H. R. 3811
IN THE HOUSE OF REPRESENTATIVES
To require notification of individuals of breaches of personally identifiable information through Exchanges under the Patient Protection and Affordable Care Act.
This Act may be cited as the
Health Exchange Security and Transparency Act of 2014
Notification of individuals of breaches of personally identifiable information through PPACA Exchanges
Not later than two business days after the discovery of a breach of security of any system maintained by an Exchange established under section 1311 or 1321 of the Patient Protection and Affordable Care Act ( 42 U.S.C. 18031 , 18041) which is known to have resulted in personally identifiable information of an individual being stolen or unlawfully accessed, the Secretary of Health and Human Services shall provide notice of such breach to each such individual.
Passed the House of Representatives January 10, 2014.
Karen L. Haas,