S. 3315, the Health Care Cybersecurity and Resiliency Act of 2026, passed the Senate on September 30, 2026.
S. 3315 — Health Care Cybersecurity and Resiliency Act of 2026
What it does
This bill requires the Department of Health and Human Services (HHS) and the Cybersecurity and Infrastructure Security Agency (CISA) to coordinate on cybersecurity for hospitals, clinics, and public health entities. It mandates HHS to update security rules requiring multifactor authentication, encryption, and penetration testing; establishes grants for rural and nonprofit health facilities to upgrade cybersecurity; creates a workforce development plan; and requires reporting on cybersecurity incidents and breach response protocols.
Quorum's transparency scan gave Health Care Cybersecurity and Resiliency Act of 2026 a moderate transparency flag.
What happens next
S. 3315 passed the Senate. It now moves to the other chamber.
Who is behind it
Filed by Bill Cassidy. Cosponsored by Angus King, Cindy Hyde-Smith, John Cornyn and Maggie Hassan.
The week in bills
One email, Sunday: what Congress passed, what it changed, and who paid.
One link arrives to confirm the address. It is used for this email and nothing else, and every issue carries an unsubscribe link.