Healthcare Cybersecurity Act of 2022

Bill: 117-s-3904
Sponsor: Sen. Rosen, Jacky [D-NV]
Introduced: 2022-03-23 in the Senate
Policy area: Health
Subjects: Cardiovascular and respiratory health
Computer security and identity theft
Congressional oversight
Emergency medical services and trauma care
Employee hiring
Government studies and investigations
Health care coverage and access
Health care quality
Health information and medical records
Health personnel
Health technology, devices, supplies
Infectious and parasitic diseases
Rural conditions and development
Technology assessment

Summary:
action_date: 2022-03-23
text: 

Healthcare Cybersecurity Act of 2022

 
This bill requires the Cybersecurity and Infrastructure Security Agency (CISA) to undertake activities to improve the cybersecurity of the health care and public health sector.
 
Specifically, CISA must collaborate with the Department of Health and Human Services (HHS) to improve cybersecurity in that sector. This includes making resources, including cyber-threat indicators and appropriate defense measures, available to federal and nonfederal entities that receive information through HHS programs.
 
In addition, CISA must provide training on cybersecurity risks and mitigation strategies to owners of assets in the health care and public health sector.
 
CISA must also conduct a study on cybersecurity risks in the health care and public health sector. The study must address, among other topics, the impact of the risks on rural entities and small- and medium-sized entities, cybersecurity workforce shortages in the sector, and challenges related to the COVID-19 emergency.

action_date: 2022-10-18
text: 

Healthcare Cybersecurity Act of 2022

 
This bill requires the Department of Health and Human Services (HHS) to undertake activities to improve the cybersecurity of the health care and public health sector.
 
HHS must coordinate with the Cybersecurity and Infrastructure Security Agency (CISA) on these activities; in particular, CISA must make resources, including cyber-threat indicators and appropriate defense measures, available to federal and nonfederal entities that receive information through HHS programs.
 
In addition, HHS must provide training on cybersecurity risks and mitigation strategies to owners of assets in the health care and public health sector.
 
HHS must also update the Healthcare and Public Health Sector Specific Plan, which guides the sector's effort to enhance the security and resilience of critical infrastructure. The updates must address, among other topics, the impact of the risks on rural entities and small- and medium-sized entities, cybersecurity workforce shortages in the sector, and challenges related to the COVID-19 emergency.


Legislative actions:
action_date: 2022-10-18
text: Placed on Senate Legislative Calendar under General Orders. Calendar No. 527.
action_date: 2022-10-18
text: Committee on Homeland Security and Governmental Affairs. Reported by Senator Peters under authority of the order of the Senate of 10/14/2022 with an amendment in the nature of a substitute and an amendment to the title. With written report No. 117-177.
action_date: 2022-10-18
text: Committee on Homeland Security and Governmental Affairs. Reported by Senator Peters under authority of the order of the Senate of 10/14/2022 with an amendment in the nature of a substitute and an amendment to the title. With written report No. 117-177.
action_date: 2022-03-30
text: Committee on Homeland Security and Governmental Affairs. Ordered to be reported with an amendment in the nature of a substitute favorably.
action_date: 2022-03-23
text: Read twice and referred to the Committee on Homeland Security and Governmental Affairs.
action_date: 2022-03-23
text: Introduced in Senate