Health Exchange Security and Transparency Act of 2015
Requires the Department of Health and Human Services to notify an individual within two business days after discovery of any breach of security of any system maintained by a health care exchange established under the Patient Protection and Affordable Care Act which is known to have resulted in the theft or unlawful access of the individual's personally identifiable information.