Skip to content
PoliTrackerPrototype - alpha version 0.1
← Policies

Active

Bill · 119th Congress · S 3315

Health Care Cybersecurity and Resiliency Act of 2026

Refreshed 17 min ago

Introduced 2025-12-02Topic: health care

Summary

Summary by the Congressional Research Service

Health Care Cybersecurity and Resiliency Act of 2026 This bill expands federal requirements and resources for preventing and responding to cybersecurity incidents in the health care and public health sectors. The bill directs the Department of Health and Human Services (HHS) to require private health care-related entities to adopt minimum cybersecurity practices (e.g., multifactor authentication), more specifically identify the standards for mitigating penalties relating to violations of health information privacy and security, expand and update biennially a specified plan that details cybersecurity protocols for HHS personnel, provide training and best practices to support the expansion of the workforce for health care cybersecurity, provide guidance on cybersecurity readiness to rural entities, and designate one representative to lead oversight and coordination of cybersecurity activities within HHS. Also, HHS and the Cybersecurity and Infrastructure Security Agency (CISA) must coordinate to improve health care cybersecurity, including by (1) providing resources for entities receiving information from HHS or CISA programs, and (2) establishing a joint cybersecurity capability plan to coordinate responses to significant incidents. Additionally, the bill requires health care providers and plans to include the number of individuals affected when notifying individuals of unauthorized access to health information (i.e., a breach).

Full text and official record on Congress.gov

Sponsors

Action history

DateChamberActionStatus effect
2026-10-05HouseHeld at the desk.
2026-10-05HouseHeld at the desk.
2026-10-05HouseReceived in the House.
2026-10-05HouseReceived in the House.
2026-10-05SenateMessage on Senate action sent to the House.
2026-09-30SenatePassed Senate with an amendment by Unanimous Consent. (text: CR S5234-5236)
2026-09-30Passed/agreed to in Senate: Passed Senate with an amendment by Unanimous Consent.floor pass
2026-09-30SenateThe committee substitute withdrawn by Unanimous Consent.
2026-09-30SenateMeasure laid before Senate by unanimous consent. (consideration: CR S5231-5236)
2026-09-30Passed/agreed to in Senate: Passed Senate with an amendment by Unanimous Consent.floor pass
2026-03-23SenatePlaced on Senate Legislative Calendar under General Orders. Calendar No. 365.
2026-03-23SenateCommittee on Health, Education, Labor, and Pensions. Reported by Senator Cassidy with an amendment in the nature of a substitute. Without written report.refer
2026-03-23Committee on Health, Education, Labor, and Pensions. Reported by Senator Cassidy with an amendment in the nature of a substitute. Without written report.report
2026-02-26SenateCommittee on Health, Education, Labor, and Pensions. Ordered to be reported with an amendment in the nature of a substitute favorably.refer
2025-12-02SenateRead twice and referred to the Committee on Health, Education, Labor, and Pensions.refer
2025-12-02Introduced in Senateintroduce
Source: GovInfo Bill Status (Library of Congress), fetched 2026-10-07. Provisions and opinion polling arrive in a later release.