← Back to recent legislative activity
S. 3315

Health Care Cybersecurity and Resiliency Act of 2026

📅 Oct 05, 2026
Summary:
• Requires the Secretary of Health and Human Services and the Director of the Cybersecurity and Infrastructure Security Agency to coordinate to improve cybersecurity in the healthcare and public health sectors
• Mandates the Secretary to develop a cybersecurity incident response plan within 1 year and update breach reporting portal regulations to include corrective action information
• Establishes new required cybersecurity standards including multifactor authentication, encryption safeguards, and audit requirements for covered entities and business associates
Additional Details:
• Authorizes grants to eligible entities including health centers, hospitals, and rural health clinics for adopting cybersecurity best practices, with funding available for hiring personnel, updating systems, and reducing legacy system use
• Requires the Secretary to issue guidance within 1 year on rural cybersecurity readiness and develop a strategic plan to support growing the cybersecurity workforce for healthcare entities
• Designates the Assistant Secretary for Preparedness and Response to lead oversight and coordination of cybersecurity activities within the Department of Health and Human Services
View Full Bill on Congress.gov →

Data from the Congress.gov API. AI summaries have not yet been reviewed by humans.