: "318"
part_name: "HEALTH BREACH NOTIFICATION RULE"
positive_law: false
currency: "2026-03-24"
last_updated: "2026-03-24"
format_version: "1.1.0"
generator: "[email protected]"
authority: "42 U.S.C. 17937 and 17953."
regulatory_source: "74 FR 42980, Aug. 25, 2009, as amended at 89 FR 47054, May 30, 2024, unless otherwise noted."
cfr_part: "318"
---


# 318.9 Sunset.

If new legislation is enacted establishing requirements for notification in the case of a breach of security that apply to entities covered by this part, the provisions of this part shall not apply to breaches of security discovered on or after the effective date of regulations implementing such legislation.