S. 3315 Passed the Senate Health

Health Care Cybersecurity and Resiliency Act of 2026

A bill to require the Secretary of Health and Human Services and the Director of the Cybersecurity and Infrastructure Security Agency to coordinate to improve cybersecurity in the health care and public health sectors, and for other purposes.

  1. Introduced
  2. Committee
  3. Passed Senate
  4. Passed House
  5. To President
  6. Became law
Sponsor Sen. Cassidy, Bill [R-LA] Introduced December 2, 2025 Cosponsors 5 (2 R, 2 D, 1 I) Latest action October 5, 2026

Summary

Health Care Cybersecurity and Resiliency Act of 2026
This bill expands federal requirements and resources for preventing and responding to cybersecurity incidents in the health care and public health sectors.
The bill directs the Department of Health and Human Services (HHS) to
- require private health care-related entities to adopt minimum cybersecurity practices (e.g., multifactor authentication),
- more specifically identify the standards for mitigating penalties relating to violations of health information privacy and security,
- expand and update biennially a specified plan that details cybersecurity protocols for HHS personnel,
- provide training and best practices to support the expansion of the workforce for health care cybersecurity, 
- provide guidance on cybersecurity readiness to rural entities, and
- designate one representative to lead oversight and coordination of cybersecurity activities within HHS.
Also, HHS and the Cybersecurity and Infrastructure Security Agency (CISA) must coordinate to improve health care cybersecurity, including by (1) providing resources for entities receiving information from HHS or CISA programs, and (2) establishing a joint cybersecurity capability plan to coordinate responses to significant incidents.
Additionally, the bill requires health care providers and plans to include the number of individuals affected when notifying individuals of unauthorized access to health information (i.e., a breach). 

Summary by the Congressional Research Service, Library of Congress.

Congress.gov

Actions

  1. Oct 5, 2026 Held at the desk.
  2. Oct 5, 2026 Received in the House.
  3. Oct 5, 2026 Message on Senate action sent to the House.
  4. Sep 30, 2026 Passed Senate with an amendment by Unanimous Consent. (text: CR S5234-5236)
  5. Sep 30, 2026 Passed/agreed to in Senate: Passed Senate with an amendment by Unanimous Consent.
  6. Sep 30, 2026 The committee substitute withdrawn by Unanimous Consent.
  7. Sep 30, 2026 Measure laid before Senate by unanimous consent. (consideration: CR S5231-5236)
  8. Mar 23, 2026 Placed on Senate Legislative Calendar under General Orders. Calendar No. 365.
  9. Mar 23, 2026 Committee on Health, Education, Labor, and Pensions. Reported by Senator Cassidy with an amendment in the nature of a substitute. Without written report.
  10. Feb 26, 2026 Committee on Health, Education, Labor, and Pensions. Ordered to be reported with an amendment in the nature of a substitute favorably.
  11. Dec 2, 2025 Read twice and referred to the Committee on Health, Education, Labor, and Pensions.
  12. Dec 2, 2025 Introduced in Senate

Congressional and federal records come from official public sources: the House Clerk, the U.S. Senate, GovInfo and the Library of Congress (bill status), the Federal Register, and the congress-legislators project. They are copied on a schedule and may lag the official record by a few hours; the official sources govern. News and coverage counts are drawn from the 4Search index and reflect what the press published, not 4Search's views. Nothing here is an endorsement of any candidate, party or position. Terms of use.