Quote
Originally posted by: DonDiegoQuote
Originally posted by: loydthelover
What do they have in common?
You don't want to give either one your personal information!
Although poor old DonDiego cannot disagree with loydthelover's conclusion, there
is a difference.
In the event of a security breach Target and all other businesses are likely to inform their customers of the breach, because they are required by Federal Law to do.
Obamacare, . . . umm, not so much.
on March 27, 2012, at a meeting on the issue of data security for Obamacare two commenters asked Health and Human Services (HHS) to ensure the exchanges would promptly notify affected enrollees in the event of a data breach or unauthorized access to the exchange’s databases. One commenter suggested that a full investigation be launched each time such a breach occurred, with the goal of holding hackers legally and financially accountable for breaking into the website.
HHS responded: “We do not plan to include the specific notification procedures in the final rule. Consistent with this approach, we do not include specific policies for investigation of data breaches in this final rule.”
So the Government doesn’t have to tell you about a security breach unless it decides it wants to — despite the fact that private companies are required to publicly disclose any incidents. State laws also require many of the 14 state-run insurance exchanges to disclose such information, but no such law exists for the Federally run exchange, which 36 states rely upon.
Ref: National Review
