CARE Act of 2013

Bill: 113-hr-3847
Sponsor: full_name: Rep. Barber, Ron [D-AZ-2]
Introduced: 2014-01-10
Policy area: Health
Subjects: Administrative law and regulatory procedures

Comprehensive health care

Computer security and identity theft

Computers and information technology

Congressional oversight

Department of Health and Human Services

Government information and archives

Health care costs and insurance

Health care coverage and access

Health information and medical records

Internet and video services

Internet, web applications, social media
Latest action: action_date: 2014-01-17
text: Referred to the Subcommittee on Health.

Summaries:
action_date: 2014-01-10
action_desc: Introduced in House
text: <p>Cyber Awareness and Recovery Enhancement Act of 2013 or the CARE Act of 2013 - Directs the Secretary of Homeland Security (DHS) to develop and provide to the Secretary of Health and Human Services (HHS) risk-based, performance-based cybersecurity standards for the federal information technology requirements under the Patient Protection and Affordable Care Act, including the healthcare.gov website. </p> <p>Requires the HHS Secretary to: (1) adopt and implement such standards, and (2) submit an annual report to Congress regarding cyber incidents relating to such requirements.</p>

tv_txt: I 113th CONGRESS 2d Session H. R. 3847 IN THE HOUSE OF REPRESENTATIVES January 10, 2014 Mr. Barber (for himself, Mr. Daines , and Ms. Sinema ) introduced the following bill; which was referred to the Committee on Energy and Commerce , and in addition to the Committee on Oversight and Government Reform , for a period to be subsequently determined by the Speaker, in each case for consideration of such provisions as fall within the jurisdiction of the committee concerned A BILL To require the Secretary of Homeland Security the responsibility to develop and provide to the Secretary of Health and Human Services risk-based, performance-based cybersecurity standards for the Federal information technology requirements under the Patient Protection and Affordable Care Act, including the healthcare.gov website, and for other purposes.

1. Short title This Act may be cited as the Cyber Awareness and Recovery Enhancement Act of 2013 or the CARE Act of 2013 . 2. Cybersecurity for healthcare.gov website (a) In general Notwithstanding the requirements of the Federal Information Security Management Act of 2002 ( 44 U.S.C. 3531 et seq. ) or any other provision of law, not later than 90 days after the date of the enactment of this Act, the Secretary of Homeland Security shall develop and provide to the Secretary of Health and Human Services risk-based, performance-based cybersecurity standards for the Federal information technology requirements under the Patient Protection and Affordable Care Act ( Public Law 111–148 ), including the healthcare.gov website (or any successor website). Such standards shall be based on cybersecurity best practices, and on homeland security information that the Secretary of Homeland Security has collected, analyzed, and disseminated about cyber threats, vulnerabilities, and consequences. (b) Consultation In carrying out the cybersecurity standards described in subsection (a), the Secretary of Homeland Security shall consult with the Secretary of Health and Human Services. (c) Implementation and enforcement Not later than 90 days after receiving the cybersecurity standards described in subsection (a), the Secretary of Health and Human Services shall adopt and implement such cybersecurity standards. (d) Enforcement The Secretary of Health and Human Services shall submit to Congress an annual report on cyber incidents relating to the Federal information technology requirements under the Patient Protection and Affordable Care Act, including the healthcare.gov website (or any successor website).