diff --git a/ChangeLog b/ChangeLog
index bcd88ddde..e184c9670 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -101,6 +101,8 @@ Changes
 = mbed TLS 2.19.1 branch released 2019-09-16
 
 Features
+   * Declare include headers as PUBLIC to propagate to CMake project consumers
+     Contributed by Zachary J. Fields in PR #2949.
    * Add nss_keylog to ssl_client2 and ssl_server2, enabling easier analysis of
      TLS sessions with tools like Wireshark.
 
diff --git a/include/CMakeLists.txt b/include/CMakeLists.txt
index c2f2bd4e6..a3ee3e438 100644
--- a/include/CMakeLists.txt
+++ b/include/CMakeLists.txt
@@ -1,5 +1,11 @@
 option(INSTALL_MBEDTLS_HEADERS "Install mbed TLS headers." ON)
 
+# Declare include headers as PUBLIC to propogate to project consumers
+target_include_directories(
+    mbedtls
+    PUBLIC ${CMAKE_CURRENT_LIST_DIR}
+)
+
 if(INSTALL_MBEDTLS_HEADERS)
 
     file(GLOB headers "mbedtls/*.h")