S. 3315 · 119th Congress

Health Care Cybersecurity and Resiliency Act of 2026

Introduced on Dec 2, 2025 by Bill Cassidy (R-LA). 5 cosponsors, 2 of them from another party. Latest action (Oct 5, 2026): Held at the desk.

Stage
Passed one chamber
Introduced
Dec 2, 2025
Cosponsors
5
2 from the other party
Policy area
Health
Open in the Congress explorerCongress.govAlert me

Progress

The furthest stage the measure reached. Simple and concurrent resolutions do not go to the President.

  1. Introduced
  2. Reported by committee
  3. Passed one chamber
  4. 4Passed both chambers
  5. 5Sent to the President
  6. 6Became law

Official title

A bill to require the Secretary of Health and Human Services and the Director of the Cybersecurity and Infrastructure Security Agency to coordinate to improve cybersecurity in the health care and public health sectors, and for other purposes.

Subjects

  • Administrative law and regulatory procedures
  • Computer security and identity theft
  • Computers and information technology
  • Congressional oversight
  • Department of Health and Human Services
  • Employment and training programs
  • Government information and archives
  • Government studies and investigations
  • Health programs administration and funding
  • Public-private cooperation
  • Rural conditions and development

Summary

By the Congressional Research Service (Reported to Senate, Mar 23, 2026). Public domain.

Health Care Cybersecurity and Resiliency Act of 2026

This bill expands federal requirements and resources for preventing and responding to cybersecurity incidents in the health care and public health sectors.

The bill directs the Department of Health and Human Services (HHS) to

  • require private health care-related entities to adopt minimum cybersecurity practices (e.g., multifactor authentication),
  • more specifically identify the standards for mitigating penalties relating to violations of health information privacy and security,
  • expand and update biennially a specified plan that details cybersecurity protocols for HHS personnel,
  • provide training and best practices to support the expansion of the workforce for health care cybersecurity,
  • provide guidance on cybersecurity readiness to rural entities, and
  • designate one representative to lead oversight and coordination of cybersecurity activities within HHS.

Also, HHS and the Cybersecurity and Infrastructure Security Agency (CISA) must coordinate to improve health care cybersecurity, including by (1) providing resources for entities receiving information from HHS or CISA programs, and (2) establishing a joint cybersecurity capability plan to coordinate responses to significant incidents.

Additionally, the bill requires health care providers and plans to include the number of individuals affected when notifying individuals of unauthorized access to health information (i.e., a breach).

Sponsor and cosponsors

Cosponsors by party as of the day they signed on. Original cosponsors signed on the day of introduction.

Bill CassidyR-LASponsor

Democrats · 2

Independents · 1

Republicans · 2

Roll calls

Recorded votes on the measure. Most measures move by voice vote or unanimous consent, which record no individual positions.

No recorded roll call on this measure: it moved by voice vote or unanimous consent, or has not reached the floor.

History

Every action as published, oldest first. Roll calls link to how each member voted.

  1. Dec 2, 2025Introduced in Senate
  2. Dec 2, 2025 · SenateRead twice and referred to the Committee on Health, Education, Labor, and Pensions.
  3. Feb 26, 2026 · SenateCommittee on Health, Education, Labor, and Pensions. Ordered to be reported with an amendment in the nature of a substitute favorably.
  4. Mar 23, 2026Committee on Health, Education, Labor, and Pensions. Reported by Senator Cassidy with an amendment in the nature of a substitute. Without written report.
  5. Mar 23, 2026 · SenateCommittee on Health, Education, Labor, and Pensions. Reported by Senator Cassidy with an amendment in the nature of a substitute. Without written report.
  6. Mar 23, 2026 · SenatePlaced on Senate Legislative Calendar under General Orders. Calendar No. 365.
  7. Sep 30, 2026 · SenateMeasure laid before Senate by unanimous consent. (consideration: CR S5231-5236)
  8. Sep 30, 2026 · SenateThe committee substitute withdrawn by Unanimous Consent.
  9. Sep 30, 2026Passed/agreed to in Senate: Passed Senate with an amendment by Unanimous Consent.
  10. Sep 30, 2026 · SenatePassed Senate with an amendment by Unanimous Consent. (text: CR S5234-5236)
  11. Oct 5, 2026 · SenateMessage on Senate action sent to the House.
  12. Oct 5, 2026 · HouseReceived in the House.
  13. Oct 5, 2026 · HouseHeld at the desk.

Committees

Committees and subcommittees the measure was referred to.

Agencies in its committees' jurisdiction

Analisa's mapping of committee jurisdiction to federal agencies; the bill may touch others, or none of these.

Who lobbied on it

Organizations whose lobbying reports (LD-2) name this measure. Spending is what they reported for those quarters on all issues, not on this measure alone.

  1. American Medical Association3 reports
    $18.6M reported (all issues)Federal contractor: AMERICAN MEDICAL ASSOCIATION$371K in contracts, FY2026AI match · 99%
  2. Halcyon Tech, Inc.3 reports
    $120K reported (all issues)
  3. AMERICAN HOSPITAL ASSOCIATION2 reports
    $10.6M reported (all issues)Federal contractor: AMERICAN HOSPITAL ASSOCIATION$1.2M in contracts, FY2026AI match · 99%
  4. National Association of Pediatric Nurse Practitioners2 reports
    $48K reported (all issues)
  5. ADVANCED MEDICAL TECHNOLOGY ASSN1 report
    $971K reported (all issues)
  6. CENTER FOR INDIVIDUAL FREEDOM1 report
    $10K reported (all issues)
  7. Council for Citizens Against Government Waste1 report
    $260K reported (all issues)
  8. FDD Action1 report
    $300K reported (all issues)
  9. Laboratory Corporation of America Holdings1 report
    $890K reported (all issues)Federal contractor: LABORATORY CORPORATION OF AMERICA$7M in contracts, FY2026AI match · 100%

Reports filed in 2025, 2026.

Sources and method

Every figure on this page traces to these records.

  • Bill status: bills and resolutions, sponsors, actions, subjects and CRS summaries (U.S. Government Publishing Office (GovInfo), from Congress.gov (Library of Congress))GovInfo Bill Status bulk data (Congress.gov; summaries by the Congressional Research Service) · data current to Oct 8, 2026 · loaded Oct 8, 2026 · license: Public domain (U.S. Government work, 17 U.S.C. § 105)
  • Members of Congress, their terms, committees and identifiers (The @unitedstates project (from the Biographical Directory of the U.S. Congress, the House and the Senate))unitedstates/congress-legislators: legislators, committees and current committee membership · data current to Oct 3, 2026 · loaded Oct 3, 2026 · license: CC0 1.0 (public domain dedication)
  • House roll-call votes (Office of the Clerk, U.S. House of Representatives)Office of the Clerk, U.S. House of Representatives, roll-call vote records · data current to Oct 3, 2026 · loaded Oct 3, 2026 · license: Public domain (U.S. Government work, 17 U.S.C. § 105)
  • Senate roll-call votes and DW-NOMINATE scores (Voteview (UCLA Department of Political Science))Lewis, Jeffrey B., Keith Poole, Howard Rosenthal, Adam Boche, Aaron Rudkin, and Luke Sonnet (2026). Voteview: Congressional Roll-Call Votes Database. https://voteview.com/ · data current to Oct 3, 2026 · loaded Oct 3, 2026 · license: Free to use with the required citation
  • Lobbying disclosures (LD-1 registrations, LD-2 quarterly reports, LD-203 contribution reports) (Clerk of the U.S. House of Representatives)Clerk of the House, Lobbying Disclosure Act filings (organizations only; lobbyists' names are not loaded) · data current to Oct 7, 2026 · loaded Oct 7, 2026 · license: Public domain (U.S. Government work, 17 U.S.C. § 105)
  • Positions are shown only where a roll call recorded them; voice votes and unanimous consent record none.
  • Money and votes are shown side by side; neither explains the other.