Young, Colleagues Introduce Bipartisan Bill to Improve Cybersecurity in Health Care

WASHINGTON – U.S. Senators Todd Young (R-Ind.), Jacky Rosen (D-Nev.), and Angus King (I-Maine) introduced the bipartisan Healthcare Cybersecurity Act to bolster the health care and public health sectors’ cybersecurity in light of recent, devastating cyberattacks. Earlier this year, the health care sector faced a ransomware attack on the health payment platform Change Healthcare, highlighting the lack of preparation and training during the recovery process. 

“In recent years, hospitals and other health care facilities in Indiana and across America have experienced a dramatic increase in cyberattacks,” said Senator Young. “Our bipartisan bill will take critical steps to strengthen cybersecurity infrastructure and better protect patients’ personal data.”

“The health care industry is still reeling from recent cyberattacks, and rural and small health care entities in Nevada have been particularly affected,” said Senator Rosen. “It’s imperative that we take measures to improve cybersecurity in the health care sector to prevent data breaches and protect Nevadans, which is why I’m introducing this bipartisan legislation. I’ll keep working to strengthen the cybersecurity of this critical sector and keep people safe from malicious actors.”

“Healthcare cyberattacks are a growing threat nationwide, and also hit home for Maine, where several major healthcare systems have been compromised in recent years due to cybercrimes,” said Senator King. “These attacks and breaches of data can literally mean the difference between life and death for patients, significantly impact hospital operations, and — with the average hack costing millions to address — increase healthcare prices across the board. The bipartisan Healthcare Cybersecurity Act will take important steps toward protecting patients’ data and healthcare provider capabilities, and bolstering our cybersecurity infrastructure and response.” 

More specifically, the Healthcare Cybersecurity Act will direct the Cybersecurity and Infrastructure Security Agency (CISA) and the Department of Health and Human Services (HHS) to collaborate on improving cybersecurity and make resources available to non-federal entities relating to cyber threat indicators and appropriate defense measures. The legislation would also create a special liaison to HHS within CISA to coordinate during cybersecurity incidents and collaborate to support health care and public health sector entities.

Full text of the legislation can be found here.