Bills · S 1851
IN COMMITTEE· 119TH CONGRESS
Senate BillS 1851Health
Healthcare Cybersecurity Act of 2025
INTRO MAY 21· LAST ACTION MAY 21
READING
9MIN
COSPONSORS
3
READER REACTIONS0 TOTAL
NO VOTES YET · BE THE FIRST
- Introduced only
LEGISLATIVE PROGRESS
STEP 2 / 8Introduced
In Committee
Reported
Passed Senate
Passed House
Conference
To President
Became Law
WHAT THE BILL DOES
AI-writtenThis bill would most directly affect healthcare providers and organizations across the United States, including hospitals, clinics, public health agencies, and any entity involved in the "Healthcare and Public Health Sector." This includes smaller and rural facilities, as the bill specifically calls for analysis of their unique challenges. Their IT staff, administrators, and even frontline healthcare workers would be impacted through improved cybersecurity protocols, updated risk management plans, and available training designed to protect patient data and ensure continuous care delivery.
Patients would also be significantly affected, though indirectly. Stronger cybersecurity measures aim to prevent disruptions in patient care, protect sensitive health information from breaches, and reduce the financial burden on the healthcare system that cyberattacks often cause. If successful, patients could experience more reliable access to care and greater confidence in the security of their personal health records.
KEY PROVISIONS
4AI-extractedPROVISION 01
Establishes a permanent liaison from the Cybersecurity and Infrastructure Security Agency (CISA) to the Department of Health and Human Services (HHS).
This ensures continuous, direct coordination and communication between the nation's primary cyber defense agency and the health sector's lead agency, improving threat intelligence sharing and incident response.
PROVISION 02
Requires CISA to make training available to owners and operators of healthcare assets on cybersecurity risks and how to reduce them.
This equips healthcare providers with practical knowledge and tools to better protect their systems and patient data from cyberattacks.
PROVISION 03
Mandates an update to the Healthcare and Public Health Sector-specific Risk Management Plan within one year of enactment.
This ensures the overarching strategy for protecting healthcare infrastructure from cyber threats is current, comprehensive, and addresses specific challenges like those faced by rural facilities and the security of medical devices.
PROVISION 04
Directs CISA to coordinate and provide cybersecurity resources to various non-federal healthcare entities and information sharing organizations.
This expands the reach of federal cybersecurity expertise and tools to a wider array of healthcare entities, helping to strengthen the collective defense of the sector.
SPONSORSHIP
1 + 3
D· Nevada
YRS IN OFFICE
9
BILLS LED
77
COSPONSOR BREAKDOWNBIPARTISAN · 0%
DEM 0 REP 2 IND 1
ACTION TIMELINE
2 EVENTSMAY 21
Introduced in Senate
MAY 21
Read twice and referred to the Committee on Homeland Security and Governmental Affairs.
BILL INFO
TypeSenate Bill
NumberS 1851
Congress119th
StatusIn Committee
IntroducedMay 21, 2025
Last actionMay 21, 2025
READER REACTIONS
OVERALL SENTIMENT
No reactions yet. Be the first to weigh in.
Discussion
Loading comments...
IN COMMITTEE· 119TH CONGRESS · HOMELAND SECURITY AND GOVERNMENTAL AFFAIRS COMMITTEE · INTRODUCED MAY 21, 2025
Senate BillS 1851Health
Healthcare Cybersecurity Act of 2025
INTRODUCED MAY 21, 2025· LAST ACTION MAY 21, 2025
PASSAGE CHANCES
—%
READING
9 min
COSPONSORS
3
COMPLEXITY
Moderate
