119th Congress · introduced in the Senate · Dec 2, 2025
Health Care Cybersecurity and Resiliency Act of 2026
Official title from Congress.gov
Latest action (Oct 5, 2026): Held at the desk.
View on Congress.govPolicy area: Health
Congressional Research Service summary, version: Reported to Senate (Mar 23, 2026)
Health Care Cybersecurity and Resiliency Act of 2026
This bill expands federal requirements and resources for preventing and responding to cybersecurity incidents in the health care and public health sectors.
The bill directs the Department of Health and Human Services (HHS) to
• require private health care-related entities to adopt minimum cybersecurity practices (e.g., multifactor authentication),
• more specifically identify the standards for mitigating penalties relating to violations of health information privacy and security,
• expand and update biennially a specified plan that details cybersecurity protocols for HHS personnel,
• provide training and best practices to support the expansion of the workforce for health care cybersecurity,
• provide guidance on cybersecurity readiness to rural entities, and
• designate one representative to lead oversight and coordination of cybersecurity activities within HHS.
Also, HHS and the Cybersecurity and Infrastructure Security Agency (CISA) must coordinate to improve health care cybersecurity, including by (1) providing resources for entities receiving information from HHS or CISA programs, and (2) establishing a joint cybersecurity capability plan to coordinate responses to significant incidents.
Additionally, the bill requires health care providers and plans to include the number of individuals affected when notifying individuals of unauthorized access to health information (i.e., a breach).
Show less of the summaryIncludes amendment, cloture, and procedural votes. Each is labeled with its exact question; only a passage question is a vote to pass the bill.
No recorded roll calls on this bill in coverage.
Held at the desk.
Received in the House.
Message on Senate action sent to the House.
Passed Senate with an amendment by Unanimous Consent. (text: CR S5234-5236)
Passed/agreed to in Senate: Passed Senate with an amendment by Unanimous Consent.
The committee substitute withdrawn by Unanimous Consent.
Measure laid before Senate by unanimous consent. (consideration: CR S5231-5236)
Placed on Senate Legislative Calendar under General Orders. Calendar No. 365.
Committee on Health, Education, Labor, and Pensions. Reported by Senator Cassidy with an amendment in the nature of a substitute. Without written report.
Committee on Health, Education, Labor, and Pensions. Reported by Senator Cassidy with an amendment in the nature of a substitute. Without written report.
Committee on Health, Education, Labor, and Pensions. Ordered to be reported with an amendment in the nature of a substitute favorably.
Read twice and referred to the Committee on Health, Education, Labor, and Pensions.
Introduced in Senate
Actions from Congress.gov, newest first.
Administrative law and regulatory procedures · Computer security and identity theft · Computers and information technology · Congressional oversight · Department of Health and Human Services · Employment and training programs · Government information and archives · Government studies and investigations · Health programs administration and funding · Public-private cooperation · Rural conditions and development
LD-2 reports whose issue descriptions explicitly cite this bill (bill type and number validated against Congress.gov records). A citation does not establish the client's position or any contact with a member.
Loading lobbying reportsCoverage: reports for 2025 onward, posted Jan 1, 2025 through Oct 23, 2026.
27 citations; showing the 25 most recently posted.
NATIONAL ASSOCIATION OF PEDIATRIC NURSE PRACTITIONERS · lobbying firm or registrant: MASON CONSULTING, LLC
2026 Q3 report (Jul 1, 2026 – Sep 30, 2026) · posted Oct 21, 2026 · issue area: Health Issues
$24,000
Paid to lobbying firm
…025 S. 3062/H.R. 8623, Guidelines for User Age-verification and Responsible Dialogue (GUARD) Act of 2025 S. 3199, 988 Lifeline Location Improvement Act of 2025 S. 3315, Health Care Cybersecurity and Resiliency Act of 2025 S. 3386, Health Care Freedom for Patients Act of 2025 S. 3402, Ensuring Excellence in Mental Health Act S…
Congress inferred from the report year; bill number and the title cited with it match Congress.gov records, and the bill predates the report. The amount is lobbying spending for every issue on this report, not this bill alone, and none of it is paid to any member of Congress. View filing
AMERICA'S HEALTH INSURANCE PLANS INC (AHIP) · lobbying firm or registrant: AMERICA'S HEALTH INSURANCE PLANS, INC. (AHIP)
2026 Q3 report (Jul 1, 2026 – Sep 30, 2026) · posted Oct 20, 2026 · issue area: Health Issues
$3,010,000
Spent on own lobbying
…Act - Sen. Paul, Rand - Association health plans treatment S. 2709 - Telehealth Modernization Act - Sen. Scott, Tim - Medicare telehealth flexibility extension S. 3315 - Health Care Cybersecurity and Resiliency Act - Sen. Cassidy, Bill - Cybersecurity response and reporting requirements S. 3822 - Break Up Big Medicine Act - S…
Congress inferred from the report year; bill number and the title cited with it match Congress.gov records, and the bill predates the report. The amount is lobbying spending for every issue on this report, not this bill alone, and none of it is paid to any member of Congress. View filing
FEDERATION OF AMERICAN HOSPITALS · lobbying firm or registrant: FEDERATION OF AMERICAN HOSPITALS
2026 Q3 report (Jul 1, 2026 – Sep 30, 2026) · posted Oct 20, 2026 · issue area: Health Issues
$760,000
Spent on own lobbying
…s Act reform Rural Health Transformation Fund re: implementation S.709/HR1585, Conrad State 30 and Physician Access Reauthorization Act re: physician workforce S. 3315, Health Care Cybersecurity and Resiliency Act of 2025 re: cybersecurity requirements
Congress inferred from the report year; bill number and the title cited with it match Congress.gov records, and the bill predates the report. The amount is lobbying spending for every issue on this report, not this bill alone, and none of it is paid to any member of Congress. View filing
AMERICAN HOSPITAL ASSOCIATION · lobbying firm or registrant: AMERICAN HOSPITAL ASSOCIATION
2026 Q3 report (Jul 1, 2026 – Sep 30, 2026) · posted Oct 20, 2026 · issue area: Health Issues
$3,840,000
Spent on own lobbying
…s; S. 2169 / H.R. 9908, Rural Hospital Cybersecurity Enhancement Act, all provisions; H.R. 5283 / S. 2759, Healthcare Workforce Resilience Act, all provisions; S. 3315, Health Care Cybersecurity and Resiliency Act of 2025, all provisions; DRAFT, Health Care Cybersecurity and Resiliency Act of 2026, all provisions; S. 2355 / H…
Congress inferred from the report year; bill number and the title cited with it match Congress.gov records, and the bill predates the report. The amount is lobbying spending for every issue on this report, not this bill alone, and none of it is paid to any member of Congress. View filing
HEALTHCARE PRIVACY FORUM, LLC DBA, HEALTHCARE TRUST INSTITUTE · lobbying firm or registrant: AVENUE SOLUTIONS
2026 Q3 report (Jul 1, 2026 – Sep 30, 2026) · posted Oct 20, 2026 · issue area: Health Issues
$30,000
Paid to lobbying firm
Issues related to healthcare data privacy, cybersecurity, and artificial intelligence; S. 3315, Health Care Cybersecurity and Resiliency Act of 2026; S. 3097, Health Information Privacy Reform Act
Congress inferred from the report year; bill number and the title cited with it match Congress.gov records, and the bill predates the report. The amount is lobbying spending for every issue on this report, not this bill alone, and none of it is paid to any member of Congress. View filing
ADVANCED MEDICAL TECHNOLOGY ASSN · lobbying firm or registrant: ADVANCED MEDICAL TECHNOLOGY ASSN
2026 Q3 report (Jul 1, 2026 – Sep 30, 2026) · posted Oct 20, 2026 · issue area: Health Issues
$1,080,000
Spent on own lobbying
…A regulation of diagnostic tests Issues related to the Countering CCP Act (S. 4939) Issues related to the Health Care Cybersecurity and Resiliency Act of 2025 (S. 3315)
Congress inferred from the report year; bill number and the title cited with it match Congress.gov records, and the bill predates the report. The amount is lobbying spending for every issue on this report, not this bill alone, and none of it is paid to any member of Congress. View filing
ORACLE CORPORATION · lobbying firm or registrant: ORACLE CORPORATION
2026 Q3 report (Jul 1, 2026 – Sep 30, 2026) · posted Oct 20, 2026 · issue area: Health Issues
$2,890,000
Spent on own lobbying
H.R. 8413 - SECURE Data Act S.3315 - Health Care Cybersecurity and Resiliency Act of 2026 Issues related to modernization of healthcare technology and use of Artificial Intelligence in healthcar…
Congress inferred from the report year; bill number and the title cited with it match Congress.gov records, and the bill predates the report. The amount is lobbying spending for every issue on this report, not this bill alone, and none of it is paid to any member of Congress. View filing
COLLEGE OF HEALTHCARE INFORMATION MANAGEMENT EXECUTIVES · lobbying firm or registrant: COLLEGE OF HEALTHCARE INFORMATION MANAGEMENT EXECUTIVES
2026 Q3 report (Jul 1, 2026 – Sep 30, 2026) · posted Oct 19, 2026 · issue area: Homeland Security
$30,000
Spent on own lobbying
cyber CISA Reauthorization Health Care Cybersecurity and Resiliency Act of 2026 (S.3315)
Congress inferred from the report year; bill number and the title cited with it match Congress.gov records, and the bill predates the report. The amount is lobbying spending for every issue on this report, not this bill alone, and none of it is paid to any member of Congress. View filing
AMERICAN MEDICAL ASSOCIATION · lobbying firm or registrant: AMERICAN MEDICAL ASSOCIATION
2026 Q3 report (Jul 1, 2026 – Sep 30, 2026) · posted Oct 19, 2026 · issue area: Health Issues
$4,540,000
Spent on own lobbying
…ions S.266 - Dr. Lorna Breen Health Care Provider Protection Reauthorization Act, all provisions S.3097 - Health Information Privacy Reform Act, all provisions S.3315 - Health Care Cybersecurity and Resiliency Act of 2026, all provisions S.3599 - Affordable CHOICE Act, all provisions S.3907 - Health Information Privacy Refor…
Congress inferred from the report year; bill number and the title cited with it match Congress.gov records, and the bill predates the report. The amount is lobbying spending for every issue on this report, not this bill alone, and none of it is paid to any member of Congress. View filing
BOSTON SCIENTIFIC CORPORATION · lobbying firm or registrant: BOSTON SCIENTIFIC CORPORATION
2026 Q3 report (Jul 1, 2026 – Sep 30, 2026) · posted Oct 15, 2026 · issue area: Science/Technology
$642,000
Spent on own lobbying
…of language preempting state frameworks by establishing a single federal standard. Issues related to the Health Care Cybersecurity and Resiliency Act of 2026 (S.3315) - Advocacy related to the inclusion of language excluding medical device manufacturers from S. 3315 SEC. 8. Issues related to cybersecurity, including reautho…
Congress inferred from the report year; bill number and the title cited with it match Congress.gov records, and the bill predates the report. The amount is lobbying spending for every issue on this report, not this bill alone, and none of it is paid to any member of Congress. View filing
AMERICA'S ESSENTIAL HOSPITALS · lobbying firm or registrant: AMERICA'S ESSENTIAL HOSPITALS
2026 Q3 report (Jul 1, 2026 – Sep 30, 2026) · posted Oct 15, 2026 · issue area: Health Issues
$470,000
Spent on own lobbying
…d to hospital closures issues related to health care workforce Issues related to hospital cybersecurity H.R. 9908, Rural Hospital Cybersecurity Enhancement Act S.3315 Health Care Cybersecurity and Resiliency Act of 2026 S.5443, Health Infrastructure Security and Accountability Act
Congress inferred from the report year; bill number and the title cited with it match Congress.gov records, and the bill predates the report. The amount is lobbying spending for every issue on this report, not this bill alone, and none of it is paid to any member of Congress. View filing
NATIONAL ASSOCIATION OF PEDIATRIC NURSE PRACTITIONERS · lobbying firm or registrant: MASON CONSULTING, LLC
2026 Q2 report (Apr 1, 2026 – Jun 30, 2026) · posted Jul 22, 2026 · issue area: Health Issues
$24,000
Paid to lobbying firm
…Act S. 2857/H.R. 5448, Protecting Free Vaccines Act S. 2954, Health Care Workforce Expansion Act of 2025 S. 3199, 988 Lifeline Location Improvement Act of 2025 S. 3315, Health Care Cybersecurity and Resiliency Act of 2025 S. 3386, Health Care Freedom for Patients Act of 2025 S. 3402, Ensuring Excellence in Mental Health Act S…
Congress inferred from the report year; bill number and the title cited with it match Congress.gov records, and the bill predates the report. The amount is lobbying spending for every issue on this report, not this bill alone, and none of it is paid to any member of Congress. View filing
AMERICAN HOSPITAL ASSOCIATION · lobbying firm or registrant: AMERICAN HOSPITAL ASSOCIATION
2026 Q2 report (Apr 1, 2026 – Jun 30, 2026) · posted Jul 20, 2026 · issue area: Health Issues
$4,470,000
Spent on own lobbying
…ll provisions; S. 2169, Rural Hospital Cybersecurity Enhancement Act, all provisions; H.R. 5283 / S. 2759, Healthcare Workforce Resilience Act, all provisions; S. 3315, Health Care Cybersecurity and Resiliency Act of 2025, all provisions; H.R. 5256, 340B Access Act, all provisions; S. 2355 / H.R. 5582, Patients Deserve Price…
Congress inferred from the report year; bill number and the title cited with it match Congress.gov records, and the bill predates the report. The amount is lobbying spending for every issue on this report, not this bill alone, and none of it is paid to any member of Congress. View filing
HALCYON TECH, INC. · lobbying firm or registrant: HILL EAST GROUP, LLC
2026 Q2 report (Apr 1, 2026 – Jun 30, 2026) · posted Jul 20, 2026 · issue area: Homeland Security
$40,000
Paid to lobbying firm
…information sharing authorities: H.R. 5079, Widespread Information Management for the Welfare of Infrastructure and Government Act; H.R. 5078, The PILLAR Act; S. 3315, The Healthcare Cybersecurity and Resiliency Act; S. 2983, Protecting America from Cyber Threats Act.
Congress inferred from the report year; bill number and the title cited with it match Congress.gov records, and the bill predates the report. The amount is lobbying spending for every issue on this report, not this bill alone, and none of it is paid to any member of Congress. View filing
ADVANCED MEDICAL TECHNOLOGY ASSN · lobbying firm or registrant: ADVANCED MEDICAL TECHNOLOGY ASSN
2026 Q2 report (Apr 1, 2026 – Jun 30, 2026) · posted Jul 20, 2026 · issue area: Health Issues
$971,000
Spent on own lobbying
…A regulation of diagnostic tests Issues related to the Countering CCP Act (S. 4939) Issues related to the Health Care Cybersecurity and Resiliency Act of 2025 (S. 3315)
Congress inferred from the report year; bill number and the title cited with it match Congress.gov records, and the bill predates the report. The amount is lobbying spending for every issue on this report, not this bill alone, and none of it is paid to any member of Congress. View filing
AMERICAN MEDICAL ASSOCIATION · lobbying firm or registrant: AMERICAN MEDICAL ASSOCIATION
2026 Q2 report (Apr 1, 2026 – Jun 30, 2026) · amended · posted Jul 20, 2026 · issue area: Health Issues
$5,130,000
Spent on own lobbying
…Health Care Provider Protection Reauthorization Act, all provisions S.266 - Dr. Lorna Breen Health Care Provider Protection Reauthorization Act, all provisions S.3315 - Health Care Cybersecurity and Resiliency Act of 2026, all provisions S.3097 - Health Information Privacy Reform Act, all provisions H.R.4583 - Living Donor P…
Congress inferred from the report year; bill number and the title cited with it match Congress.gov records, and the bill predates the report. The amount is lobbying spending for every issue on this report, not this bill alone, and none of it is paid to any member of Congress. View filing
FDD ACTION · lobbying firm or registrant: FDD ACTION
2025 Q4 report (Oct 1, 2025 – Dec 31, 2025) · amended · posted Apr 24, 2026 · issue area: Science/Technology
$300,000
Spent on own lobbying
…ion for National Artificial Intelligence Act of 2025, all provisions. S. 3251, State and Local Cybersecurity Grant Program Reauthorization Act, all provisions. S. 3315, Health Care Cybersecurity and Resiliency Act of 2025, all provisions. S. 418, Defending Defense Research from Chinese Communist Party Espionage Act of 2025, a…
Congress inferred from the report year; bill number and the title cited with it match Congress.gov records, and the bill predates the report. The amount is lobbying spending for every issue on this report, not this bill alone, and none of it is paid to any member of Congress. View filing
NATIONAL ASSOCIATION OF PEDIATRIC NURSE PRACTITIONERS · lobbying firm or registrant: MASON CONSULTING, LLC
2026 Q1 report (Jan 1, 2026 – Mar 31, 2026) · posted Apr 24, 2026 · issue area: Health Issues
$24,000
Paid to lobbying firm
…Act S. 2857/H.R. 5448, Protecting Free Vaccines Act S. 2954, Health Care Workforce Expansion Act of 2025 S. 3199, 988 Lifeline Location Improvement Act of 2025 S. 3315, Health Care Cybersecurity and Resiliency Act of 2025 S. 3386, Health Care Freedom for Patients Act of 2025 S. 3853, End the Vaccine Carveout Act S. 4088, Welc…
Congress inferred from the report year; bill number and the title cited with it match Congress.gov records, and the bill predates the report. The amount is lobbying spending for every issue on this report, not this bill alone, and none of it is paid to any member of Congress. View filing
HALCYON TECH, INC. · lobbying firm or registrant: HILL EAST GROUP, LLC
2026 Q1 report (Jan 1, 2026 – Mar 31, 2026) · posted Apr 21, 2026 · issue area: Homeland Security
$40,000
Paid to lobbying firm
…information sharing authorities: H.R. 5079, Widespread Information Management for the Welfare of Infrastructure and Government Act; H.R. 5078, The PILLAR Act; S. 3315, The Healthcare Cybersecurity and Resiliency Act; S. 2983, Protecting America from Cyber Threats Act.
Congress inferred from the report year; bill number and the title cited with it match Congress.gov records, and the bill predates the report. The amount is lobbying spending for every issue on this report, not this bill alone, and none of it is paid to any member of Congress. View filing
AMERICAN HOSPITAL ASSOCIATION · lobbying firm or registrant: AMERICAN HOSPITAL ASSOCIATION
2026 Q1 report (Jan 1, 2026 – Mar 31, 2026) · posted Apr 20, 2026 · issue area: Health Issues
$6,080,000
Spent on own lobbying
…l provisions; S. 2169, Rural, Hospital Cybersecurity Enhancement Act, all provisions; H.R. 5283 / S. 2759, Healthcare Workforce Resilience Act, all provisions; S. 3315, Health Care Cybersecurity and Resiliency Act of 2025, all provisions; H.R. 5256, 340B Access Act, all provisions; S. 1929, SEPSIS Act, all provisions; S. 2355…
Congress inferred from the report year; bill number and the title cited with it match Congress.gov records, and the bill predates the report. The amount is lobbying spending for every issue on this report, not this bill alone, and none of it is paid to any member of Congress. View filing
AMERICAN MEDICAL ASSOCIATION · lobbying firm or registrant: AMERICAN MEDICAL ASSOCIATION
2026 Q1 report (Jan 1, 2026 – Mar 31, 2026) · amended · posted Apr 20, 2026 · issue area: Health Issues
$7,970,000
Spent on own lobbying
…dward Organ Transplant Discrimination Prevention Act, all provisions S. 1782, Charlotte Woodward Organ Transplant Discrimination Prevention Act, all provisions S. 3315, Health Care Cybersecurity and Resiliency Act of 2026, all provisions S. 3097, Health Information Privacy Reform Act, all provisions H.R. 4583, Living Donor Pr…
Congress inferred from the report year; bill number and the title cited with it match Congress.gov records, and the bill predates the report. The amount is lobbying spending for every issue on this report, not this bill alone, and none of it is paid to any member of Congress. View filing
CENTER FOR INDIVIDUAL FREEDOM · lobbying firm or registrant: CENTER FOR INDIVIDUAL FREEDOM
2026 Q1 report (Jan 1, 2026 – Mar 31, 2026) · posted Apr 20, 2026 · issue area: Health Issues
$10,000
Spent on own lobbying
S. 3315 - Health Care Cybersecurity & Resiliency Act of 2025 - Correspondence with United States Senate and United States House of Representatives urging opposition to…
Congress inferred from the report year; bill number and the title cited with it match Congress.gov records, and the bill predates the report. The amount is lobbying spending for every issue on this report, not this bill alone, and none of it is paid to any member of Congress. View filing
LABORATORY CORPORATION OF AMERICA HOLDINGS · lobbying firm or registrant: LABORATORY CORPORATION OF AMERICA HOLDINGS
2026 Q1 report (Jan 1, 2026 – Mar 31, 2026) · posted Apr 13, 2026 · issue area: Health Issues
$890,000
Spent on own lobbying
…to Medicare coverage of genetic counselor services; H.R. 5582/S. 2355, the Patients Deserve Price Tags Act, provisions relating to lab test price transparency; S. 3315, the Health Care Cybersecurity and Resiliency Act, provisions relating to cybersecurity; Federal policy relating to access to mandatory code sets for administr…
Congress inferred from the report year; bill number and the title cited with it match Congress.gov records, and the bill predates the report. The amount is lobbying spending for every issue on this report, not this bill alone, and none of it is paid to any member of Congress. View filing
COUNCIL FOR CITIZENS AGAINST GOVERNMENT WASTE · lobbying firm or registrant: COUNCIL FOR CITIZENS AGAINST GOVERNMENT WASTE
2026 Q1 report (Jan 1, 2026 – Mar 31, 2026) · posted Apr 13, 2026 · issue area: Health Issues
$260,000
Spent on own lobbying
…Reform and Elimination of CMMI Support 340B Reform and Elimination of CMMI Support Elimination of CMMI Support Elimination of CMMI Oppose Sanders Amendments to S.3315 Oppose H.R.7837
Congress inferred from the report year; bill number matches Congress.gov records and the bill predates the report; no title was cited with it. The amount is lobbying spending for every issue on this report, not this bill alone, and none of it is paid to any member of Congress. View filing
CONSERVATIVES FOR PROPERTY RIGHTS · lobbying firm or registrant: ELITE STRATEGIC SERVICES
2026 Q1 report (Jan 1, 2026 – Mar 31, 2026) · posted Apr 1, 2026 · issue area: Health Issues
$25,000
Paid to lobbying firm
…Elimination of the Center for Medicare and Medicaid Innovation (CMMI) Approval of reauthorization of Floridas Medicaid hospital-directed payment program (DPP) S. 3315 (Health Care Cybersecurity & Resiliency Act) regarding Sen. Bernie Sanderss amendments to codify Most Favored Nation drug price controls
Congress inferred from the report year; bill number and the title cited with it match Congress.gov records, and the bill predates the report. The amount is lobbying spending for every issue on this report, not this bill alone, and none of it is paid to any member of Congress. View filing