"Requires the Secretary of Health and Human Services to notify within 2 days any individual whose personal information is stolen or unlawfully accessed through the federal health care exchange"
