119 HR 9515 IH: Marketplace Fraud Accountability Act U.S. House of Representatives 2026-06-29 text/xml EN Pursuant to Title 17 Section 105 of the United States Code, this file is not subject to copyright protection and is in the public domain.

I119th CONGRESS2d SessionH. R. 9515IN THE HOUSE OF REPRESENTATIVESJune 29, 2026Mr. Grothman (for himself, Mr. Fine, and Mr. Arrington) introduced the following bill; which was referred to the Committee on Energy and CommerceA BILLTo amend the Patient Protection and Affordable Care Act to require the use of multi-factor authentication to access certain information through healthcare.gov.

1.

Short title

This Act may be cited as the Marketplace Fraud Accountability Act or the MFA Act.

2.

Requiring the use of multi-factor authentication to access certain information through healthcare.gov

(a)

In general

Section 1311(c) of the Patient Protection and Affordable Care Act (42 U.S.C. 18031(c)) is amended by adding at the end the following new paragraph: (8)

Multi-factor authentication

(A)

In general

Subject to subparagraph (B), not later than the date that is 1 year after the date of enactment of this paragraph, the Secretary shall require the use of multi-factor authentication to verify the identity of any individual attempting to access the healthcare.gov website (or any successor website) for purposes of— (i) enrolling in a qualified health plan offered through an Exchange; or (ii) accessing any personalized information with respect to such enrollment. (B)

Exceptions

Subparagraph (A) shall not apply in the case of an individual that does not have access to broadband service or cellular service, or is otherwise unable to use multi-factor authentication for reasons specified by the Secretary. (C)

Multi-factor authentication defined

For purposes of this paragraph, the term multi-factor authentication means authentication through the verification of 2 or more of the following types of authentication factors: (i) Knowledge factors, such as a password. (ii) Possession factors, such as a token. (iii) Inherence factors, such as biometric characteristics. . (b)

Effective date

The amendments made by this subsection shall apply with respect to plan years beginning on or after the date that is 1 year after the date of enactment of this subsection.