The civic record
Read. Follow. Verify.Health Care Cybersecurity and Resiliency Act of 2026
Record date · June 24, 2026
Track this bill to get notified when it advances a stage. One tap to stop, anytime.
What This Bill Does
This proposed legislation mandates new cybersecurity standards for the healthcare industry, requiring hospitals and health providers to adopt specific risk-based protections like and data encryption. It also establishes federal grant programs to help rural and nonprofit health facilities upgrade their digital infrastructure and creates new coordination protocols between the Department of Health and Human Services (HHS) and the Cybersecurity and Infrastructure Security Agency (CISA).
If enacted, this bill would require all non-governmental healthcare entities to implement mandatory cybersecurity standards by 2029, while providing new federal grant funding to assist rural and nonprofit facilities with the costs of these upgrades.
Who It Affects
Groups the bill's text affects, as described in the record. Being affected is not a position for or against it.
Non-governmental healthcare entities
These entities must adopt new minimum risk-based cybersecurity standards and comply with updated reporting requirements.
Rural health clinics
These facilities are eligible for new federal grants and will receive specific guidance on cybersecurity readiness.
Department of Health and Human Services
The agency is tasked with creating new regulations, managing grant programs, and coordinating with other federal agencies on cybersecurity.
Key Facts
You don't have to trust us. Each fact below is taken straight from the official document - click any one to see the exact passage, highlighted in the original.
Frequently Asked Questions
Will my doctor's office be required to change their computer security?
Is there financial help available for small or rural clinics to meet these new rules?
What else do you want to know?
News Coverage
Follow the record
Votes, people, money & the original sourceFull breakdown
Who this bill affects and the strongest case for and against it, written only from the bill’s own text.
Discoveries
Patterns POLISCOPE noticed across the record. These are observations to investigate, not conclusions.
Mandatory Cybersecurity Standards
The bill shifts from voluntary cybersecurity guidance to mandatory risk-based standards for the healthcare sector, enforced by HHS.
Connected Entities
Sources
www.govinfo.gov
Analysis Score
0–100- Significance85How much this matters to a regular citizen
- Controversy20Intensity of disagreement among stakeholders
- Entertainment5Compellingness for a non-policy-wonk reader
- Buzz30Current news / social attention level
Publisher tools