This seems like a fairly major flaw, although it's only one of many problems currently obvious about the partisan Obamacare law. No one is required to tell the Obamacare customers if their personal information gets leaked, hacked or misappropriated.
With the news over the Christmas holiday that Target got hacked, the news that Neiman Marcus got hacked, and the warnings that there may have been other retailers hacked, anyone who has used a credit card, the internet, or both at the same time is probably a little bit uneasy. The bad guys seem to be able to hack anything.
Then there's Obamacare which is looking worse every day. Not only does the website have some security flaws, the geniuses who crafted the law apparently didn't know that computer systems could be hacked and neglected to put in a requirement that any customer whose personal information got stolen be notified.
Fortunately, the House of Representatives, which in the eyes of the main stream media is full of evil obstructionists, has passed a bill remedying that. See H.R. 3811:
Not later than two business days after the discovery of a breach of security of any system maintained by an Exchange established under section 1311 or 1321 of the Patient Protection and Affordable Care Act (42 U.S.C. 18031, 18041) which is known to have resulted in personally identifiable information of an individual being stolen or unlawfully accessed, the Secretary of Health and Human Services shall provide notice of such breach to each such individual.
Every Republican who voted voted for it. But 122 obstructionist Democrats voted against it. Apparently, Democrat party leaders were afraid it might give Republicans ammo to make Obamacare look bad -- the same reason President Obama didn't delay the disastrous Obamacare roll out.
We'll see what the Senate does with it. And if they pass it, Obama will have the opportunity to try to convince us that we don't need the law because his administration is so trustworthy we could rely on them to notify victims without their being forced to do it.