Washington, D.C. – Today Congressman Diane Black (R-TN-06) spoke on the House floor to highlight continued privacy concerns on Healthcare.gov. As Congressman Black noted in her remarks, the Obama Administration was recently found to have shared users’ personal data – including age, income, zip code, and smoking and pregnancy status – with numerous third party vendors.
Yesterday, Congressman Black and Congressman Patrick Meehan (R-PA-07) led a letter to the Centers for Medicare and Medicaid Services (CMS) and the Department of Health and Human Services (HHS) demanding answers regarding the Administration’s data-sharing practices. Reps. Black and Meehan also reintroduced the Federal Exchange Data Breach Notification Act of 2015, legislation requiring the government to notify affected users if their information is breached on the federal healthcare exchanges. Currently, there is no law requiring the federal government to issue these notifications, even though it is required in most state-based exchanges and in the private sector.
A transcript of Rep. Black’s remarks on the House floor are below, or click here for a video.
Mister Speaker, more than a year after its launch, Healthcare.gov remains just as flawed as the underlying Obamacare law itself. Most recently, we learned the Obama Administration was sharing users’ personal data with numerous third party vendors.
When the Administration was caught with their hand in the cookie jar, they quietly scaled this back but many unanswered questions remain. That is why I led a letter with Congressman Pat Meehan demanding answers regarding Healthcare.gov data security and privacy policies.
While we await their reply, we also reintroduced the Federal Exchange Data Breach Notification Act—legislation simply requiring the government to notify consumers if their personal information is breached on the healthcare exchanges.
It defies all logic that this basic requirement isn’t already law – it’s time we change that. I yield back.