Rosen, Young Introduce Bipartisan Bill to Strengthen Cybersecurity of U.S Health Care System

WASHINGTON, DC – Today, U.S. Senators Jacky Rosen (D-NV) and Todd Young (R-IN) introduced the Healthcare Cybersecurity Act to bolster the health care and public health sectors’ cybersecurity. This bipartisan bill would direct the Cybersecurity and Infrastructure Security Agency (CISA) and the Department of Health and Human Services (HHS) to collaborate on improving cybersecurity and make resources available to non-federal entities relating to cyber threat indicators and appropriate defense measures. It would also create a special liaison to HHS from CISA to support cybersecurity for health care and public health sector entities.

“For years, America’s health care system has faced devastating cyberattacks that have exposed patients’ data, jeopardized access to care, and hurt local and rural medical facilities across Nevada,” said Senator Rosen. “I’m introducing this bipartisan legislation to increase coordination to prevent cybersecurity attacks and make more resources available to hospitals and health care entities to improve their cybersecurity. I’ll keep working with both parties to strengthen our cybersecurity and protect Nevadans from cybercriminals.”

“In recent years, hospitals and other health care facilities in Indiana and across America have experienced a dramatic increase in cyberattacks,” said Senator Young. “Our bipartisan bill will take critical steps to strengthen cybersecurity infrastructure and better protect patients’ personal data.”

Since she joined the Senate, Senator Rosen has been working across party lines to improve our nation’s cybersecurity. Last month, she sent a letter to Secretary of Health and Human Services Robert Kennedy Jr. expressing her deep concerns and demanding answers regarding the elimination of critical information technology and cybersecurity personnel and leadership at HHS. Last year, Senator Rosen announced that the Department of Veterans Affairs (VA) implemented her bipartisan law to strengthen the cybersecurity of veterans’ personal information and data.

###