Skip to main content
S 3904 117th Congress Senate Health Cardiovascular and respiratory health Computer security and identity theft Congressional oversight Emergency medical services and trauma care Employee hiring Government studies and investigations Health care coverage and access Health care quality Health information and medical records Health personnel Health technology, devices, supplies Infectious and parasitic diseases Rural conditions and development Technology assessment

Healthcare Cybersecurity Act of 2022

Introduced: March 23, 2022 Introduced by: Rosen, Jacky Democratic · Nevada See on congress.gov
This bill died when the 117th Congress ended
It never became law before the 117th Congress (2021–2022) adjourned, and bills don't carry over to the next Congress. It would have to be reintroduced. You can still save it for reference, but it won't receive updates.
 Everywhere this bill has been 5 steps
Introduced
In committee
Reported out
Passed House
Passed Senate
To President
Became law
Oct 18, 2022
Placed on Senate Legislative Calendar under General Orders. Calendar No. 527.
Oct 18, 2022
Committee on Homeland Security and Governmental Affairs. Reported by Senator Peters under authority of the order of the Senate of 10/14/2022 with an amendment in the nature of a substitute and an amendment to the title. With written report No. 117-177.
Mar 30, 2022
Committee on Homeland Security and Governmental Affairs. Ordered to be reported with an amendment in the nature of a substitute favorably.
Mar 23, 2022
Read twice and referred to the Committee on Homeland Security and Governmental Affairs.
Mar 23, 2022
Introduced in Senate
 Ask about this bill AI · grounded in the bill text

Have a question about what this bill does? Ask in plain English; the answer is drawn from the bill's actual text and official record, and it'll tell you when something isn't in the text rather than guess.

AI answers can be imperfect; always confirm against the full bill text.

 Plain-English summary Congressional Research Service

Healthcare Cybersecurity Act of 2022

This bill requires the Department of Health and Human Services (HHS) to undertake activities to improve the cybersecurity of the health care and public health sector.

HHS must coordinate with the Cybersecurity and Infrastructure Security Agency (CISA) on these activities; in particular, CISA must make resources, including cyber-threat indicators and appropriate defense measures, available to federal and nonfederal entities that receive information through HHS programs.

In addition, HHS must provide training on cybersecurity risks and mitigation strategies to owners of assets in the health care and public health sector.

HHS must also update the Healthcare and Public Health Sector Specific Plan, which guides the sector's effort to enhance the security and resilience of critical infrastructure. The updates must address, among other topics, the impact of the risks on rural entities and small- and medium-sized entities, cybersecurity workforce shortages in the sector, and challenges related to the COVID-19 emergency.

What's happening now October 18, 2022

Placed on Senate Legislative Calendar under General Orders. Calendar No. 527.

 Related & companion bills 1
 Bill text 2 versions

Source documents hosted by congress.gov.

 Committees of jurisdiction 1
Cite this page click to expand
APA
U.S. Congress. (2026). S. 3904: Healthcare Cybersecurity Act of 2022. 117th Congress. Open America. https://openamerica.io/bill/117-S-3904/
MLA
"S. 3904: Healthcare Cybersecurity Act of 2022." 117th Congress, 2026, Open America, https://openamerica.io/bill/117-S-3904/.
Bluebook (legal)
S. 3904, 117th Cong. (2026), https://openamerica.io/bill/117-S-3904/.
Markdown link
[S. 3904: Healthcare Cybersecurity Act of 2022](https://openamerica.io/bill/117-S-3904/)
Report a problem