Bill Cassidy (R-LA)· Sep 30, 2026
S.Amdt. 5819: In the nature of a substitute.
Adopted
With no one objecting, no names recorded
A Republican bill with 2 Democratic cosponsors · See all 5 cosponsors
Last activity — Held at the desk.
Passed one chamber, waiting for the other to take it up
Passed one chamber, and the other has not yet sent it to a committee or put it on its calendar.
The other chamber will hand it to a committee, place it on its calendar, or leave it where it is. Nothing has been decided, and a bill can sit here indefinitely.
Its path through Congress
- Introduced
- Passed Senate unanimous consent
- Awaiting House
The Senate by unanimous consent (no one objected, so there was no vote): no senator's position on it was recorded.
What this bill would do
The Health Care Cybersecurity and Resiliency Act of 2026 requires the Secretary of Health and Human Services and the Director of the Cybersecurity and Infrastructure Security Agency to work together to improve cybersecurity in the healthcare and public health sectors. The bill mandates joint cybersecurity planning, creates an incident response plan, and requires the Secretary to issue guidance specifically focused on rural cybersecurity readiness. It establishes new risk-based cybersecurity standards for non-governmental healthcare entities, covered entities, and business associates, including mandatory multifactor authentication and data encryption. Additionally, the legislation authorizes federal grants for eligible entities like nonprofit hospitals, rural health clinics, and federally qualified health centers to help them adopt cybersecurity best practices. Finally, the bill sets up a working group to streamline and reduce duplicative reporting for cybersecurity incidents.
Yes· 3 of 11
- Scored +8
Does this better protect the country from computer attacks?
The bill mandates coordination between HHS and CISA to improve cybersecurity resiliency in the healthcare sector.
- Scored +7
Would people in rural areas be better off under this?
The bill specifically mandates guidance and technical assistance to help rural healthcare entities improve their cybersecurity readiness.
- Scored +6
Does this invest in rural communities?
The bill provides specific guidance, technical assistance, and potential grant opportunities for rural healthcare entities.
The opposite
No question was scored the opposite.
How the text last changed
Engrossed in Senate (9/30/2026), compared with Reported to Senate. Each change is on the Text tab.
Only the wording changed; what the bill would do is the same.
Who it would affect, and how
Potential Positive Impacts for People
-
Section 3 of the bill requires the Secretary and the Director to coordinate and provide resources, technical assistance, and threat information sharing to healthcare entities to help improve their cybersecurity preparedness. This is positive because it gives healthcare providers better tools to defend against cyber attacks and protect patient data.
-
Section 9 directs the Secretary to issue guidance and provide technical assistance to rural entities on best practices to improve cybersecurity readiness. This is positive because it specifically helps under-resourced rural healthcare facilities safeguard their networks and patient information.
-
Section 10 authorizes the Secretary to award grants to eligible entities, including federally qualified health centers, Indian Health Service facilities, nonprofit hospitals, and rural health clinics, to adopt and implement cybersecurity best practices. This is positive because it provides critical federal funding to help these facilities hire experts, update data systems, and conduct risk assessments.
-
Section 11 requires the Secretary to provide training to healthcare entities on cybersecurity risks and mitigation strategies, and to develop a strategic plan to grow the healthcare cybersecurity workforce. This is positive because it builds a more skilled workforce to protect sensitive health systems from breaches.
Potential Negative Impacts for People
- Section 8 requires non-governmental entities in the healthcare and public health sector, covered entities, and business associates to adopt minimum risk-based cybersecurity practices, such as multifactor authentication, data encryption, and regular monitoring. This could be considered a negative burden because it imposes strict new federal mandates and compliance costs on healthcare providers and organizations.
Groups and Interests Ranking
Every group the model scored this bill for, from -10 to +10. Tap or hover a score for the reason it gave.
- Demographic And Interest Groups
- Would people in rural areas be better off under this? — The bill specifically mandates guidance and technical assistance to help rural healthcare entities improve their cybersecurity readiness. Would households on low incomes be better off under this? — Enhanced security for health data provides better protection for all individuals accessing public or nonprofit health services. Would middle-income households be better off under this? — Increased cybersecurity in healthcare reduces the risk of data breaches and identity theft for patients. Would union members be better off under this? — The bill includes provisions for workforce development and training within the healthcare sector.
- National Security And Foreign Policy
- Does this better protect the country from computer attacks? — The bill mandates coordination between HHS and CISA to improve cybersecurity resiliency in the healthcare sector.
- Environment Energy And Infrastructure
- Does this invest in rural communities? — The bill provides specific guidance, technical assistance, and potential grant opportunities for rural healthcare entities.
- Economy And Finance
- Does this make it easier to run a small business? — The bill provides grants to help healthcare entities adopt cybersecurity best practices and update electronic data systems.
- Governance And Ideology
- Does this make what the government does easier for the public to see? — The bill updates the breach reporting portal to include information on corrective actions taken by entities.
- Healthcare
- Does this make health care easier to get in general? — By improving cybersecurity and protecting data, the bill helps ensure the stability and reliability of healthcare delivery services.
- Education And Technology
- Does this put more money into scientific research? — The bill funds a strategic plan to grow the healthcare cybersecurity workforce.
- Social Issues And Justice
- Does this make housing cost less? — Strengthening healthcare infrastructure can indirectly support community stability through more reliable health services.
The version one chamber actually passed
What changed from Reported to Senate
Only the wording changed; what the bill would do is the same.
Written by an AI model from a comparison of this version’s text with the one before it, not by a person. .
- 10/5/2026
- Message on Senate action sent to the House.
- Held at the desk.
- Received in the House.
- 9/30/2026
- Measure laid before Senate by unanimous consent. (consideration: CR S5231-5236)
- The committee substitute withdrawn by Unanimous Consent.
- Passed/agreed to in Senate: Passed Senate with an amendment by Unanimous Consent.
- Passed Senate with an amendment by Unanimous Consent. (text: CR S5234-5236)
- 2 Cosponsors added.
- 3/23/2026
- Committee on Health, Education, Labor, and Pensions. Reported by Senator Cassidy with an amendment in the nature of a substitute. Without written report.
- Placed on Senate Legislative Calendar under General Orders. Calendar No. 365.
- 2/26/2026
- Committee on Health, Education, Labor, and Pensions. Ordered to be reported with an amendment in the nature of a substitute favorably.
- 12/2/2025
- Read twice and referred to the Committee on Health, Education, Labor, and Pensions.
- 3 Cosponsors added.
- Introduced in Senate
John CornynRepublican · Texas
Maggie HassanDemocrat · New Hampshire
Cindy Hyde-SmithRepublican · Mississippi
Angus KingIndependent · Maine
Mark WarnerDemocrat · Virginia