OH No Act of 2013

Bill: 113-hr-3795
Sponsor: full_name: Rep. Bilirakis, Gus M. [R-FL-12]
Introduced: 2013-12-19
Policy area: Health
Subjects: Comprehensive health care

Congressional oversight

Government information and archives

Health care costs and insurance

Health care coverage and access

Health information and medical records

Right of privacy
Latest action: action_date: 2013-12-20
text: Referred to the Subcommittee on Health.

Summaries:
action_date: 2013-12-19
action_desc: Introduced in House
text: <p>One Hour Notification Act of 2013 or the OH No Act of 2013 - Directs the Secretary of Health and Human Services (HHS), following the discovery of a breach of the personally identifiable information of an individual that is maintained, submitted to, or submitted by a system maintained by an American Health Benefit Exchange under the Patient Protection and Affordable Care Act, to notify: (1) such individual within one hour after the Secretary is notified of such breach, and (2) specified congressional committees about such breach in a timely manner.</p> <p>Requires the Secretary to report to Congress annually on: (1) all such breaches that occurred within the past year; and (2) the security rules, standards, and risk mitigation strategies implemented by the Secretary to prevent such breaches.</p>

tv_txt: I 113th CONGRESS 1st Session H. R. 3795 IN THE HOUSE OF REPRESENTATIVES December 19, 2013 Mr. Bilirakis introduced the following bill; which was referred to the Committee on Energy and Commerce A BILL To require notifications by the Secretary of Health and Human Services to Congress and to individuals of breaches of personally identifiable information of such individuals maintained, submitted to, or submitted by a system maintained by Exchanges under the Patient Protection and Affordable Care Act, and for other purposes.

1. Short title This Act may be cited as the One Hour Notification Act of 2013 and as the OH No Act of 2013 . 2. Notification and annual report relating to breaches of personally identifiable information by PPACA Exchanges (a) Notification of data breaches The Secretary of Health and Human Services, following the discovery of a breach of the personally identifiable information of an individual that is maintained, submitted to, or submitted by a system maintained by an Exchange established under title I of the Patient Protection and Affordable Care Act ( Public Law 111–148 ), shall— (1) not more than one hour after the time at which the Secretary is notified of such breach, notify the individual that such information has been so breached; and (2) in a timely manner, notify the Committees on Energy and Commerce, Ways and Means, and Education and Workforce of the House of Representatives and the Committees on Finance and Health, Education, Labor, and Pensions of the Senate that such information has been so breached. (b) Annual report Not later than January 1, 2015, and each year thereafter, the Secretary of Health and Human Services shall submit to Congress an annual report that identifies, with respect to the breaches of security described in subsection (a)— (1) all such breaches that occurred within the past year; and (2) the security rules, standards, and risk mitigation strategies implemented by the Secretary, as of the date of the submission of such report, for the purpose of preventing such breaches.