S. 3315: Health Care Cybersecurity and Resiliency Act of 2026

119th Congress · introduced 2025-12-02 · Health · Latest: Held at the desk.

federal

Official title

Health Care Cybersecurity and Resiliency Act of 2026

Plain summary

Health Care Cybersecurity and Resiliency Act of 2026 This bill expands federal requirements and resources for preventing and responding to cybersecurity incidents in the health care and public health sectors. The bill directs the Department of Health and Human Services (HHS) to require private health care-related entities to adopt minimum cybersecurity practices (e.g., multifactor authentication), more specifically identify the standards for mitigating penalties relating to violations of health information privacy and security, expand and update biennially a specified plan that details cybersecurity protocols for HHS personnel, provide training and best practices to support the expansion of the workforce for health care cybersecurity, provide guidance on cybersecurity readiness to rural entities, and designate one representative to lead oversight and coordination of cybersecurity activities within HHS. Also, HHS and the Cybersecurity and Infrastructure Security Agency (CISA) must coordinate to improve health care cybersecurity, including by (1) providing resources for entities receiving information from HHS or CISA programs, and (2) establishing a joint cybersecurity capability plan to coordinate responses to significant incidents. Additionally, the bill requires health care providers and plans to include the number of individuals affected when notifying individuals of unauthorized access to health information (i.e., a breach).

Congressional Research Service summary (Reported to Senate), quoted unchanged (nonpartisan). Read the source.

What a vote does

A “Yea” vote

If it passes both chambers and is signed, it becomes law.

A “Nay” vote

If it is not passed, current law stays as it is.

PSI Sci description of the legislative step (not an opinion).

What does this mean? (plain words)

Official text

Health Care Cybersecurity and Resiliency Act of 2026

Source: Congressional Research Service summary (Reported to Senate)

AI explanation – may be wrong, check the official text

No AI explanation yet. It takes up to a minute to write and is then saved for everyone.

Limited to a few requests an hour per person.

The strongest published arguments

Arguments for (supporters)

Needs sources: no published arguments on this side yet. We only show items backed by a published source. Suggest one.

Arguments against (opponents)

Needs sources: no published arguments on this side yet. We only show items backed by a published source. Suggest one.

Alternatives

Needs sources: no published alternatives yet (for example a different bill, a law instead of an amendment, or keeping current law). We only show items backed by a published source. Suggest one.

Officials and money

Sponsor: Sen. Cassidy, Bill [R-LA] · 5 cosponsors

Money: CBO cost estimate: S. 3315, Health Care Cybersecurity and Resiliency Act of 2026 (2026-04-20) No linked contracts or vendors yet.

Words on this page, explained (2)

Bill: A proposed law. It becomes law only if it passes the legislature and is signed by the president or governor (or a veto is overridden).
Securities: Financial investments that can be bought and sold, such as stocks and bonds.

Plain meanings written from linked sources. All words.

Sources

Congressional Research Service summary (Reported to Senate)
Congress.gov
Data: GovInfo BILLSTATUS bulk data (Library of Congress), BILLSTATUS-119s3315.xml <https://www.govinfo.gov/bulkdata/BILLSTATUS/119/s>

Record fed-us-cong119-s3315 · catalog fed-us-congress-bills-cong119 · updated 2026-11-03 by psicol fed-bills