,i  #aacth ,,congress  #ast ,session    
,h4 ,r4 #cgie  ,,in ,,the ,,house ,,of  
,,representatives  ,december #ai1       
#bjac,mr4 ,bilirakis introduced the     
following bill2 which was referred to   
the ,committee on ,energy and ,commerce 
,a ,,bill  ,to require notifications by 
the ,secretary of ,health and ,human    
,services to ,congress and to           
individuals of breaches of personally   
identifiable information of such        
individuals maintained1 submitted to1 or
 submitted by a system maintained by    
,exchanges under the ,patient           
,protection and ,affordable ,care ,act1 
and for other purposes4  #a4 ,short     
title ,this ,act may be cited as the    
,one ,hour ,notification ,act of #bjac  
and as the ,,oh ,no ,act of #bjac4  #b4 
,notification and annual report relating
 to breaches of personally identifiable 
information by ,,ppaca ,exchanges  7a7  
,notification of data breaches ,the     
,secretary of ,health and ,human        
,services1 following the discovery of a 

breach of the personally identifiable   
information of an individual that is    
maintained1 submitted to1 or submitted  
by a system maintained by an ,exchange  
established under title ,i of the       
,patient ,protection and ,affordable    
,care ,act 7,public ,law #aaa-adh71     
shall-- 7#a7 not more than one hour     
after the time at which the ,secretary  
is notified of such breach1 notify the  
individual that such information has    
been so breached2 and  7#b7 in a timely 
manner1 notify the ,committees on       
,energy and ,commerce1 ,ways and ,means1
 and ,education and ,workforce of the   
,house of ,representatives and the      
,committees on ,finance and ,health1    
,education1 ,labor1 and ,pensions of the
 ,senate that such information has been 
so breached4  7b7 ,annual report ,not   
later than ,january #a1 #bjae1 and each 
year thereafter1 the ,secretary of      
,health and ,human ,services shall      
submit to ,congress an annual report    
that identifies1 with respect to the    

breaches of security described in       
subsection 7a7-- 7#a7 all such breaches 
that occurred within the past year2 and 
7#b7 the security rules1 standards1 and 
risk mitigation strategies implemented  
by the ,secretary1 as of the date of the
 submission of such report1 for the     
purpose of preventing such breaches4