Security concerns jeopardize October opening of health insurance marketplaces

 

McClatchy Washington Bureau

The opening of the health insurance marketplaces in October – key to Obamacare – is in jeopardy because of looming questions about information security. The problem stems from tight deadlines that must be met to ensure the security of data moving through an information system that supports the marketplaces, sometimes referred to as exchanges, according to a new government watchdog report.

At a cost of $394 million, the federal data-services hub will route requests from the marketplaces to existing federal and state databases.

The Obama administration had expected Tony Trenkle, the chief information officer for the Centers for Medicare and Medicaid Services, to decide Sept. 4 whether information routed through the hub was secure from hackers and identity thieves. But a new report by the inspector general for the Department of Health and Human Services says that decision now is expected Sept. 30, only a day before open enrollment on the marketplaces is scheduled to begin.

Any further delays, the report said, mean the chief information officer may not have enough time to gauge the security of data transfers. The Obama administration and private contractors are testing the data hub for defects and vulnerabilities, but a draft report with the results of the testing isn’t due until Sept. 20, the report noted.

If the tests find security problems, the information officer could delay the marketplace opening or decide to open the insurance exchanges with less-than-optimal assurances that users’ personal information is adequately protected.

In a written response to the report, Medicare and Medicaid Services administrator Marilyn Tavenner said her agency was “conducting internal security-testing reviews and fixing system weaknesses.” She said the agency “is confident the hub will be operationally secure and it will have an authority to operate prior to Oct. 1.”

The report noted that the agency is “working with very tight deadlines to ensure that security measures for the hub are assessed, tested and implemented” by Oct. 1, when key aspects of the Affordable Care Act kick in.

The HHS report is the latest government analysis to show that work on the marketplaces is behind schedule. In July, two reports by the Government Accountability Office found that HHS had missed numerous deadlines for the computer and technical work that’s necessary to make the marketplaces function properly in the 34 states where the federal government will operate them.

Both GAO reports said the missed deadlines might not affect implementation, but that “additional missed deadlines closer to the start of enrollment could do so.”

Email tpugh@mcclatchydc.com

Read more Nation stories from the Miami Herald

  •  
A member of the bomb squad inspects an object after a controlled detonation at the finish line of the Boston Marathon in Boston, Tuesday, April 15, 2014. Police have blown up two unattended backpacks found near the Boston Marathon's finish line on Tuesday. They say they've taken a man into custody in connection with them.

    Man charged with hoax near marathon finish line

    A man taken into custody near the Boston Marathon finish line late Tuesday, the anniversary of the deadly pressure cooker bombings, had a rice cooker in his backpack and was being charged with possession of a hoax device, police said.

  •  
A Boston policeman watches from behind a fire truck before a controlled detonation at the Boston Marathon finish line in Boston, Tuesday, April 15, 2014. Police have blown up two unattended backpacks found near the Boston Marathon's finish line on Tuesday. They say they've taken a man into custody in connection with them.

    Boston police safely blow up suspicious backpacks

    Survivors, first responders and relatives of those killed in the Boston Marathon bombing marked the anniversary Tuesday with tributes that combined sorrow over the loss of innocent victims with pride over the city's resilience in the face of a terror attack.

  •  
This photo provided by 41ActionNews, shows Frazier Glenn Cross. Cross is accused of killing three people outside of Jewish sites near Kansas City, Sunday April 13, 2014. (AP Photo/41ActionNews)

    Supremacist ID'd as suspect in Kansas attacks

    The man accused of killing three people Sunday in attacks at a Jewish community center and Jewish retirement complex near Kansas City is a well-known white supremacist and former Ku Klux Klan leader who was once the subject of a nationwide manhunt.

Miami Herald

Join the
Discussion

The Miami Herald is pleased to provide this opportunity to share information, experiences and observations about what's in the news. Some of the comments may be reprinted elsewhere on the site or in the newspaper. We encourage lively, open debate on the issues of the day, and ask that you refrain from profanity, hate speech, personal comments and remarks that are off point. Thank you for taking the time to offer your thoughts.

The Miami Herald uses Facebook's commenting system. You need to log in with a Facebook account in order to comment. If you have questions about commenting with your Facebook account, click here.

Have a news tip? You can send it anonymously. Click here to send us your tip - or - consider joining the Public Insight Network and become a source for The Miami Herald and el Nuevo Herald.

Hide Comments

This affects comments on all stories.

Cancel OK

  • Marketplace

Today's Circulars

  • Quick Job Search

Enter Keyword(s) Enter City Select a State Select a Category