our citizens. one of your callers engine earlier the dred scott case, that the black man has no rights that the white man is bound to respect. the trayvon martin -- really, the george zimmerman case -- made some people feel like that, like african american lives don't mean as much as other people. host: we have been talking to paul butler, a law professor at georgetown, a graduate of yale and harvard. called "let's get free: a hip-hop theory of justice" and on booktv in about two or three weeks you will see a longer profile interview with professor butler airing on the network. watch for it on c-span2. the house is now in session. let us pray. loving and gracious god, we give you thanks for giving us another day.

we ask today that you bless the members of this assembly to be the best and most faithful servants of the people they serve. purify their intentions that they will say what they believe nd act consistently with their words. help them, indeed help us all to be honest with them selves so that they will be concerned not only with how their words and deeds are weighed by others, but also with how their words and deeds affect the lives of those in need and those who look to them for support, help, strength, and leadership. may all that is done this day in the people's house be for your greater honor and glory, amen. the speaker pro tempore: the chair has examined the journal of the last day's proceedings and announces to the house his approval thereof. pursuant to clause 1 of rule 1, the journal stands approved. the plenl pledge today will be led by the gentleman from washington, -- the pledge of

allegiance today will be led by the gentleman from washington. mr. kilmer: i pledge allegiance to the flag of the united states of america and to the republic for which it stands, one nation under god, indivisible, with liberty and justice for all. the speaker pro tempore: the speaker: the chair will entertain up to five requests for one minute speeches from each side of the aisle. for what purpose does the gentleman from colorado rise? >> i ask unanimous consent to address the house for one minute. revise and extend my remarks. the speaker pro tempore: without objection. mr. coffman: mr. speaker, this week i introduced legislation that will amend the affordable care act, better known as obamacare, to prohibit a bailout for the insurance industry that is currently authorized under section 1341 and section 1342 of the affordable care act. the american people have had enough of big bailouts for big business. it's time for this culture of corporate cronyism that has become a dominant part of washington, d.c., to stop.

my legislation, the no bailouts for the insurance industry act of 2014, would amend the affordable care act to repeal section 1341, the reinsurance part of section 1342, the risk corridor provision. together both can provide for a massive taxpayer bailout to cover the insurance industry losses. the taxpayers should not be on the hook for the failures of obamacare. any reasonable person can see that this scheme isn't going to bourque and the american people should -- isn't going to work and the american people should not be forced to bail it out once it fails. i urge the passage of the no bailouts for the insurance industry act of 2014. i yield back. the speaker pro tempore: the gentleman's time has expired. for what purpose does the gentleman from washington rise? >> i ask unanimous consent to address the house for one minute. the speaker pro tempore: without objection. mr. heck: thank you, mr.

speaker, i rise today to speak on the devastating loss of unemployment benefits for 1.3 million americans already, and 1.9 million more at risk of losing benefits if congress fails to act soon. i have heard from constituents across my region who will be impacted by this, including a veteran who's been unemployed for eight months, losing benefits will make it harder for him to complete the training program he's encontrolled in with the hopes of finding a new job. mr. kilmer: while our economy has made progress since the depths of recession, we still have too many people around this country struggling to find work. congress needs to get focused on job creation, but with drawing support to unemployed people as they seek work is no way to boost this economy. in fact, the council of economic advisors estimates that failing to extend unemployment benefits will cost my state, washington state, nearly 6,200 jobs. that's worth repeating, doing nothing will cost us jobs. for the sake of middle class families who lost their jobs through no fault of their own, through the sake of economic

recovery, we need to extend the emergency unemployment compensation program immediately. thank you, mr. speaker. i yield back the balance of my time. the speaker pro tempore: the gentleman's time has expired. for what purpose does the gentleman from texas rise? >> i ask unanimous consent to address the house for one minute. revise and extend my remarks. the speaker pro tempore: without objection. mr. poe: mr. speaker, this week i got a call from a concerned father in crosby, texas. his daughter's a single working mom with three young children, ages 3 through 13. she recently received bad news from her health insurance provider. she and her children would be dropped from their current plan. the new plan required under obamacare had a 40% more expensive freedom yum. as a result, she and her children had to move out of their home and in with her father and mother. she no longer can afford to make it on her own. the father said, quote, texans are suffering. it hurts us. she got a 40% increase in her premium payments while she's already struggling to make ends

meet. her policy was great before, but now it's gone. mr. speaker, this single working mom in texas is being punished under obamacare. the president sold obamacare to the american people on the false promise that if they like their plan they could keep it. now this single mother and her children and others are learning the hard way that this was just one more washington lie. that's just the way it is. i yield back. the speaker pro tempore: the gentleman's time has expired. for what purpose does the gentlelady from illinois rise? >> mr. speaker, i ask unanimous consent to address the house for one minute. the speaker pro tempore: without objection. >> during my first year in office, i have made it a priority to put politics aside and focus on working with both democrats and republicans. my goal is to find commonsense solutions that benefit the people of my region of illinois. i was encouraged to see both parties come together last month to pass a bipartisan deal that prevented another government shutdown, ease the harmful impact of

sequestration, and protected illinois jobs and the economy. but compromises are rarely perfect, than budget is no different. it's not perfect. that is why i helped to introduce the military retirement restoration act. mrs. bustos: it would repeal the military retiree cost of living adjustment included in the budget deal. this bill is fully paid for and would repeal those cuts to military retirees by closing unfair tax loopholes for offshore corporations. as someone who will always honor and support those who have given their lives in service to our country, i will continue to propose proposals that aim to balance our budgets on the backs of brave men and women who have served us. i urge democrats and republicans to join me in supporting this commonsense effort to ensure our military retirees get the benefits that they have earned and deserve. thank you, mr. speaker. i yield back. the speaker pro tempore: the gentlelady's time has expired. for what purpose does the gentleman from virginia rise? >> mr. speaker, i request unanimous consent to address the house for one minute. revise and extend my remarks. the speaker pro tempore: without objection.

>> mr. speaker, i rise today to express my support for the military exchange and commissary program. the defense commissary agency and the department of defense operates and efficient worldwide change of commissaries providing affordable groceries to military personnel and their families and retirees. mr. wittman: this benefit is critical for the men and women of the military and their families. it helps military personnel adequately provide for their families' nutrition and well-being. both here at home and across the globe. while our federal budget is under pressure, the benefits to our military personnel must not be targeted as a means to reduce our national debt. the exchange and commissary program is essential for retention, well-being, and our nation's milluary readiness. this is a vital service and i will continue to fight for these services to be preserved her -- here and especially

across the globe. this program is critical to our nation's military readiness and must be maintained. with that i yield back. the speaker pro tempore: the gentleman yields back the balance of his time. for what purpose does the gentleman from arizona rise? >> permission to address the house for one minute. the speaker pro tempore: without objection. mr. barber: thank you, mr. speaker. i believe we have a solemn duty to protect the privacy of all americans. i think all of us here believe that, too, and i'm committed to helping southern arizonans have access to the affordable care act through the healthcare.gov website and we must ensure that their personal and medical information is protected. that's why i'll be introducing the care act which will require that the department of homeland security develop the highest cybersecurity standards for healthcare.gov and for the department of health and human services to implement these standards within 90 days.

in a recent hearing in the committee on homeland security, we learned that too little has been done to protect the privacy of americans accessing the website. my constituents and the people across this country deserve to know that when they interact with this website that their personal information will be safe and secure, and that is what my bill ensures. i urge my colleagues, both democrats and republicans alike, to join me in support of this critical legislation. mr. speaker, i yield back. the speaker pro tempore: the gentleman's time has expired. for what purpose does the gentleman from georgia rise? >> mr. speaker, i request unanimous consent to address the house for one minute. revise and extend my remarks. the speaker pro tempore: without objection. mr. broun: thank you, mr. speaker. it nearly four years ago the president signed into law his massive takeover of our health care system. and now americans are seeing the lies and deceptions of obamacare. they deserve better. now more than ever they are

looking for a solution. fortunately there is a solution. it's h.r. 2900, my patient option act. the patient option act is the only health care bill that completely removes the government from the doctor-patient relationship. and puts patients back in charge of their health care decisions. it will make health insurance cheaper for everyone. it provides access to good quality care for all americans and it will save medicare from going broke. this week i am honored to announce that the american -- association of american physicians and surgeons has endorsed my patient option act with the support of associations like this and through the voice of we the people, we can work to put in place true conservative solutions like my patient option act. mr. speaker, i yield back. the speaker pro tempore: the gentleman's time has expired. for what purpose does the gentleman from florida rise. >> mr. speaker, i ask

permission to address the house and revise and extend. the speaker pro tempore: without objection. >> mr. speaker, although the recent budget compromise has given our economy a measure of stability, and we are all thankful for that, it did so at the cost of vital military benefits to our families. mr. garcia: the budget deal cut $6 billion by reducing crucial cost of living adjustments, colas, for thousands of veterans in south florida and across the country. this is a minuscule part of the federal deficit. less than .1%. but it makes a huge difference for those who have given so much. cost of living adjustments help seniors and veterans keep up with the rising cost and the basic needs like groceries and clothing. there are a lot of places to

cut the federal deficit. a lot of places. but it shouldn't be in aiding those men and women who sacrificed so much. that's why i co-sponsored legislation to repeal this cut and i urge my colleagues to join me in support of our nation's heroes. i yield back the balance of my time. the speaker pro tempore: for what purpose does the gentleman from pennsylvania rise? >> to address the house for one minute. revise and extend. the speaker pro tempore: without objection. mr. pitts: mr. speaker, it has been more than 50 years since president johnson declared war on poverty. i don't doubt that president johnson had good intentions, but intentions don't win wars. and poverty is a stubborn problem. 15% of americans still live below the poverty line after trillions spent by the government. in december i brought together community leaders and national experts to discuss how we can reinvigorate the city of reading and other cities in the

16th district of pennsylvania. we are moving forward to get institutions to work together strategic gliically and think differently about attacking the problem. government at every level and community leaders need to cooperate and make sure there are opportunities to start new businesses and attract more development. perhaps most importantly we need senator strategics to help -- smart strategies to help kids get a good education. this has to include building strong families. since statistics show that children raised by only one parent are far more susceptible to drugs, gangs, and other problems. it's time we rethought our strategy, we red kate ourselves to truly helping needy persons bye removing barriers to wealth creation. the speaker pro tempore: the gentleman's time has expired. for what purpose does the gentleman from california rise? >> mr. speaker, i ask unanimous consent to address the house for one minute. revise and extend my remarks. the speaker pro tempore: without objection. >> mr. speaker, i rise today to urge my colleagues to extend the critical unemployment

insurance lifeline to the 1.3 million americans who have already lost coverage. tragically another 1.9 million americans are set to lose benefits over the first six months of this year if we do not act. in california alone, over 214,000 people have already lost their unemployment coverage, including 19,000 people in it an deo county. mr. vargas: approximately 326,000 more californians stand to lose their coverage in the first six months of 2014. with unemployment unacceptably high, now is not the time to take money out of the pockets from those struggling. for jobless americans, unemployment insurance is used for basic lifeline needs like food and shelter. let's do the right thing. mr. speaker, i yield back. thank you very much. . the speaker pro tempore: the gentleman yields back.

for what purpose does the gentleman from pennsylvania seek recognition? mr. pitts: mr. speaker, i ask unanimous consent that all members may have five legislative days to revise and extend their remarks and to include extraneous material on h.r. 3811. the speaker pro tempore: without objection, so ordered. mr. pitts: mr. speaker, pursuant to house resolution 455, i call up h.r. 3811 and ask for its immediate consideration in the house. the speaker pro tempore: the clerk will report the title of the bill. the clerk: h.r. 3811, a bill to require notification of individuals of breaches of personally identifiable information through exchanges

under the patient protection and affordable care act. the speaker pro tempore: pursuant to house resolution 455, the bill is considered as read. the gentleman from pennsylvania, mr. pitts, and the gentleman from new jersey, mr. pallone, will each control 30 minutes. the chair recognizes the gentleman from pennsylvania. mr. pitts: mr. speaker, i yield myself such time as i may consume. the speaker pro tempore: the gentleman is recognized for as much time as he may consume. mr. pitts: mr. speaker, in the days leading up to christmas, hackers stole millions of credit card numbers from the servers of retail giant target. i imagine at least a few here in this chamber may have had their own credit card replaced to prevent theft. what if target had not bothered to tell anyone? what if they had waited until people noticed fraudulent charges popping up on their statements? the damage would certainly be worse. it may shock some people to learn that there is no legal requirement that the department

of health and human services notify an individual if his or her personal information is breached or improperly accessed through the affordable care act's exchanges. while h.h.s. has said it will notify individuals in such a case, the american people have a right to know that their government is required by law to contact them if their personal information is compromised. h.r. 3811, the health exchange security and transparency act, would simply ensure americans receive notification from h.h.s. when their personally identifiable information has been compromised through the exchanges. specifically, the bill requires h.h.s. to notify individuals no later than two business days after discovery of a breach of an exchange system. since the disastrous rollout of

the healthcare.gov website, connelly oversight has uncovered -- congressionally oversight has uncovered that this did not occur before the october 1 launch and that high-ranking administration officials were told of the security risk before the website went live. eresa fryer, the chief information security officer running the exchange system even stated in a draft memo that the federal exchange, quote, does not reasonably meet security requirements and there is also no confidence that personal identifiable information will be protected, end quote. a recent article in "information week" entitled "2014 data breach industry forecast," which stated that,

quote, the health care industry by far will be the most susceptible to publicly disclosed and widely scrutinized data breaches in 2014. according to "information week," the author of the study said he's basing this prediction at least partly on reports of security risks posted by the healthcare.gov website, and the health insurance exchanges established by various states. the web infrastructure, to support health insurance reform, was, quote, put together too quickly and haphazardly, end quote. the most glaring problem for these sites has been their inability to keep up with consumer demand. the organizational infrastructure behind the implementation of obamacare is also complex, meaning that many parties have access to the personal data and could misuse or mishandle it. quote, so we have volume issues, security issues,

multiple data handling points, all generally not good things for protecting protected health information and personal identity information, end quote. given the lack of security testing and the risks associated with healthcare.gov and the administration's repeated misrepresentation of the website's readiness and functionality, h.r. 3811 is a reasonable step to ensure federal officials are required to notify individuals in case of a breach. thank you and i reserve the balance of my time. the speaker pro tempore: the gentleman reserves. the gentleman from new jersey is recognized. mr. pallone: thank you, mr. speaker. i yield myself such time as i may consume. the speaker pro tempore: the gentleman is recognized for as much time as he may consume. mr. pallone: thank you. first of all, mr. speaker, i want to point out that republicans are using out-of-context quotes from an administration or from administration officials to mislead the public about the security of healthcare.gov, the

website. the same official they keep quoting went on to say, and i quote, the added protections we have put into place are best practices above and beyond what is usually recommended. and no website is 100% secure, but this effort to scare people from signing up for coverage is simply wrong. mr. speaker, i'm afraid the bill before the house today is simply an effort by republicans to continue to impede the efforts of implementing the affordable care act by instilling misinformation and fear in the american public. it's an egregious bill that me d, in my opinion, -- let point this out, mr. speaker. yesterday i was in the rules committee, and i pointed out that to some extent i was pleased, i guess, that i don't see the republicans actually coming to the floor today to act on another repeal or outright repeal of the affordable care act. i mean, we're not seeing that we didn't see it in rules, and

hopefully, i'll say to my colleague, the chairman of the health subcommittee, that we don't see it again either in the committee, in rules or on the floor. so maybe there's some progress here and at least the republicans are not out there trying to repeal the affordable care act anymore. at least i hope so. but they're now moving to these other methods of trying to put fear into the public so they don't sign up or they don't go on the website, and the fact of the matter is these security measures that they're talking about are addressing a reality that's not there. do i think security measures are critical for the website? yes, absolutely. but let's recap the last few years since the a.c.a. passed. republicans claim the a.c.a. kills job. since the law has passed, we've added nearly eight million jobs. republicans claim that the a.c.a. causes health costs to increase. but the last four years we've seen the slowest health care cost growth in 50 years. republicans claim we need to

address the deficit, but yet they repeal the law at every turn which increases the deficit by over $1.5 trillion. and now -- now they say that healthcare.gov is going to result in widespread breaches of people's information and that's simply not true. there has been no security breach on healthcare.gov and no one has accessed personal information. no website, public or private, is 100% secure, but healthcare.gov is subject to district security standards. it's constantly monitored and tests and its security and privacy protections go beyond federal i.t. standards tds. and the health and human services has standards in place just like every government agency to notify individuals if their personal information is breached. so, mr. speaker, it's important that i note for everyone that house democrats are always previously supported legislation to require consumer notification in the event of a breach of government and private sector computer

systems. we still do. by expressing concern for the mockery of this bill, it does not mean that i don't support requiring the administration of notifying individuals of breaches of their information, but this is not a serious effort to strengthen privacy laws or to strengthen the health care website. it is to scare people away from going to the website and signing up for health care, and i urge members and the american public, do not be fooled by what they're doing. it's a good thing they're not seeking to outright repeal the affordable care act anymore. at least that appears to be the case based on what happened in rules the other night. but that doesn't mean that they're not going to continue with these efforts to try to make hey over security and other matters. you know, i can't stress enough that every one of the scare tactics they use, whether they're saying that the a.c.a. is going to increase the deficit, which it doesn't.

it actually decreases the deficit. or whether they say it will increase health costs. it actually decreases health costs. this is just another one of those scare tactics. i just hope my colleagues, both democrats and republicans, are not fooled by this. so i reserve the balance of my time, mr. speaker. the speaker pro tempore: the gentleman from new jersey reserves. the gentleman from pennsylvania. mr. pitts: mr. speaker, at this time i'm pleased to yield two minutes to the distinguished chairman of the oversight and government reform committee, mr. issa from california. the speaker pro tempore: the gentleman from california is recognized for two minutes. mr. issa: thank you, mr. speaker. famously franklin delano roosevelt we have nothing to fear but fear itself. that's not true here, and sadly the last speaker is entitled to his opinion but the facts did not bear out his conclusions. the truth is that actual interviews and depositions taken of the highest ranking people that helped develop this website, both public and

private, shows there was no end-to-end testing. it did not meet the spirit of any definition of a secure website. in fact, the highest ranking person, theresa fryer, on september 20, was unwilling to recommend this site go active and said under oath that if it had been within her authority to stop it she would have. it is very clear, even from the white house's statements in the last few days, that they claim to have mitigated or have a plan to mitigate significant security risk. the american people need to understand a plan to mitigate means they have not mitigated security risk. this is the situation we're in in which no private sector company, including target, would go live with a system that has known failures and

unknown failures because of a failure to do end-to-end. all we're asking for is since secretary sebelius, under oath, has been wrong under multiple occasions and i called for her to make clear that she made false statements, the fact is what we need is a law that makes it clear they should do the right thing, not say they have always done the right thing and they will do the right thing because in the case of healthcare defensive.gov, they -- healthcare.gov, they had not done security tests and there were not mitigated. that's the facts, mr. speaker. and i ask support for this bill. the speaker pro tempore: the gentleman from pennsylvania reserves. the gentleman from new jersey. mr. pallone: mr. speaker, i yield three minutes to the gentlewoman from colorado, ms. degette. the speaker pro tempore: the gentlewoman from colorado is recognized for three minutes. ms. degette: thank you, mr.

speaker. some mornings in congress i wake up and i say, now here's a solution in search of a problem and this morning is one of those days. we're hearing about how the website's not secure, how there can be security breaches. ironically, we're hearing about security breaches with a private company, target, and how terrible it is and that's why we have to do a bill, but in fact we haven't seen any security breaches with healthcare.gov or the websites around the affordable care act. and i want to stress that. i'm the ranking democrat on the oversight and investigation subcommittee of energy and commerce, and we've had a number of hearings and we've had classified briefings. and here's some information that is not classified information. there has been not one successful hack into healthcare.gov. let me say that again. nobody has successfully been

able to breach healthcare.gov. furthermore, as we recently learned in a briefing, healthcare.gov, interestingly, has not been targeted any more than any other federal website for hackers. so why are we doing this bill? i got to associate myself with my ranking member's comments, mr. pallone, that the only reason we could be doing this bill is to try to have a chilling effect against people signing up to get health insurance through the website. and sloat me say again, there have been no successful breaches -- and so let me say again, there have been no successful breaches of healthcare.gov. if we wanted to do a bill to strengthen privacy, i would do that. i think that is one of the most important things we can do. but if you look at the details of this bill, there's nothing here that furthers consumer notification or consumer privacy.

first of all, there's no exemption or consideration of law enforcement. what if law enforcement found a potential breach and needed to investigate it? what if they needed more than 48 hours to make sure that in fact there was a breach before they notified people? consider the harm that would occur if law enforcement did not have enough time and resources to fully investigate a security breach before it went public. the consequences of incorrect notification could make the problem worse. secondly, based on how the bill is drafted, if there is a data breach in this state that's chosen to run its own exchange, like my home state of colorado, h.h.s. seems to bear an unnecessary burden of reporting the breach in the state exchange having nothing to do with the federal exchange. might i remind my colleagues, state exchanges are entirely independent from healthcare.gov. h.h.s. does not rupp them.

h.h.s. did not build their website. and h.h.s. did not develop their security protocols. so why should h.h.s. have to get involved in these state agencies? i ask for an additional minute, mr. chairman. mr. pallone: i yield an additional minute. the speaker pro tempore: the gentlelady is recognized. ms. degette: securities for these state exchanges should be the responsibility of the states that are running them. i could go on and on. there are more problems with this bill than pages in the bill. so let's get real. instead of bringing legislation like this to the floor without any committee action, why can't we sit down together in a bipartisan way and improve the way the affordable care act works for our constituents? that's what our constituents want. they want affordable health insurance. they want health care. and they don't want unwarranted scare tactics and attacks. let's sit down. let's work together. let's fix this legislation and let's get real.

i yield back. the speaker pro tempore: the gentlelady yields back. the gentleman from new jersey reserves. the gentleman from pennsylvania. mr. pitts: mr. speaker, i'm pleased at this time to yield two minutes to the distinguished gentlelady from tennessee, mrs. black, who is an expert on this issue. the speaker pro tempore: the gentlelady from tennessee is recognized for two minutes. mrs. black: thank you, mr. speaker. i rise today in support of this legislation to provide basic diligence to the federal obamacare exchange. if someone's personal information has been breached, the federal government should be accountable and be required to notify them so they can protect themselves from either identity theft or cyberthreats. this is common sense. as notification is required on most of the state exchanges, and there are laws that require information that has been breached by private businesses to notify people as well. yet when h.h.s. was asked to insert notification provisions

into the time rule for obamacare, they specifically declined to do so. this is an astonishing failure on the part of the administration but sadly characteristic how they have proceeded at every turn with the implementation of this train wreck legislation. healthcare.gov has been described by this former social security administrator as a hacker's dream. last month h.h.s. reported that there had been 32 security incidences since its launch. the federal exchange foningsly puts at risk americans' names, addresses, phone numbers, dates of birth, email addresses, and even social security numbers. last month i introduced similar data breach notification legislation and i'm pleased to join my house colleagues now to pass this important bill. mr. speaker, i can't imagine explaining to my constituents that i voted against this commonsense measure to protect the hardworking americans from identity theft and

cyberattacks. this is why i urge my colleagues to support this bill. i yield back the balance of my time. the speaker pro tempore: the gentlelady yields back. the gentleman from pennsylvania reserves. the gentleman from new jersey. mr. pallone: mr. speaker, i yield three minutes to the ranking member of the house committee on oversight and government reform, the gentleman from maryland, mr. cummings. the speaker pro tempore: the gentleman from maryland is recognized for three minutes. mr. cummings: thank you very much, mr. speaker. i thank the distinguished gentleman from new jersey for yielding. i'd like to make two very, very simple points. first, the affordable care act is working. hello? it is working. it went into full effect, if you didn't know, on january 1, and now millions, millions of people are getting health insurance they did not have before. imagine what this means to families. not only are they receiving critical medical care, but they have the security of knowing

they will not go bankrupt if they get into an accident or they get sick. that's major. the law put in place key protections for consumers. insurance companies are now prohibited from discriminating against people with cancer, diabetes, or other pre-existing conditions. and some young people in my district said, well, congressman, i'm not worried about pre-existing conditions. i told them you keep on living. they may not charge high prices for women. and millions of people are now eceiving free preventive care. there are also huge financial benefits. health insurance companies are sending rebate checks to millions of people. since the law was passed we have seen the lowest growth in health care costs in 50 years.

if we repeal the law today, it would increase our deficit by more than $1.5 trillion. despite all of these results, republicans are still obsessed with killing the law. since they do not do it legislatively, they have shifted to a different tactic. scaring people away from the website. so my second point is this. there have been no successful of ity breaches healthcare.gov. let me say that again, there have been no successful security breaches of healthcare.gov. nobody's personal information has been hacked. all week republicans have been trying to make their case for

this bill by quote interesting a memo drafted by the chief information security officer at c.m.s. about concerns before the website was launched. but they omit one critical fact. this official never sent the memo. it was a draft. and she never gave it to anyone, including her own supervisor. how do we know this? because she was interviewed by the oversight committee, both republican and democratic staff, weeks ago -- one more minute? mr. pallone: i yield an additional minute. the speaker pro tempore: the gentleman is recognized. mr. cummings: and she told us this herself. her draft memo did not take into account mitigation strategies put in place days that follow. importantly, she also told the committee she is satisfied with the security testing being conducted. when asked to describe the security measures now in place, she called them, and i quote,

and i quote, best practices above and beyond what is usually recommended, end of quote. these are important facts for the american people to know. but the republicans disregard them and omit them because they want to undermine the claims. many of us would support efforts to threaten requirements for the entire federal government and private sector to notify consumers of breaches, but today's bill does not do that. today's bill is the latest attempt to attack the affordable care act and deprive millions of americans of health care they deserve. with that, mr. speaker, i yield back. the speaker pro tempore: the gentleman's time has expired. the gentleman from new jersey. testimony the gentleman from pennsylvania. mr. pitts: i'm pleased to yield one minute to the distinguished whip of the house, kevin mccarthy of california. the speaker pro tempore: the gentleman from california is recognized for one minute. mr. mccarthy: i rise today in support of the health exchange security and transparency act.

the reason why we are passing this important legislation today is that credible and documented fears have been raised that this hastily constructed obamacare exchange website could jeopardize the security of our most sensitive personal information. one of the many reasons so many worry about obamacare is that it injects government, and government bureaucrats, into the most personal sphere of our lives -- our health care. in new an alarming ways. nothing can turn a life upside-down more quickly than identity theft. it is our duty as members of congress to do everything in our power to protect and inform americans about these potential devastating events. i'm confident that this new -- that this is one of the law's most negative consequence that is both sides of the aisle can come together an agree must be addressed. absent this full repeal instilling this type of transparency and accountability into obamacare is a worthy

first stefment i urge my democratic friends to join with us today. i yield back the balance of my time. the speaker pro tempore: the gentleman's time has expired. the gentleman from pennsylvania reserves. the gentleman from new jersey. mr. pallone: mr. speaker, i yield myself such time as i may consume. the speaker pro tempore: the gentleman is recognized for as much time as he may consume. mr. pallone: mr. speaker, republicans continue to attack the website, healthcare.gov, and this attack on the security of the website is the latest in a long line of scare tactics attempting to limit enrollment and coverage under the a.c.a. it just bothers me so much because as you know now we have, i think, about six million people who have obtained coverage. 2.1 private insurance through the website. and things really are moving now in terms of more and more people signing up and getting coverage. i just wish that rather than use these scare tactics and try to talk about security concerns that don't exist that they would focus and work with us and actually trying to sign people up and get people to

have health insurance, which is the goal of the affordable care act. the bill suggests that there are serious security problems at healthcare.gov. but by establishing this unique requirement, which doesn't apply to other government websites or private workplace, and h.h.s. is required to notify individuals within two business days if their personal information is known to be stolen or unlawfully accessed from a marketplace computer system. if this is a good idea, why is the g.o.p. bill limiting this requirement to only marketplace websites? it's just a missed opportunity. democrats firmly support strong data security and breach notification legislation. if the republicans were serious about the security of personally identical identification on the web, instead of bringing up this bill, they could have reached out to democrats and developed a bipartisan bill. indeed, when democrats were in the majority the democrat-run

house passed bipartisan legislation to provide for consumer notification in the event of a breach was introduced in the previous congress, and the republicans are still playing political games. if they want to work with us to bring to the floor a serious bipartisan data security breach notification legislation, then they should simply do it. and the rules committee the other, one of the members asked on the republican side if the administration has a position on the bill. and the administration clearly opposes the bill. they put out an s.a.p. which states that the administration believes personally identical information should be protected wherever it resides and that all americans deserve to know if that information has been improperly exposed. the federal government has already put in place an effective and efeshent system r securing personally -- system for securing personal information. i wish i could convince my colleagues. again i'm happy this is not an

outright repeal and not wasting time on that, but we are still wasting time with this notion of the security breach that hasn't happened when secure measures are already in place. and again this is being brought up in the first week. no effort to reach out to us in any way to try to deal with it. it has a two-day notification requirement which is simply not workable. i cannot stress enough that we as democrats would like to address this issue, but it's not being addressed. it's just being done as a way of trying to fuel -- scare the public into signing on the website. which is so unfortunate because people want to sign up. they shouldn't be in fear if they sign up somehow there's going to be a security breach. i reserve the balance of my time. the speaker pro tempore: the gentleman from new jersey reserves. the gentleman from pennsylvania. mr. pitts: mr. speaker, at this time i'm pleased to yield four minutes to a distinguished member of the health subcommittee, mr. bilirakis from florida. the speaker pro tempore: the gentleman from florida is recognized for four minutes. mr. bilirakis: thank you, mr. speaker, thank you, mr. chairman. mr. speaker, i rise today in support of the health exchange

security and transparency act. i'm pleased to be an original co-sponsor of this legislation. i'm glad we are addressing this very important issue on the house floor today. each day i hear from constituents in florida's 12th congressional district who are experiencing the negative impacts of obamacare. contrary to the very promises the law was sold on, my constituents have lost their health care coverage, have seen their premiums rise, and were forced to choose new doctors. the president's signature law was never really ready for primetime. the energy and commerce committee, which i am a member of, has held numerous hearings into the failed website and the lack of testing that occurred to ensure the website was properly secured. in these hearings, we have learned that 30% to 40% of the

website isn't built. end-to-end security testing wasn't performed. c.m.s.'s own chief security information officer recommended against an authority to operate because of cybersecurity concerns. her memo even stated there is no confidence that personal identifiable information will be protected, and it was the administer of c.m.s., not the chief information officer, to sign off on the a.t.o. mr. speaker, does this sound like a safe and secure website? millions of americans were forced to sign up for the exchanges in order to avoid individual mandate fines, and now each of these individuals, including myself and many in this chamber, are potential victims of identity theft. while privacy in the health care realm is typically protected by hipaa, it does not

apply to h.h.s. or the federally run exchanges. furthermore, data notification is critical to maintaining security, and individuals should be notified when their personal information could be compromised. yet, in the final rules, h.h.s. published in august it did not finalize a data breach notification rule. instead it stated it is up to c.m.s. to determine whether a risk of harm exists and if individuals need to be notified. a government bureaucrat, mr. speaker, should not be given the power to determine whether the loss of personally identifiable information constitutes harm. we do not know how many breaches have occurred on healthcare.gov. whether due to the accidental sharing of information or otherwise, because there is currently no public disclosure requirement. the health care exchanges

security and trarns parentsy act will bring transparency to the administration and the health care exchanges. i strongly urge my colleagues in the house to support this bill today, and i urge all, of course, our colleagues in the senate to swiftly take up this bill so that we may pass it into law. i thank you, mr. speaker, and i yield back. the speaker pro tempore: scombrafment florida yields back. the gentleman from -- the gentleman from florida yields back. the gentleman from pennsylvania reserves. the gentleman from new jersey is recognized. mr. pallone: thank you, mr. speaker. i yield such time as he may consume to the ranking member of the energy and commerce committee, mr. waxman. the speaker pro tempore: the gentleman from california is recognized for as much time as he may consume. mr. waxman: thank you very much, mr. speaker. the previous speaker in this debate said we don't know how many times there was a breach of security on the health care website. well, we do know how many breaches of security there were, how many successful attacks there were. zero. there have been no successful

breaches of healthcare.gov. mr. speaker, since october 1, more than six million americans signed up for health insurance. six million. four million are enrolled in medicaid, two million in private coverage. anyway you look at it, that's good news. now, republicans seem eager to find some bad news. they want to keep talking about website problems and stir up phony fears that personal information is not secure on this site. they're looking for the bad news because the facts are against them. republicans said the affordable care act would kill jobs. we hear it over and over again. kill jobs. but since the law was passed, we have added nearly eight million jobs. republicans said this law would cause health care costs to skyrocket, but we've had four

straight years of the slowest health care cost growth in 50 years. republicans said the a.c.a. would explode the deficit, but repealing the law, which they tried to do over 40 times on this floor, would increase the deficit by over $1.5 trillion. so today house republicans are resorting to scare tactics. they're bringing up a poorly thought out bill based on false premise that healthcare.gov is not secure. he truth is, i'll say it again, there have been no successful security attacks on healthcare.gov. now, while no site, public or private, is 100% secure, healthcare.gov is subject to strict security standards. it's constantly monitored and tested. it has procedures in place to notify consumers in the event of a breach. we can't say the same thing for

private websites. we all heard about target having their website atacked successfully. no one's asking that they make disclosures. and in fact, mr. speaker, this is not a serious attempt to address this issue because it doesn't set any standards on private insurance companies. private insurance companies hold far more private data than the exchanges. mr. speaker, as chairman i worked on bipartisan legislation to set tough data privacy and security standards on government and private sector computer systems. house democrats have supported these efforts, but this bill is not serious. did you know this bill was never even considered in committee? it doesn't allow for any delay in reporting to protect ongoing law enforcement investigations. the bill creates a host of

technical and administrative problems. this is purely a message bill. that's all we do these days. in between recesses we have message bills on the floor of the house, and we get nothing done. this is purely a message bill, and the message is one that is designed to mislead. i urge a no vote. the speaker pro tempore: the gentleman yields back. the gentleman from new jersey reserves. the gentleman from pennsylvania. mr. pitts: mr. speaker, at this time i'm pleased to yield one minute to our distinguished majority leader, eric cantor of virginia. the speaker pro tempore: the gentleman from virginia is recognized. mr. cantor: i thank the speaker and i thank the gentleman from pennsylvania. mr. speaker, i want to rise in support of the health exchange security and transparency act, and if i could just take a few seconds to respond to the allegations put forward by the gentleman from california, the ranking member on the energy and commerce committee. i want to just make a point,

mr. speaker. there is a real difference between users of a retailer's website and users of healthcare.gov. because those who choose to go on a website of a retailer in the private sector do so at their choice. the people of this country, all of the american people now, if they go to healthcare.gov, they are being forced to go to healthcare.gov. and so for the gentleman to sit here and say, well, we don't require this, that or the other of industries or banks or anything else, which i would beg to differ there are certainly requirements in law and duties owed by banks to their shareholders, customers and the rest, but i would say to the gentleman, this is a situation where the law at hand is requiring individuals,

mandating them to go to this site. and so contrary to the allegations made by the gentleman, what this bill does is it just asks the administration, it requires it o provide 48 hours' notice within a breach of health care information, financial data. all it says is, the administration has to let victims of identity theft or information theft to be notified. that's it. this is a good government bill. why do we want to wait until there is a data breach? you know, i would ask the gentleman to look to a quote by c.m.s.'s own chief information security officer, teresa fryer. she said, quote, the health care industry by far -- excuse

me. she said the federal exchange does not reasonably meet security requirements. that's what the chief cybersecurity officer at the agency says. the exchange does not meet security requirements. now, the expeerian credit bureau said the -- experian credit bureau said it would be he widely scrutinized security breaches of 2014. if we know this, why wouldn't we take precautions to help people? that's all this bill does. it says if there is a risk of data breach, we should afford people opportunity to take corrective action immediately. that's it. there's no message in there this is just trying to help people. so i would say to the gentleman, if he would just set aside the partisan attacks for once, let's help people.

let's go about the way we should be and putting people first here. we disagree on this law and requiring health care the way government says we should require, yes, but i think we can all agree we want to help people and we want to make sure that they can keep their information safe. that's all this bill is about. so i want to thank chairman fred upton, chairman joe pitts and the members serving on the committees who've been conducting oversight on the issue for the past year, including the science committee, the homeland security and the oversight and government reform committees. congresswoman diane black, certainly the gentleman from florida, gus bilirakis, and representative kerry bentivolio have all worked hard on this issue. i commend them for their efforts to just help people for once, and with that i urge adoption and passage of the bill and i yield back. the speaker pro tempore: the gentleman yields back. the gentleman from pennsylvania

reserves. the gentleman from new jersey is now recognized. mr. pallone: mr. speaker, i yield such time as he may consume to mr. waxman. the speaker pro tempore: the gentleman is recognized for as .uch time a as he may consume mr. waxman: mr. speaker, i won't take that much time. i'll respond to the comments. no one is forced to go on this website. they could go to brokers. but once you sign up for insurance, whether it's public or private, your information is in their web. it's in their computer system. and that is true for private insurance. does this bill do anything about breaches of private insurance? no. now, the majority leader used a quote from someone in the administration i think to mislead the public about the security of the healthcare.gov, but that same official -- the same official said, at the end of the quote, the added

protections we put into place are best practices above and beyond what is usually recommended. no website is 100% secure, but this effort to scare people from signing up for coverage is wrong. if we do care about breaches and security, it ought to apply to private and public insurance, not just when you sign up but when they hold your data. thank you. i yield back. the speaker pro tempore: the gentleman yields back. the gentleman from new jersey reserves. the gentleman from pennsylvania is recognized. mr. pitts: mr. speaker, at this time i'm pleased to yield three minutes to the distinguished chairman of the energy and commerce committee, the gentleman from michigan, mr. upton. the speaker pro tempore: the gentleman from michigan is recognized for three minutes. mr. upton: thank you, mr. speaker. i rise in strong support of this legislation, h.r. 3811, the health exchange security 2014. nsparency act of security and transparency, both are critically important to every american. and the public expects and deserves to have them both when it comes to health care.

sadly i believe that the administration has failed to deliver. this important bill seeks to provide peace of mind to folks in michigan and across the country who submitted personal information to a federal health insurance exchange. americans have the right to know in the event that their sensitive personal information provided to an exchange is compromised, especially as it is the law's individual mandate that forces them to purchase the government-approved health care coverage. why wouldn't we want the public to know and be alerted right away? just this morning on cnbc, breaking news, c.e.o. of target apparently is indicating as many as 70 million americans, their customers may have had their private information stolen. would it have been right for target just to sit on that information or was it appropriate for them to try and put the word out so they at least the consumers have the

right information? let me tell you what this bill does. it's a commonsense bill. it's going to require that the administration, that they promptly inform individuals within two business days if their personal information has been stolen or unlawfully accessed through an exchange. . and the thoughtful oversight we have uncovered troubling information regarding the security of the health law's exchanges. so what this bill does is preventive medicine. do we want to wait until the horse is out of the barn before we take action? i don't think so. we found that the administration did not perform a full security control assessment before healthcare.gov opened for business on october 1. we also learned just days before healthcare.gov went live, senior officials at h.h.s. expressed serious concerns regarding the protection of personally identifiable information that was entered into their website.

these facts on top of the fact that the administration is repeatedly misrepresented the functionality and the readiness the health care law raise significant questions regarding the security of healthcare.gov and the information available in the exchanges. a few weeks ago the administration is willing to let millions of americans lose their health insurance despite the president's solemn promise that they could keep their health plan if they liked it. and it took the house acting in a bipartisan legislative manner for the administration to confess that, yes, it had broken their promise. now the administration is saying that it opposes this requirement. that it notify americans when personal information is stolen. the self-proclaimed most transparent -- could i have an additional 30 seconds? mr. pitts: an additional 30 seconds. joip the gentleman is recognized. mr. upton: so the self-proclaim, most transparent administration in history has come out against transparency.

i'm sorry. republicans and democrats may disagree on the merits of the president's health care law, and we do, but i think that we should all agree that americans deserve to be notified if that personal information is put at risk by the law. i want to thank chairman pitts for putting security and transparency above politics. and i urge my colleagues in a bipartisan way to support this bill this morning. i yield back the balance of my time. the speaker pro tempore: the gentleman's time has expired. the gentleman from pennsylvania reserves. the gentleman from new jersey is recognized. mr. pallone: thank you, mr. speaker. i yield two minutes to the vice chair of the democratic caucus, the gentleman from new york, mr. crowley. the speaker pro tempore: the gentleman is recognized for two minutes. mr. crowley: i thank my friend from new jersey for yielding he time. it's a shame that we are here once again wasting time on legislation like this. it doesn't even solve the

issues the republicans claim they are trying to address. the truth is the bill we are considering today is far from a productive answer to anything. it's just yet another scare tactic to discourage people from obtaining health care. that's right. here's a news flash for you, the republicans want to stop people from obtaining health care. i don't know why we should expect anything less or anything else from a party with such little vision. instead of creating opportunity, they become the party that shuts things down. they shut down the government. they shut down unemployment insurance. for people who are desperately trying to find work. they tried preetedly to shut down the affordable care act. as -- repeatedly to shut down the affordable care act. as a matter of fact, 47 times, 47 times they have attempted to

shut down the affordable care act. heck, they are even shutting down bridges in new jersey. the fact is it seems like their agenda is just about shutting down things that actually work for american families. republicans can't just slam the door shut again and again on the american people. it's time to end this shutdown mentality once and for all here in washington and get back to working on issues of concern to the entire nation. mr. pallone, with that i yield back the balance of my time. the speaker pro tempore: the gentleman yields back. the gentleman from new jersey reserves. the gentleman from pennsylvania is recognized. mr. pitts: mr. speaker, may i inquire of the time remaining? the speaker pro tempore: the gentleman has 13 minutes. and 6 1/2 for mr. pallone from new jersey. mr. pitts: at this time, mr. speaker, i'm pleased to yield two minutes to the vice chair of the energy and commerce committee, the gentlelady from tennessee, mrs. blackburn. the speaker pro tempore: the gentlelady from tennessee is

recognized for two minutes. mrs. blackburn: thank you, mr. speaker. when is this administration finally going to start paying attention to the warning signs? when career staff at o.m.b. warned the administration that solyndra wasn't ready for prime time they moved forward anyway. and lost hardworking taxpayers a half billion dollars. when private consultants told the white house and h.h.s. officials last spring that there were problems with healthcare.gov, they moved forward anyway. when c.m.s. sent a memo just four days before healthcare.gov went live and warned about inherent security risks, their terminology, the administration moved forward anyway. so their failed policy of forward is costing us money and is getting people into trouble. this is what we are hearing

from an expieron report. america's personal information is at high risk on healthcare.gov. there is a great opportunity for data breach. this is something we can stop. the bill today does that. it is simple. it addresses the problem. what it does very simply, and i commend the gentleman from pennsylvania for the health exchange security and are transparency act. it accomplishes what this administration has failed to do. and to make a standard practice. to inform e h.h.s. anyone if their information has been breached and they have to do this within two business days. they can't hide it. they can't spin it. they've got to tell you. -- tell you if your information has been breached.

we do this because if the administration is going to require us, and, yes, to my colleagues, it is a requirement to use healthcare.gov, at least they can notify you when your information has been breached. i yield back. the speaker pro tempore: the gentlelady from tennessee's time has expired. the gentleman from pennsylvania reserves. the gentleman from new jersey is recognized. mr. pallone: thank you, mr. speaker. i yield three minutes to the gentlewoman from texas, ms. sheila jackson lee. the speaker pro tempore: the gentlewoman from texas is recognized for three minutes. ms. jackson lee: i thank the distinguished gentleman. i thank the manager of this legislation. i thank the good intentions of our colleagues. i want to pause for a moment, mr. pallone, and just simply say that although these are important issues, as a member of the house judiciary committee i helped draft the privacy -- the patriot act, and business records 215, and now looking to constrain the collection of megadata. i accept the importance of privacy for the american

people, but i pause for just a moment to ask my colleagues. if we have enough time today to actually pass the extension of the unemployment benefits, 1.3 million people, 12,000 in my own community would like us to stay here and make sure we get that done. i hope that my friends on the other side of the aisle will accept the challenge, republicans putting an exchange of the unemployment benefits on the floor to help unemployed americans. but this is an important issue as well. i do want to say that our friends have not documented any breach on personal and private ta of those individuals that have accessed the affordable care act, which are 9 million plus and growing. now we come one by one with legislation that has not gone through regular order, not gone through the committee process, has very good intentions, but in actuality may be overly

burdensome. because, mr. speaker, there is no bar, no bar, no limit for h.h.s. to provide notice for any possible breach within seconds or minutes or hours after the incident may have occurred. frankly, now this legislation doesn't go far enough. let me give you a few facts. the affordable care act implementation of healthcare.gov is under the authority of h.h.s. h.h.s. assigned the task for developing healthcare.gov to agency center for medicare and medicaid services. under the federal privacy act, all federal agencies must draft regulations to protect personally identifiable information under their control. the federal privacy act was established by an act of congress in concurrence of the executive branch to balance a government's need to maintain personal information on americans with the right of individuals to be protected against unwarranted invasions of their privacy.

the privacy act came as a direct result of the work of the committee following revelations that the government had routinely used records on citizens for political purposes to engage in surveillance or retaliatory activity. a series of laws passed by the congress to protect the privacy of americans. computer records management was of such grave concern to this congress, members of congress, following investigation into disclosure that then president nixon had used his high office to seek out means to exact retribution against political enemies by causing harm to careers, reputations, as well as financial injury to the i.r.s. can i get 30 seconds? a minute? mr. pallone: i yield the gentlewoman an additional minute. the speaker pro tempore: the gentlewoman is recognized. ms. jackson lee: so we have had an intense interest in records and computers and the rights of 1973. s which was in h.h.s. is chiefly responsible why the united states is the first nation in the world to

draft a prife say law. they know what to do. there is a code of fair information practices which has five principles, there must be no personal data record keeping system whose very existence is secret. that is to not use the data of people in the wrong way. there is a c.m.s. policy for privacy act. i offer this for the record. the base line of what my point is is that h.h.s. was at the core of developing privacy. there have been no known breaches. there is no bar for s.c.m.s. and h.h.s. to tell the american public or individual immediately. this bill will add burmsome requirements and may, and may distract or take away from legal and lawful and law enforcement investigations. i ask that we look at this together in a bipartisan manner. i believe in privacy. i hope we can work together, mr. pallone, and make this what it should be. i think the american people are -- the speaker pro tempore: the gentlelady's time has expired.

the gentleman from new jersey reserves. the gentleman from pennsylvania is recognized. mr. pitts: mr. speaker, at this time i'm pleased to yield one minute to the distinguished chairman of the republican study committee, member of the energy and commerce committee, mr. scalise of louisiana. the speaker pro tempore: the gentleman from louisiana is recognized for one minute. mr. scalise: i thank the gentleman from pennsylvania for yielding and bringing the health exchange security and transparency act. mr. speaker, all we are saying here is if american families' personal information is stolen through this website, through the exchange website, they ought to be notified by the administration that their data was breached. of course you got the white house actually coming out and saying they would veto this bill. what does the obama administration have against protecting the privacy of american families' personal information? you've got administration officials that testified before our committees. chief information security officer actually said there is also no confidence that personal identifiable information will be protected. if they can't assure the protection -- by the way the

individual mandate says this is not an option for american families. they have to go through this exchange to get insurance that's approved by the government. so if the government's going to mandate it, we don't want the government to mandate that they have to go do this, but the government is man -- mandating it. if it is, they ought to be sure the data is protected and if it's breached they ought to notify them it's happened. we need to pass this legislation, put this transparency into law. pass this bill. i yield back the balance of my time. the speaker pro tempore: the gentleman's time has expired. the gentleman from pennsylvania reserves. the gentleman from new jersey. mr. pallone: mr. speaker, i yield myself such time as i may consume. the speaker pro tempore: the gentleman is recognized for as much time as he may consume. he has 2 1/2 minutes left on his time. mr. pallone: mr. speaker, once again i hear my colleagues on the other side repeating the same things that are not accurate. you do not have to go on healthcare.gov to sign up for health insurance. mr. waxman said you can go to a private insurance broker. you can call an 800 number. you can go through various

nonprofits. they keep repeating the same thing. we keep having to say there have been no breaches. the gentleman mentioned the administration. the administration's statement which i read before and i'll only summarize part of it now it says that the federal government has already put in place an efficient system for securing personally identifiable information in the health insurance marketplace. the administration opposes the bill because it would create unrealistic and costly paperwork requirements that do not improve the safety or security of personally identifiable information in the health insurance marketplace. the purpose of the bill i understand, but it's simply not necessary. and it's just making people fearful of signing up. i reserve the balance of my time. the speaker pro tempore: the gentleman from new jersey reserves. the gentleman from pennsylvania. mr. pitts: mr. speaker, at this time i'm pleased to yield one minute to the distinguished gentleman from colorado, mr. gardner. the speaker pro tempore: the gentleman from colorado is recognized for one minute. mr. gardner: i thank the speaker and i thank the chairman of the committee for his good work. i would remind our colleagues

when you call the 800 number to sign up for the exchange policies, as was heard before, our committee and testimony, the people who get that number on that phone call then turn around and use the healthcare.gov site, the information, website, to input that information. so you are forced to go through this site. a couple weeks ago i received this letter, we are writing to you because of electronic file containing your personal information cannot be accounted for. the file included two or more of the following, your name, home mailing address, and social security number. the letter went on to say, we wanted to alert you to the potential that someone not authorized to access the records could have seen this information. this letter came from the state of colorado. they could not hold on to state employee's private personal identification information. all we're asking for is that we protect the privacy, the security of the american

people. to oppose this bill, to issue a veto threat, if the site is secure, they'll never receive the notice. if it's not, we will have acted to protect the american people. with that, mr. chairman, i yield back. the speaker pro tempore: the gentleman's time has expired. the gentleman from pennsylvania reserves. the gentleman from new jersey is recognized. mr. pallone: mr. speaker, i'll reserve. i only have a minute left. i don't know how many speakers you have left. the speaker pro tempore: the gentleman from new jersey reserves. the gentleman from ennsylvania. you're recognized. mr. pitts: mr. speaker, i'm pleased to yield one minute to e gentleman from ohio, mr. jordan. >> the speaker pro tempore: the gentleman is recognized for one minute. mr. jordan: they said no complete end testing was done. the chief information officer recommended not launching it. her boss launched it anyway.

the administration knew this website wasn't ready. they launched it anyway. the whole country now knows it wasn't ready. they put millions of people's personal information at risk and they did it for political reasons. now all we're asking is when there's a breach, when there's a problem, at least tell the american citizens. you already launched a website for political reasons that you knew wasn't ready, put millions of americans' personal information at risk. you already did that. now we're saying if there is a problem at least tell them. that's all we're saying. the administration will say, we'll veto that bill if that happens. you've got to be kidding me. you've got to be kidding me. that's all what this is about. i want to commend mr. pitts, the committee and those individuals that put work into this. it's a good piece of legislation and i would urge a yes vote. the speaker pro tempore: the gentleman's time has expired. the gentleman from pennsylvania reserves. the gentleman from new jersey continue to reserve? the gentleman from new jersey continues to reserve. the gentleman from pennsylvania. mr. pitts: mr. speaker, at this time i'm pleased to yield to

ms. jenkins, the gentlelady from kansas. the speaker pro tempore: the gentlelady from kansas is recognized for one minute. ms. jenkins: i thank the gentleman for yielding. personal information is an issue. and many kansans are worried about them not protecting them from security breaches and fraud. experts have repeatedly raised red flags about the security of the information people are submitting to the obamacare exchanges and are a former social security administrator even described the website as a hacker's dream. important questions about the website's security remain unanswered, and americans, especially those that lost their plans due to the president's health care law, deserves a peace of mind that their information is safe from cyberthieves. i urge my colleagues to support this bill that requires h.h.s. to notify americans within two business days if their personal information has been compromised. much more is required of private sector companies whose

products are not mandated by law. at least the administration can do is notify americans that their information has been stolen or unlawfully accessed through the obamacare exchange. i yield back. the speaker pro tempore: the gentlelady's time has expired. the gentleman from pennsylvania reserve. the gentleman from new jersey continues to reserve. the gentleman from pennsylvania. mr. pitts: mr. speaker, at this time i'm pleased to yield one minute to the gentlelady from indiana, mrs. walorski. the speaker pro tempore: the gentlelady from indiana is recognized for one minute. mrs. walorski: i support this legislation to enact much-needed consumer protections for healthcare.gov. it's unfair that the department of h.h.s. launched healthcare.gov without performing a complete security control assessment. installing the necessary safeguards for the exchanges should have been the administration's top priority. now congress has an opportunity to pass a law that simply requires h.h.s. to notify consumers within two business days if their personal information's unlawfully

accessed or stolen. in dage tal world, americans deserve to know their information is compromised so they can immediately take action to protect themselves. last summer i traveled my entire district in indiana to notify and to make aware cybersecurity issues and steps to avoid identity theft. hoosiers, seniors shared with me frightening stories about fraud and scam. they need to know that healthcare.gov will not contribute to the cybersecurity dilemma. this is the kind of representation they deserve in congress. i urge my colleagues to support this commonsense law to safeguard our personal information. i yield back. the speaker pro tempore: the gentlelady's time has expired. the gentleman from new jersey continues to reserve. the gentleman from pennsylvania. mr. pitts: we're prepared to close. the speaker pro tempore: the gentleman from new jersey is now recognized. mr. pallone: thank you. thank you, mr. speaker. i just want to say again, i'm not saying i'm opposed to some kind of security notification. in fact, it already exists and there is a protocol in place

with the department of health and human services. the point is that this republican bill is simply not necessary. that security already exists. the fact of the matter is there have not been any security breaches, and once again we're simply seeing the republicans get up and try to scare people so they don't go and use healthcare.gov, the website. what we really like to see, mr. speaker, is a day on both sides of the aisle we can get up and talk about legislation that continues to provide outreach and encourage people to sign up for the website and get the health insurance they need. i still honestly believe that both -- most republicans and democrats collectively would like to see most americans covered with health insurance. that was the purpose of the affordable care act. and i think my one optimistic note today could be, at least we're not seeing another bill on the floor that would seek to repeal the affordable care act. hopefully that's some recognition on the republican

side that the affordable care act is actually accomplishing its goal of trying to cover most americans, if not all americans. so with that, mr. speaker, i will say i would urge my colleagues to oppose this unnecessary bill and i yield back the balance of my time. the speaker pro tempore: the gentleman from new jersey yields back. the gentleman from pennsylvania. mr. pitts: mr. speaker, some have argued that requiring h.h.s. to report a data breach that is known to have resulted in a loss of personal identifiable information within two days is too burdensome for the department. in fact, the administration opposes this legislation for, quote, paperwork requirements, end quote. i'm frankly shocked that any member of this body would put workload concerns of h.h.s. ahead of their constituents' right to know if their data has been breached when many of our constituents are essentially being forced to shop through these exchanges. in addition, c.m.s. has stated that states and other

nonexchange entities are required to report data breaches to the department within one hour to h.h.s. if h.h.s. believes one hour is enough time to report, then they should certainly be able to tell our constituents within two days after knowing an individual's information was breached through an exchange. our constituents deserve to know if their personal information has been breached. that is all the underlying bill requires. our constituents have a right to know. they should have peace of mind and we should be protecting them, the victims, not the bureaucracy. i urge my colleagues to support this commonsense important bill and yield back the balance of my time. the speaker pro tempore: the gentleman from pennsylvania yields back. all time for debate has expired. pursuant to house resolution 455, the previous question is ordered on the bill. the question is on engrossment and third reading of the bill. those in favor say aye. those opposed, no. the ayes have it. third reading. the clerk: a bill to require

notification of individuals of breaches of personally identifiable information through exchanges under the patient protection and affordable care act. the speaker pro tempore: the question is on passage of the bill. those in favor say aye. those opposed, no. in the opinion of the chair, the ayes have it. mr. pallone: mr. chairman, we'd ask for a recorded vote. the speaker pro tempore: does the gentleman ask for the yeas nd nays? does the gentleman request the yeas and nays? the yeas and nays are requested. those favoring a vote by the yeas and nays will rise. a sufficient number having arisen, the yeas and nays are ordered. members will record their votes by electronic device. this is a 15-minute vote. [captioning made possible by the national captioning institute, inc., in cooperation with the united states house of representatives. any use of the closed-captioned coverage of the house proceedings for political or commercial purposes is expressly prohibited by the u.s. house of representatives.]

the speaker pro tempore: on this vote the yeas are 291. the nays are 122. the bill is passed, without objection, the motion to reconsider is laid on the table. for what purpose does the gentleman from north carolina rise? >> mr. speaker, i ask unanimous consent to remove my name as a co-sponsor of h.r. 3550. the speaker pro tempore: without objection, so ordered.

the speaker pro tempore: the ouse will be in order. the house will be in order. the house will be in order. for what purpose does the gentleman from maryland rise? mr. hoyer: mr. speaker, i ask unanimous consent to speak out of order for one minute for the purpose of inquiring of the majority leader the schedule for the week to come. the speaker pro tempore: without objection. mr. hoyer: thank you, mr. speaker. i now yield to my friend, mr. cantor, the majority leader. i yield to my friend. mr. cantor: mr. speaker, i thank the gentleman from maryland, the democratic whip, for yielding. mr. speaker, on monday the house will meet at neen for morning hour and 2:00 -- noon for morning hour and 2:00 p.m. for legislative business.

votes will be postponed until 6:30. on tuesday and wednesday the house will meet at 10:00 a.m. mr. hoyer: mr. speaker, the house is not in order. the speaker pro tempore: the gentleman is correct. the house will be in order. the members will please remove their conversations from the floor. he house will be in order. the gentleman is recognized. mr. cantor: on tuesday and wednesday the house will meet at 10:00 a.m. and noon for legislative business. thursday at 9:00. last votes expected at 3:00 p.m. on friday no votes expected. the house will consider a few suspensions next week. a complete list of which will be announced by the close of business today. in addition, the house will consider two bills next week to fund government operations. as you know, mr. speaker, house and senate appropriators are working towards a bipartisan agreement on an appropriations package to fund the government

for the end -- until the end of the fiscal year. i expect an agreement to be reached soon and the house will consider this package next week. mr. speaker, to facilitate this, we will need to pass a short-term c.r. to allow the senate time to process the bill. i expect to pass this under suspension of the rules early next week. finally, i expect the house to consider h.r. 3362, the exchange information disclosure act, sponsored by representative lee terry. this bill requires full transparency and accuracy from the administration on data reported from the obamacare exchange. and with that, mr. speaker, i yield back. mr. hoyer: i thank the gentleman for that information. i note he indicates that we probably will not be able to accomplish the omnibus by the end of next week and therefore a c.r. may be required.

i know that all of us feel that that needs to be accomplished as quickly as possible. i'd point out to the gentleman in conversations that he says it's going to be on suspension. i'll support it on suspension, urge my colleagues to support it on suspension. can the gentleman tell me, however, how long that c.r. will go? that will affect us somewhat. mr. speaker, -- mr. cantor: mr. speaker, i'd say in response to the gentleman, the expected termination, if you will, expiration of the c.r. will be saturday the 18th of january. so giving a week really, mr. speaker, is for the senate to act, because we will be acting next week in the middle of the week, we hope they will finish their business by september -- i mean, january 18. . mr. hoyer: i hope that was