Bill Sponsor
Senate Bill 3315
119th Congress(2025-2026)
Health Care Cybersecurity and Resiliency Act of 2026
Active
Amendments
Active
Passed Senate on Sep 30, 2026
Overview
Text
Introduced
Dec 2, 2025
Latest Action
Oct 5, 2026
Origin Chamber
Senate
Type
Bill
Bill
The primary form of legislative measure used to propose law. Depending on the chamber of origin, bills begin with a designation of either H.R. or S. Joint resolution is another form of legislative measure used to propose law.
Bill Number
3315
Congress
119
Policy Area
Health
Health
Primary focus of measure is science or practice of the diagnosis, treatment, and prevention of disease; health services administration and funding, including such programs as Medicare and Medicaid; health personnel and medical education; drug use and safety; health care coverage and insurance; health facilities. Measures concerning controlled substances and drug trafficking may fall under Crime and Law Enforcement policy area.
Sponsorship by Party
Republican
Louisiana
Republican
Mississippi
Democrat
New Hampshire
Democrat
Virginia
Senate Votes (1)
House Votes (0)
checkPassed on September 30, 2026
Status
Passed
Type
Unanimous Consent
Unanimous Consent
A senator may request unanimous consent on the floor to set aside a specified rule of procedure so as to expedite proceedings. If no Senator objects, the Senate permits the action, but if any one senator objects, the request is rejected. Unanimous consent requests with only immediate effects are routinely granted, but ones affecting the floor schedule, the conditions of considering a bill or other business, or the rights of other senators, are normally not offered, or a floor leader will object to it, until all senators concerned have had an opportunity to inform the leaders that they find it acceptable.
Passed/agreed to in Senate: Passed Senate with an amendment by Unanimous Consent.
Summary

Health Care Cybersecurity and Resiliency Act of 2026

This bill expands federal requirements and resources for preventing and responding to cybersecurity incidents in the health care and public health sectors.

The bill directs the Department of Health and Human Services (HHS) to

  • require private health care-related entities to adopt minimum cybersecurity practices (e.g., multifactor authentication),
  • more specifically identify the standards for mitigating penalties relating to violations of health information privacy and security,
  • expand and update biennially a specified plan that details cybersecurity protocols for HHS personnel,
  • provide training and best practices to support the expansion of the workforce for health care cybersecurity, 
  • provide guidance on cybersecurity readiness to rural entities, and
  • designate one representative to lead oversight and coordination of cybersecurity activities within HHS.

Also, HHS and the Cybersecurity and Infrastructure Security Agency (CISA) must coordinate to improve health care cybersecurity, including by (1) providing resources for entities receiving information from HHS or CISA programs, and (2) establishing a joint cybersecurity capability plan to coordinate responses to significant incidents.

Additionally, the bill requires health care providers and plans to include the number of individuals affected when notifying individuals of unauthorized access to health information (i.e., a breach). 

Text (3)
September 30, 2026
March 23, 2026
December 2, 2025
Amendments (1)
Sep 30, 2026
Agreed to in Senate
1
Sponsorship
Senate Amendment 5819
In the nature of a substitute.
Agreed To
Actions (12)
10/05/2026
Held at the desk.
10/05/2026
Received in the House.
10/05/2026
Message on Senate action sent to the House.
09/30/2026
Passed Senate with an amendment by Unanimous Consent. (text: CR S5234-5236)
09/30/2026
Passed/agreed to in Senate: Passed Senate with an amendment by Unanimous Consent.
09/30/2026
The committee substitute withdrawn by Unanimous Consent.
09/30/2026
Measure laid before Senate by unanimous consent. (consideration: CR S5231-5236)
03/23/2026
Placed on Senate Legislative Calendar under General Orders. Calendar No. 365.
03/23/2026
Committee on Health, Education, Labor, and Pensions. Reported by Senator Cassidy with an amendment in the nature of a substitute. Without written report.
02/26/2026
Committee on Health, Education, Labor, and Pensions. Ordered to be reported with an amendment in the nature of a substitute favorably.
12/02/2025
Read twice and referred to the Committee on Health, Education, Labor, and Pensions.
12/02/2025
Introduced in Senate
Graphics
Bill graphics are created by our staff using freely licensed images. You are welcome to share these graphics elsewhere. To view our full catalog of bill graphics, visit the graphics page.
Since bill titles can change, some graphic titles may differ from their most recent bill title.
S.3315 119 Health Care Cybersecurity and Resiliency Act of 2026
Public Record
Record Updated
Oct 7, 2026 11:40:18 AM