On the recordJanuary 10, 2014
Mr. Speaker, I yield myself such time as I may consume. Mr. Speaker, in the days leading up to Christmas, hackers stole millions of credit card numbers from the servers of retail giant Target. I imagine that at least a few here in this Chamber may have had their own credit cards replaced to prevent theft. What if Target had not bothered to tell anyone? What if they had waited until people noticed fraudulent charges popping up on their statements? The damage would certainly be worse. It may shock some people to learn that there is no legal requirement that the Department of Health and Human Services notify an individual if his or her personal information is breached or improperly accessed through the Affordable Care Act's exchanges. While HHS has said that it will notify individuals in such a case, the American people have a right to know that their government is required by law to contact them if their personal information is compromised. H.R. 3811, the Health Exchange Security and Transparency Act, would simply ensure Americans receive notification from HHS when their personally identifiable information has been compromised through the exchanges. Specifically, the bill requires HHS to notify individuals no later than two business days after discovery of a breach of an exchange system.…





