Federal Exchange Data Breach Notification Act of 2015

Bill: 114-hr-555
Sponsor: full_name: Rep. Black, Diane [R-TN-6]
Introduced: 2015-01-27
Policy area: Health
Subjects: Comprehensive health care

Computer security and identity theft

Consumer affairs

Government information and archives

Health care costs and insurance

Health care coverage and access

Health information and medical records

Right of privacy
Latest action: action_date: 2015-01-30
text: Referred to the Subcommittee on Health.

Summaries:
action_date: 2015-01-27
action_desc: Introduced in House
text: <p><b>Federal Exchange Data Breach Notification Act of 2015</b></p> <p>This bill requires a health insurance exchange to notify each individual whose personal information is known to have been acquired or accessed as a result of a breach of security of any system maintained by the exchange as soon as possible but not later than 60 days after discovery of the breach. </p> <p>A violation of this requirement is an unfair or deceptive act or practice under the Federal Trade Commission Act.</p>

tv_txt: I 114th CONGRESS 1st Session H. R. 555 IN THE HOUSE OF REPRESENTATIVES January 27, 2015 Mrs. Black (for herself and Mr. Meehan ) introduced the following bill; which was referred to the Committee on Energy and Commerce A BILL To require an Exchange established under the Patient Protection and Affordable Care Act to notify individuals in the case that personal information of such individuals is known to have been acquired or accessed as a result of a breach of the security of any system maintained by the Exchange, and for other purposes.

1. Short title This Act may be cited as the Federal Exchange Data Breach Notification Act of 2015 . 2. Notification to individuals of personal information being acquired or accessed as a result of a breach of system security After the discovery of a breach of security of any system maintained by an Exchange established pursuant to section 1321(c) of the Patient Protection and Affordable Care Act ( Public Law 111–148 ), the Exchange shall, as soon as possible but in no instance later than the timeframe established under the requirements of the Health Breach Notification Rule issued by the Federal Trade Commission (16 C.F.R. 318), provide notice of such breach to each individual whose personal information (including any non health-related personal information) is known to have been acquired or accessed as a result of such breach of security. A violation of this section shall be treated as a violation of a rule defining an unfair or deceptive act or practice prescribed under section 18 of the Federal Trade Commission Act ( 15 U.S.C. 57a ).