Bills · HR 3841
IN COMMITTEE· 119TH CONGRESS
House BillHR 3841Health
Healthcare Cybersecurity Act of 2025
INTRO JUN 9· LAST ACTION JUN 10
READING
9MIN
COSPONSORS
2
READER REACTIONS0 TOTAL
NO VOTES YET · BE THE FIRST
- Introduced only
LEGISLATIVE PROGRESS
STEP 2 / 8Introduced
In Committee
Reported
Passed House
Passed Senate
Conference
To President
Became Law
WHAT THE BILL DOES
AI-writtenThis bill matters because cyberattacks on healthcare systems are a growing threat with serious consequences for everyday Americans. When hospitals are hit, it's not just about data breaches; it can shut down systems, delay surgeries, prevent access to patient records, and even divert ambulances, potentially putting lives at risk. The bill aims to counter this by strengthening federal support and guidance for healthcare providers, many of whom struggle with limited resources to combat sophisticated cyber threats.
If this bill becomes law, it could lead to better-prepared hospitals, fewer data breaches, and a more resilient healthcare system capable of maintaining patient care even during a cyberattack. Without it, the current trend of increasing and impactful cyberattacks on healthcare is likely to continue, leaving patient data vulnerable, driving up healthcare costs, and potentially jeopardizing timely and quality medical care for millions. It addresses a critical national security and public health concern by attempting to protect the essential services people rely on daily.
KEY PROVISIONS
4AI-extractedPROVISION 01
Establishes a dedicated liaison from the Cybersecurity and Infrastructure Security Agency (CISA) to the Department of Health and Human Services (HHS).
This creates a direct, expert channel for improved federal coordination and information sharing on healthcare cybersecurity.
PROVISION 02
Requires CISA to provide cybersecurity training to owners and operators of healthcare facilities.
This directly helps healthcare providers improve their defenses against cyberattacks by equipping them with knowledge and skills.
PROVISION 03
Mandates HHS, in coordination with CISA, to update the Healthcare and Public Health Sector-specific Risk Management Plan.
This ensures a comprehensive and current strategy is in place to identify and address cybersecurity challenges across the entire healthcare sector, including specific analysis for smaller and rural providers and medical device security.
PROVISION 04
Requires CISA to coordinate with and provide resources to information sharing organizations and other non-federal healthcare entities.
This broadens the reach of federal cybersecurity support, helping more healthcare organizations access threat intelligence and defensive measures.
SPONSORSHIP
1 + 2
D· Colorado
YRS IN OFFICE
7
BILLS LED
34
COSPONSOR BREAKDOWNBIPARTISAN · 0%
DEM 0 REP 2 IND 0
ACTION TIMELINE
4 EVENTSJUN 10
Referred to the Subcommittee on Cybersecurity and Infrastructure Protection.
JUN 9
Introduced in House
JUN 9
Referred to the Committee on Homeland Security, and in addition to the Committee on Energy and Commerce, for a period to be subsequently determined by the Speaker, in each case for consideration of such provisions as fall within the jurisdiction of the committee concerned.
JUN 9
Referred to the Committee on Homeland Security, and in addition to the Committee on Energy and Commerce, for a period to be subsequently determined by the Speaker, in each case for consideration of such provisions as fall within the jurisdiction of the committee concerned.
BILL INFO
TypeHouse Bill
NumberHR 3841
Congress119th
StatusIn Committee
IntroducedJun 9, 2025
Last actionJun 10, 2025
READER REACTIONS
OVERALL SENTIMENT
No reactions yet. Be the first to weigh in.
Discussion
Loading comments...
IN COMMITTEE· 119TH CONGRESS · HOMELAND SECURITY COMMITTEE · INTRODUCED JUN 9, 2025
House BillHR 3841Health
Healthcare Cybersecurity Act of 2025
INTRODUCED JUN 9, 2025· LAST ACTION JUN 10, 2025
PASSAGE CHANCES
—%
READING
9 min
COSPONSORS
2
COMPLEXITY
Moderate
