This bill would amend the Affordable Care Act to require multi-factor authentication for accessing certain information through Healthcare.gov. In practical terms, it would add an extra security step, such as a code or app-based verification, for people who log in to view or manage marketplace health coverage information. The main effect would fall on consumers, applicants, and account holders who use the federal health insurance marketplace, along with the systems and contractors that operate it.
What This Bill Does
- Requires multi-factor authentication for certain Healthcare.gov access
- Applies to users managing information through the federal health insurance marketplace
- Aims to protect sensitive enrollment and personal data from unauthorized access
- Would add an extra login step for affected marketplace account holders
Who This Bill Affects
If you use Healthcare.gov, this bill would likely require an extra step every time you sign in to view or manage your account, such as entering a code sent to your phone or using an authentication app. That would make access a little less convenient, but it would also better protect your personal and enrollment information from account theft or unauthorized changes. For most other people, the effect would be minimal because the change applies to the federal marketplace login process rather than to health coverage generally.
See how this bill affects you — sign in for a personalized analysisWho Supports & Opposes This
- Marketplace consumers and identity-theft victims They benefit from stronger account security and lower risk that someone can steal benefits, change enrollment details, or view private personal information. Extra authentication can be especially valuable for accounts tied to subsidies and sensitive identity data.
- Cybersecurity and privacy advocates They argue that multi-factor authentication is a basic, widely used safeguard for preventing account compromise. Requiring it for Healthcare.gov would align the marketplace with common security practices used across banking, health, and government systems.
- Federal administrators and fraud-prevention officials They may see the requirement as a practical way to reduce unauthorized access and administrative headaches caused by compromised accounts. Better authentication can also help protect program integrity and limit costly remediation after a breach or misuse.
- Some older adults and low-tech users They may worry that an extra verification step will make it harder to log in, especially if they do not use smartphones or have inconsistent phone access. For people who already struggle with online systems, added security can become an access barrier.
- Consumer assistance groups They may argue that any new login requirement could increase call-center demand and create friction during enrollment or plan changes. If users cannot complete authentication easily, they may delay important coverage updates.
- Marketplace operators and IT contractors They may be concerned about implementation costs, systems changes, and support burdens. Multi-factor authentication can require software updates, customer education, and additional troubleshooting when users lose access to their verification method.
Key Implications
-
““require the use of multi-factor authentication””
This means a password alone would no longer be enough for some Healthcare.gov logins. Users would need a second proof of identity, which is intended to block unauthorized access even if login credentials are stolen.
-
““access certain information through healthcare.gov””
The requirement is tied to viewing or managing marketplace information, not to general browsing. People who maintain an account or change coverage details would be the most directly affected.
-
““amend the Patient Protection and Affordable Care Act””
The bill changes the legal framework of the ACA rather than creating a new health program. It would modify how the federal marketplace is administered and secured.
Official Source & Bill Facts
BillBoard checks this page against public Congress.gov metadata, then adds plain-English analysis where available.
- Bill
- HR 9515
- Congress
- 119th Congress
- Official title
- To amend the Patient Protection and Affordable Care Act to require the use of multi-factor authentication to access certain information through healthcare.gov.
- Policy area
- Healthcare
- Latest action
- Referred to the House Committee on Energy and Commerce. (June 29, 2026)
- Last updated
- June 30, 2026
Latest Status
June 29, 2026
Referred to the House Committee on Energy and Commerce.
Related Bills
Take Action
Get more from BillBoard
Free tools to understand, respond to, and track this bill.
Ask AI about this billData sourced from api.congress.gov.