Insecure about the Gov't? You Should Be! Obamacare Just Keeps On Lying Vs. Target's Truth - Hiding the Hacking at HealthCare.gov

Government continues the lies and coverup about its vulnerability to ID theft and having as Target was open and tries to fix their hack. The difference, Target is responsible to its customers for it survival, the Government thinks it responsible to no one but itself. 
Government has a lot to learn! m/r

"If your personal info gets filched, too bad."

Hiding the Hacking at HealthCare.gov | National Review Online

DECEMBER 23, 2013

If your personal info is filched from the site, the government doesn’t have to tell you.

By John Fund

Christmas shoppers were stunned to learn last Thursday that computer hackers had made off with the names and other personal info of some 40 million Target customers. Some of the pilfered information is reportedly being sold on the black market, prompting JP Morgan Chase to limit purchases and cash withdrawals on debit cards owned by recent Target shoppers.

But at least Target informed its customers of the security breach, as it is required by federal law to do. HealthCare.gov faces no such requirement; it need never notify customers that their personal information has been hacked or possibly compromised. The Department of Health and Human Services was specifically asked to include a notification requirement in the rules it designed for the health-care exchanges, but HHS declined.

The Federal Register tells the tale about what happened on March 27, 2012, at a meeting on the issue.

At that meeting, two commenters asked HHS to ensure the exchanges would promptly notify affected enrollees in the event of a data breach or unauthorized access to the exchange’s databases. One commenter suggested that a full investigation be launched each time such a breach occurred, with the goal of holding hackers legally and financially accountable for breaking into the website.

According to a report by the group Watchdog.org, HHS responded: “We do not plan to include the specific notification procedures in the final rule. Consistent with this approach, we do not include specific policies for investigation of data breaches in this final rule.” In other words, the government doesn’t have to tell you about a security breach unless it decides it wants to — despite the fact that private companies are required to publicly disclose any incidents. State laws also require many of the 14 state-run insurance exchanges to disclose such information, but no such law exists for the federally run exchange, which 36 states rely upon.

The Watchdog report notes that it’s through state laws that we’ve learned the most about security problems in the exchanges.

-go to link-