Health Care Cybersecurity and Resiliency Act of 2026
On calendar: it can still change before the session ends.
- Stage
- On calendar
- Started in
- Senate
- Sponsors
- 4
- Latest action
- Mar 23, 2026
What it does
Health Care Cybersecurity and Resiliency Act of 2026 This bill expands federal requirements and resources for preventing and responding to cybersecurity incidents in the health care and public health sectors. The bill directs the Department of Health and Human Services (HHS) to require private health care-related entities to adopt minimum cybersecurity practices (e.g., multifactor authentication), more specifically identify the standards for mitigating penalties relating to violations of health information privacy and security, expand and update biennially a specified plan that details cybersecurity protocols for HHS personnel, provide training and best practices to support the expansion of…
Official summary · Reported to Senate · Mar 23, 2026
Titles and provisions can change as the bill moves.
Where it stands
Introduced (Done)
Committee (Current step)
Floor (Not started)
Law (Not started)
What moved
Who is involved
Sponsors
The lawmakers who put their names on it, lead sponsors first.
In the news
Reporting that may mention this subject. Possible matches are labeled.
Loading coverage…
Where it goes next
While a bill can still move, the questions are about people and money.