Bill requires hospitals and clinics to strengthen security.
S. 3315 — Health Care Cybersecurity and Resiliency Act of 2026 · Filed by Bill Cassidy (R-LA) · 5 cosponsors · Introduced Dec 2, 2025 · Passed chamber
Your members of Congress
Enter a ZIP to see where your representative and both senators stood on this bill.
Looked up on this device — your ZIP is never stored on our servers.
What it does
The bill sets up stronger security rules for hospitals, clinics, and public health groups. Rules must include multifactor authentication, encryption, and penetration testing. The bill gives money to rural and nonprofit health groups. This money pays for security upgrades. It requires health groups to report attacks. Groups must explain how they respond to data theft.
Who it affects
Hospitals, clinics, and public health groups must follow new security rules. People who get health care get stronger protection of their data. Rural and nonprofit health groups get grants to pay for upgrades.
One thing to notice
The bill says the government 'may' award grants, not 'must.' Funding depends on future budget choices. The bill lets HHS pick when to enforce rules for groups facing hard times. Different providers may follow rules differently.
From the analysis of the bill text, linked under Primary records below.
Where it stands
5 cosponsors: 2 Democrats, 2 Republicans, 1 Independents.
- Dec 2, 2025 — Introduced · Congress.gov: “Introduced in Senate”
- Dec 2, 2025 — Referred to Senate Committee on Health, Education, Labor, and Pensions · Congress.gov: “Read twice and referred to the Committee on Health, Education, Labor, and Pensions”
- Feb 26, 2026 — Reported out of committee · Congress.gov: “Committee on Health, Education, Labor, and Pensions. Ordered to be reported with an amendment in the nature…”
- Sep 30, 2026 — Passed the Senate · Congress.gov: “Passed Senate with an amendment by Unanimous Consent”
Dates and quoted wording are Congress.gov's action record; the timeline shows status changes, not every procedural step.
Money around this bill
5 groups reported lobbying about this bill. They filed 5 reports from Dec 2025 to Jun 2026.
Those reports show $5,791,000 in lobbying spending. Each report lists about 21 bills. So that money was not all for this bill.
More groups named this bill than 78% of bills with any report.
Bill Cassidy, who sponsored the bill, received $1,329,254 from PACs for the 2026 election.
- American Hospital Association — $4,470,000 in 1 report
- Advanced Medical Technology Assn — $971,000 in 1 report
- Fdd Action — $290,000 in 1 report
- Halcyon Tech, Inc. — $40,000 in 1 report
- Chartercare Health of Ri (forrmerly Known As Chartercare Health Partners) — $20,000 in 1 report
Lobbying is legal. These reports show who lobbied about this bill, not what changed.
Words to know
- multifactor authentication — A security method that requires more than one way to prove who you are.
- encryption — A way to scramble data so only people with a special key can read it.
- penetration testing — A test where experts try to break into a system to find weak spots.
- lobbying — Trying to influence lawmakers about a bill. Companies and groups pay people to do this.
- PACs — Groups that collect money and give it to candidates for office.
- sponsored — To sponsor a bill is to introduce it in Congress and put your name on it.
How this was measured
Analysis — Quorum's AI read the bill text published by Congress.gov (21,994 characters) on May 21, 2026. Section numbers in the findings refer to that text, linked below; transparency and hidden-provision scores are compared against the median of 16,222 analysed bills.
Status and sponsors — Congress.gov's bill record — actions, committee referrals and cosponsors — loaded nightly. The timeline shows status changes, not every procedural action.
Money — Senate Lobbying Disclosure Act filings whose specific-issue field names this bill for quarters ending Dec 2025 to Jun 2026. A filing's amount is reported whole beside the median number of bills a filing names; it is never divided across them. PAC receipts are FEC-reported contributions to the sponsor's candidate committee in the 2026 cycle.
As of — lobbying records through Jul 23, 2026 · page rendered 2026-10-20.
“Bill requires hospitals and clinics to strengthen security.” QuorumCivic. https://share.quorumcivic.app/bill/119/s3315/simple Report an error
The week in bills
One email, Sunday: what Congress passed, what it changed, and who paid.
One link arrives to confirm the address. It is used for this email and nothing else, and every issue carries an unsubscribe link.