One Hour Notification Act of 2013 or the OH No Act of 2013 - Directs the Secretary of Health and Human Services (HHS), following the discovery of a breach of the personally identifiable information of an individual that is maintained, submitted to, or submitted by a system maintained by an American Health Benefit Exchange under the Patient Protection and Affordable Care Act, to notify: (1) such individual within one hour after the Secretary is notified of such breach, and (2) specified congressional committees about such breach in a timely manner.
Requires the Secretary to report to Congress annually on: (1) all such breaches that occurred within the past year; and (2) the security rules, standards, and risk mitigation strategies implemented by the Secretary to prevent such breaches.