PASSED THE SENATE: Senator Hassan’s Legislation to Strengthen Cybersecurity

WASHINGTON - Legislation led by U.S. Senators Maggie Hassan, Bill Cassidy (R-LA), John Cornyn (R-TX), and Mark Warner (D-VA) to protect Americans' health data by strengthening cybersecurity recently passed the U.S. Senate by unanimous consent. The Health Care Cybersecurity and Resiliency Act is a product of the senators' bipartisan health care cybersecurity working group launched in 2023.

"Cyberattacks have exposed patients' private medical information and disrupted critical patient care in New Hampshire and across the country," said Senator Hassan. "This bipartisan legislation will help hospitals and health care providers, particularly those in rural communities with fewer resources, strengthen their cybersecurity and respond faster to attacks. I'm pleased to see that the Senate came together to pass this bill, and I'll keep working across the aisle to protect patients and strengthen our health care system."

"Cyberattacks can shut down hospitals and expose patients' private medical records," said Senator Cassidy. "At a time when hostile actors are increasingly using sophisticated tactics to breach health care systems, the Health Care Cybersecurity and Resilience Act will help health care providers strengthen their defenses against cyber threats and protect patients' health data."

"Patients deserve absolute confidence that their sensitive medical data stored online is protected and shielded from cybersecurity breaches or ransomware attacks," said Senator Cornyn. "This legislation would strengthen interagency coordination and improve security practices for rural providers, ensuring Texans' health care is not delayed or compromised by cyberattacks."

"Cyberattacks on our health care systems can have life-or-death consequences for patients and put the sensitive information of millions of Americans at risk," said Senator Warner. "I'm proud to have helped pass this critical legislation through the Senate, and I urge the House to act quickly. This bill will strengthen our cybersecurity, better protect patients and their information, and give rural health care providers in Virginia and across the country additional tools to defend against cyber threats."

The Health Care Cybersecurity and Resiliency Act:

• Provides a variety of resources for the health care sector to improve cyberattack prevention and response

• Provides training to health care entities on cybersecurity best practices.

• Supports rural communities by providing best practices to rural health clinics and other providers on cybersecurity breach prevention, resilience, and coordination with federal agencies.

• Improves coordination between the Department of Health and Human Services (HHS) and Cybersecurity and Infrastructure Security Agency (CISA) to better respond to cyberattacks in the health care sector.

• Modernizes current regulations so entities covered under the Health Insurance Portability and Accountability Act (HIPAA) use the best cybersecurity practices.

• Requires the HHS Secretary to develop and implement a cybersecurity incident response plan.

###

• Print
• Email
• Share
• Tweet