Health Care Cybersecurity and Resiliency Act of 2026

This bill sets up new rules and resources to protect health care organizations from cyberattacks. It requires the Department of Health and Human Services (HHS) to make private health care companies follow basic cybersecurity steps, like using multifactor authentication, and to provide guidance and training to help build a stronger cybersecurity workforce in health care, with special attention to rural areas. HHS and the Cybersecurity and Infrastructure Security Agency (CISA) must work together to plan responses to major cyber incidents in the health care field. The bill also requires that when a health care provider or plan tells people their personal health information was accessed without permission, they must include how many people were affected.

Your Vote