H.R. 9515: Marketplace Fraud Accountability Act

This bill would require healthcare.gov to use multi-factor authentication when people log in to:

• Enroll in a health plan through an Exchange, or
• View personalized information related to that enrollment.

What multi-factor authentication means

The bill defines multi-factor authentication as using two or more different types of verification, such as:

• Something you know — like a password
• Something you have — like a phone, token, or other device
• Something you are — like a fingerprint or other biometric feature

Timing

The requirement would have to be in place within one year after the bill becomes law. The change would apply to plan years starting on or after that one-year mark.

Exceptions

The bill includes exceptions for people who:

• Do not have access to broadband or cellular service, or
• Are otherwise unable to use multi-factor authentication for reasons the Secretary of Health and Human Services specifies.

Overall effect

In practical terms, the bill would make it harder for someone to access a person’s healthcare.gov account using only a stolen password. It would add an extra step to confirm a user’s identity when they enroll in coverage or check account-specific information.

Relevant Companies

None found