,i  #aaeth ,,congress  #ast ,session    
,h4 ,r4 #daia  ,,in ,,the ,,house ,,of  
,,representatives  ,october #ca1        
#bjag,mr4 ,long 7for himself and ,ms4   
,matsui7 introduced the following bill2 
which was referred to the ,committee on 
,energy and ,commerce  ,a ,,bill  ,to   
amend the ,public ,health ,service ,act 
to authorize the ,secretary of ,health  
and ,human ,services to designate an    
officer within the ,department of       
,health and ,human ,services as having  
primary responsibility for the          
information security 7including         
cybersecurity7 programs of the          
,department1 and for other purposes4    
#a4 ,short title ,this ,act may be cited
 as the ,,hhs ,cybersecurity            
,modernization ,act4  #b4 ,information  
security  7a7 ,authority ,to designate  
chief information security officer      
,title ,,ii of the ,public ,health      
,service ,act is amended by inserting   
after section #bbi of such ,act 7#db    
,u4,s4,c4 #bcg;a7 the following3        

#bbi;,a4 ,authority to designate chief  
information security officer            
,notwithstanding any other provision of 
law-- 7#a7 the ,secretary may designate 
an officer within the ,department as    
having primary responsibility for the   
information security 7including         
cybersecurity7 programs of the          
,department2  7#b7 any such designated  
officer shall report directly to the    
,secretary or directly to another senior
 officer within the ,department of the  
,secretary's choosing2 and  7#c7 the    
,secretary may transfer the functions1  
personnel1 assets1 and liabilities of   
the ,chief ,information ,security       
,officer in the ,office of the ,chief   
,information ,officer of the ,department
 of ,health and ,human ,services1 as    
such position exists on ,september #cj1 
#bjag1 to such designated officer4  4   
7b7 ,report  7#a7 ,in general ,not later
 than #a year after the date of         
enactment of this ,act1 the ,secretary  
of ,health and ,human ,services shall   

develop and submit to the ,committee on 
,energy and ,commerce of the ,house of  
,representatives and the ,committee on  
,health1 ,education1 ,labor1 and        
,pensions of the ,senate a plan on the  
role of the ,department of ,health and  
,human ,services 7in this subsection    
referred to as the ,department7 in      
preparing for and responding to         
cybersecurity threats4  7#b7 ,contents  
,the plan under paragraph 7#a7 shall--  
7,a7 differentiate between--  7i7 the   
responsibilities of the ,department     
overall and each of its agencies and    
offices in maintaining the security and 
integrity of their respective           
information systems2 and  7ii7 the      
responsibilities of the ,department     
overall and each of its agencies and    
offices in regulating and providing     
guidance1 information1 education1       
training1 and assistance to the health  
care sector2  7,b7 specify how the      
,department overall and each of its     
agencies and offices delineates between 

the responsibilities described in       
subparagraph 7,a77i7 and those described
 in subparagraph 7,a77ii7 through       
organization1 personnel1 policies1 and  
procedures2  7,c7 address the           
coordination of the responsibilities    
described in subparagraph 7,a77i7 and   
those described in subparagraph 7,a77ii7
 across the agencies and offices of the 
,department2  7,d7 address any types of 
conflicts that can arise 7within the    
,department or the health care sector7  
because of the ,department having both  
the responsibilities described in       
subparagraph 7,a77i7 and those described
 in subparagraph 7,a77ii72  7,e7        
differentiate between-- 7i7 the role of 
the ,department in regulating the health
 care sector2 and  7ii7 the role of the 
,department as a ,sector-,specific      
,agency for the health care sector under
 ,presidential ,policy ,directive #ba   
7signed on ,february #ab1 #bjac72 and   
7,f7 specify how the ,department        
delineates between the role described in

 subparagraph 7,e77i7 and the role      
described in subparagraph 7,e77ii7      
through organization1 personnel1        
policies1 and procedures4  7c7 ,no      
additional appropriations authorized ,no
 additional funds are authorized to be  
appropriated to carry out this ,act1 or 
the amendments made by this ,act4 ,this 
,act1 and the amendments made by this   
,act1 shall be carried out using amounts
 otherwise authorized or appropriated4