The Department of Health and Human Services (HHS) has announced that it is withdrawing from Office of Management and Budget (OMB) consideration its final rule intended to govern breach notifications involving unsecured protected health information. HHS states that it intends to publish a final rule “in the coming months.” An interim final rule on this topic has been in effect since September 23, 2009.