Bipartisan Health Care Cybersecurity Bill Aims to Protect Patient Data and Enhance Cyber Defenses

Bipartisan Health Care Cybersecurity Bill Aims to Protect Patient Data and Enhance Cyber Defenses

November 23, 2024 Catherine Williams - Chief Editor Health

A new bipartisan bill aims to protect Americans’ health data and improve cybersecurity in the health care sector. Senators Bill Cassidy (R-La.), Maggie Hassan (D-N.H.), John Cornyn (R-Texas), and Mark Warner (D-Va.) introduced the Health Care Cybersecurity and Resiliency Act of 2024 (S.5390) after a year of study on health care cyber issues.

The bill responds to a report from the Health and Human Services Department, noting that 89 million Americans experienced health data breaches last year, more than double the previous year.

Senator Cornyn stressed the importance of protecting health data in a digital age. He stated that the legislation will modernize cybersecurity practices in health care and enhance coordination among agencies to better prevent and address cyberattacks. Senator Cassidy highlighted that such attacks threaten sensitive health data and can delay critical medical care.

Key components of the legislation include:

  1. Improved Coordination: The bill promotes better communication between the Health and Human Services (HHS) and the Cybersecurity and Infrastructure Security Agency (CISA).

  2. Cyber Incident Response Plan: The HHS secretary will need to create and implement a cyber incident response plan within one year of the bill becoming law.

  3. HIPAA Updates: The bill seeks to modernize regulations under the Health Insurance Portability and Accountability Act to enhance cybersecurity practices among covered entities.

  4. Grants and Training: It allocates funds for providers to upgrade their cyberattack prevention and response strategies and offers training sessions on cybersecurity best practices.

  5. Support for Rural Health Clinics: The bill aims to assist rural clinics with breach prevention and resilience through federal agency coordination.

Senator Hassan noted the severe impact of cyberattacks on the health care sector, including risks to private medical information and disruption to emergency services. She urged support for the legislation, emphasizing the need to address the challenges faced by medical providers and patients.

Earlier this year, Senators Warner and Ron Wyden introduced a bill to establish mandatory cybersecurity standards for health care providers and connected entities, motivated by a major ransomware attack on Change Healthcare that affected 100 million Americans.

Senator Warner stated that cyberattacks threaten both personal information and patient safety. He expressed pride in introducing this bipartisan legislation to strengthen cybersecurity and protect patients effectively.