Healthcare Cybersecurity Act of 2025

Key Provisions

• CISA would work with HHS to improve cybersecurity for hospitals and clinics.
• CISA would offer training to healthcare providers on how to protect their computer systems from cyberattacks.
• HHS would update a plan for managing cybersecurity risks in the healthcare sector within one year.
• The updated plan would study how cyberattacks affect rural and smaller healthcare facilities, medical devices, and patient data, and suggest ways to address cybersecurity worker shortages.
• CISA would assign a cybersecurity expert to work directly with HHS to coordinate efforts and share threat information.
• HHS may create rules to identify "high-risk" healthcare facilities and prioritize resources to help them.