Privacy & Information Security Law Blog

On July 16, 2024, U.S. Senators Jacky Rosen, Todd Young, and Angus King introduced bipartisan legislation, known as the Healthcare Cybersecurity Act (the “Act”), to improve cybersecurity in the health care and public health sectors. The Act was developed in response to the 2024 ransomware attack on Change Healthcare and other similar cyber attacks experienced by the health care industry in recent years.

If enacted, the Act would require the Cybersecurity and Infrastructure Security Agency (“CISA”) and the Department of Health and Human Services (“HHS”) to work together to improve cybersecurity and information-sharing in the health care and public health sectors. Additionally, the Act would create a special liaison to act between HHS and CISA who would coordinate cybersecurity issues, facilitate the sharing of cyber threat information, and implement cybersecurity training for regulated entities.