F:\M13\PITTS\PITTS_017.XML EGGrossman EGGrossman 1/3/2014 13:11 EGGrossman 01/02/2014 17:33 f:\VHLC\010314\010314.031.xml 01/03/2014 13:12:39 EGGrossman 1131-0102-836256 566400|3 [Discussion Draft] (Original Signature of Member) [DISCUSSION DRAFT]

I 113th CONGRESS 2d Session H. R. __ IN THE HOUSE OF REPRESENTATIVES Mr. Pitts introduced the following bill; which was referred to the Committee on ______________ A BILL To require notification of individuals of breaches of personally identifiable information through Exchanges under the Patient Protection and Affordable Care Act.

1.

Short title

This Act may be cited as the Health Exchange Security and Transparency Act of 2014.

2.

Notification of individuals of breaches of personally identifiable information through PPACA Exchanges

Not later than two business days after the discovery of a breach of security of any system maintained by an Exchange established under section 1311 or 1321 of the Patient Protection and Affordable Care Act (42 U.S.C. 18031, 18041) which is known to have resulted in personally identifiable information of an individual being stolen or unlawfully accessed, the Secretary of Health and Human Services shall provide notice of such breach to each such individual.