Highlight any text to annotate

This bill requires the Inspector General of the Department of Health and Human Services to conduct comprehensive cybersecurity evaluations of the agency every two years, starting within two years of enactment. The evaluations will use penetration tests and other security assessments to identify vulnerabilities in systems that handle patient data, Medicare information, and other sensitive health information. The legislation affects HHS and the healthcare systems it oversees, where any cybersecurity breaches could expose millions of patients' personal information or compromise patient safety. Following each evaluation, the HHS Secretary must submit a report to Congress describing planned updates to the agency's cybersecurity practices, while the Inspector General must report on how federal funds are being used for these evaluations and what additional legislative authority may be needed to continue them.

Add a comment

Sign in to comment on this bill.

Annotate the text

Highlight any passage on the Summary or Full Text tab to attach a note. Annotations appear on the Annotations tab.