Senators Unveil New Health Care Cybersecurity Proposal
On November 22, 2024, Senator Bill Cassidy (R-LA), current Ranking Member and expected Chairman next Congress of the Senate Health, Education, Labor, and Pensions (HELP) Committee, introduced the Health Care Cybersecurity and Resiliency Act of 2024, which would strengthen cybersecurity requirements in the health care sector. Senator Cassidy introduced the legislation alongside fellow members of the Senate Health Care Cybersecurity Working Group, including Senators Mark Warner (D-VA), John Cornyn (R-TX), and Maggie Hassan (D-NH).
The Health Care Cybersecurity and Resiliency Act of 2024 would direct the Secretary of Health and Human Services (HHS) to share information with the Director of the Cybersecurity and Infrastructure Security Agency (CISA) and collaborate in developing a resilience strategy for cyberattacks in the health care sector. The bill would update reporting requirements following a health information breach and mandate that health care entities adopt minimum standards such as multifactor authentication, data encryption, and regular audits, including penetration tests. The bill also would authorize grants administered by the Health Resources & Services Administration (HRSA) for technology updates, workforce training, and participation in health cybersecurity threat information sharing organizations.
Impact on General Dentistry: The AGD supports appropriate cybersecurity measures within the practice of dentistry. We continue to stay abreast of the most up-to-date cybersecurity protections within the health care field and expect Congress to further consider health care cybersecurity policies in 2025.
The Health Care Cybersecurity and Resiliency Act of 2024 would direct the Secretary of Health and Human Services (HHS) to share information with the Director of the Cybersecurity and Infrastructure Security Agency (CISA) and collaborate in developing a resilience strategy for cyberattacks in the health care sector. The bill would update reporting requirements following a health information breach and mandate that health care entities adopt minimum standards such as multifactor authentication, data encryption, and regular audits, including penetration tests. The bill also would authorize grants administered by the Health Resources & Services Administration (HRSA) for technology updates, workforce training, and participation in health cybersecurity threat information sharing organizations.
Impact on General Dentistry: The AGD supports appropriate cybersecurity measures within the practice of dentistry. We continue to stay abreast of the most up-to-date cybersecurity protections within the health care field and expect Congress to further consider health care cybersecurity policies in 2025.