Skip to Content

Do you allow analytics?

We use analytics tools to understand how people use the site. They're optional: if you decline, the site works the same, no analytics cookies are set and Google gets only a cookieless, anonymous count signal. Your votes are saved either way; the details are in the privacy policy.

Referandom is here: Tinder for Congress 🔥

Support Referandom
HealthS. 3315Comments

Health Care Cybersecurity and Resiliency Act of 2026

Official title: A bill to require the Secretary of Health and Human Services and the Director of the Cybersecurity and Infrastructure Security Agency to coordinate to improve cybersecurity in the health care and public health sectors, and for other purposes.

What Do You Think?

How would you vote?

Referandom Vote

Vote to see the result.

Where the Bill Stands

  1. Introduced, done
  2. Committee, done
  3. Floor Vote, done
  4. Outcome, current stage

What This Bill Does

This bill expands federal requirements and resources for preventing and responding to cybersecurity incidents in the health care and public health sectors.

The bill directs the Department of Health and Human Services (HHS) to

  • require private health care-related entities to adopt minimum cybersecurity practices (e.g., multifactor authentication),
  • more specifically identify the standards for mitigating penalties relating to violations of health information privacy and security,
  • expand and update biennially a specified plan that details cybersecurity protocols for HHS personnel,
  • provide training and best practices to support the expansion of the workforce for health care cybersecurity,
  • provide guidance on cybersecurity readiness to rural entities, and
  • designate one representative to lead oversight and coordination of cybersecurity activities within HHS.

Also, HHS and the Cybersecurity and Infrastructure Security Agency (CISA) must coordinate to improve health care cybersecurity, including by (1) providing resources for entities receiving information from HHS or CISA programs, and (2) establishing a joint cybersecurity capability plan to coordinate responses to significant incidents.

Additionally, the bill requires health care providers and plans to include the number of individuals affected when notifying individuals of unauthorized access to health information (i.e., a breach).

Sponsors

Related Documents

Bill on Congress.govWeb Page ↗ (opens in a new tab)

Timeline

  1. SenateMessage on Senate action sent to the House.
  2. House floor actionsReceived in the House.
  3. Passed the Senate
  4. SenateMeasure laid before Senate by unanimous consent. (consideration: CR S5231-5236)
  5. Library of CongressPassed/agreed to in Senate: Passed Senate with an amendment by Unanimous Consent.
  6. Floor Vote
  7. SenateCommittee on Health, Education, Labor, and Pensions. Reported by Senator Cassidy with an amendment in the nature of a substitute. Without written report.
  8. SenateCommittee on Health, Education, Labor, and Pensions. Ordered to be reported with an amendment in the nature of a substitute favorably.
  9. Library of CongressIntroduced in Senate
  10. SenateRead twice and referred to the Committee on Health, Education, Labor, and Pensions.
  11. Introduced
  12. Committee

Comments

Comments with insults, hate speech or personal information are removed.