S. 3904 · 117th Congress · Senate

Healthcare Cybersecurity Act of 2022

Active· Placed on Senate Legislative Calendar under General Orders. Calendar No. 527.
Introduced
Mar 23, 22
Passed Senate
Pending
Passed House
Pending
Sent to President
Pending
Signed into Law
Pending

Executive Summary

Healthcare Cybersecurity Act of 2022

This bill requires the Department of Health and Human Services (HHS) to undertake activities to improve the cybersecurity of the health care and public health sector.

HHS must coordinate with the Cybersecurity and Infrastructure Security Agency (CISA) on these activities; in particular, CISA must make resources, including cyber-threat indicators and appropriate defense measures, available to federal and nonfederal entities that receive information through HHS programs.

In addition, HHS must provide training on cybersecurity risks and mitigation strategies to owners of assets in the health care and public health sector.

HHS must also update the Healthcare and Public Health Sector Specific Plan, which guides the sector's effort to enhance the security and resilience of critical infrastructure. The updates must address, among other topics, the impact of the risks on rural entities and small- and medium-sized entities, cybersecurity workforce shortages in the sector, and challenges related to the COVID-19 emergency.

Previous Versions

00Mar 23, 2022

Healthcare Cybersecurity Act of 2022

This bill requires the Cybersecurity and Infrastructure Security Agency (CISA) to undertake activities to improve the cybersecurity of the health care and public health sector.

Specifically, CISA must collaborate with the Department of Health and Human Services (HHS) to improve cybersecurity in that sector. This includes making resources, including cyber-threat indicators and appropriate defense measures, available to federal and nonfederal entities that receive information through HHS programs.

In addition, CISA must provide training on cybersecurity risks and mitigation strategies to owners of assets in the health care and public health sector.

CISA must also conduct a study on cybersecurity risks in the health care and public health sector. The study must address, among other topics, the impact of the risks on rural entities and small- and medium-sized entities, cybersecurity workforce shortages in the sector, and challenges related to the COVID-19 emergency.

Action Timeline

6
  1. OCT 18, 2022Committee

    Committee on Homeland Security and Governmental Affairs

    Reported by Senator Peters under authority of the order of the Senate of 10/14/2022 with an amendment in the nature of a substitute and an amendment to the title. With written report No. 117-177.

    117Yea
    177Nay
    0NV
  2. OCT 18, 2022Committee

    Committee on Homeland Security and Governmental Affairs

    Reported by Senator Peters under authority of the order of the Senate of 10/14/2022 with an amendment in the nature of a substitute and an amendment to the title. With written report No. 117-177.

    117Yea
    177Nay
    0NV
  3. OCT 18, 2022Calendars

    Placed on Senate Legislative Calendar under General Orders. Calendar No. 527.

  4. MAR 30, 2022Committee

    Committee on Homeland Security and Governmental Affairs

    Ordered to be reported with an amendment in the nature of a substitute favorably.

  5. MAR 23, 2022IntroReferral

    Introduced in Senate

  6. MAR 23, 2022IntroReferral

    Read twice and referred to the Committee on Homeland Security and Governmental Affairs.

Committees

3

Homeland Security and Governmental Affairs Committee

ssga00

Referred: Oct 18, 2022

Active

Homeland Security and Governmental Affairs Committee

ssga00

Referred: Mar 30, 2022

Active

Homeland Security and Governmental Affairs Committee

ssga00

Referred: Mar 23, 2022

Active