,i #aag? ,,congress #b;d ,session ,h4 ,r4 #hhjf ,,9 ,,! ,,h\se ,,( ,,repres5tatives ,septemb] #ac1 #bjbb,mr4 ,cr[ 7= himself & ,mr4 ,fitzpatrick7 introduc$ ! foll[+ bill2 :i* 0 ref]r$ to ! ,committee on ,homel& ,security ,a ,,bill ,to enhance ! cyb]security ( ! ,heal?c>e & ,public ,heal? ,sector4 #a4 ,%ort title ,?is ,act may be cit$ z ! ,heal?c>e ,cyb]security ,act ( #bjbb4 #b4 ,def9itions ,9 ?is ,act-- 7#a7 ! t]m ,ag5cy means ! ,cyb]security & ,infra/ructure ,security ,ag5cy2 7#b7 ! t]m ,cyb]security ,/ate ,coord9ator means a ,cyb]security ,/ate ,coord9ator appo9t$ "u section #bbag7;a7 ( ! ,homel& ,security ,act ( #bjjb 7#f ,u4,s4,c4 #ffe;c7a772 7#c7 ! t]m ,dep>tm5t means ! ,dep>tm5t ( ,heal? & ,human ,s]vices2 7#d7 ! t]m ,director means ! ,director ( ! ,ag5cy2 7#e7 ! t]m ,heal?c>e & ,public ,heal? ,sector means ! ,heal?c>e & ,public ,heal? sector1 z id5tifi$ 9 ,presid5tial ,policy ,directive #ba 7,febru>y #ab1 #bjac2 relat+ to critical infra/ructure security & resili5ce72 7#f7 ! t]m ,in=mation ,%>+ & ,analysis ,organizations has ! mean+ giv5 t t]m 9 section #bbbb ( ! ,homel& ,security ,act ( #bjjb 7#f ,u4,s4,c4 #fga72 & 7#g7 ! t]m ,secret>y means ! ,secret>y ( ,heal? & ,human ,s]vices4 #c4 ,f9d+s ,congress f9ds ! foll[+3 7#a7 ,heal?c>e & ,public ,heal? ,sector assets are increas+ly ! t>gets ( malici\s cyb]attacks1 :i* result n only 9 data brea*es1 b also increas$ heal?c>e deliv]y co/s1 & c ultimately affect pati5t heal? outcomes4 7#b7 ,data report$ to ! ,dep>tm5t %[s t almo/ e mon? 9 #bjbj1 m ?an #a1jjj1jjj p 7 affect$ by data brea*es at heal?c>e organizations4 ,cyb]attacks on heal?c>e facilities rose #ee p]c5t 9 #bjbj1 & ^! attacks also result$ 9 a #af p]c5t increase 9 ! av]age co/ ( recov]+ a pati5t record 9 #bjbj1 z comp>$ to #bjai4 7#c7 ,accord+ to data f ! ,(fice = ,civil ,rights ( ! ,dep>tm5t1 heal? in=mation brea*es h increas$ s9ce #bjaf1 & 9 #bjbj alone1 ! ,dep>tm5t report$ #ffc brea*es on cov]$ entities1 z def9$ "u ! ,heal? ,insurance ,portability & ,acc\ntability ,act ( #aiif 7,public ,law #ajd-aia71 affect+ m ?an #ejj p1 ) ov] #cc1jjj1jjj total p affect$ by heal? in=mation brea*es4 #d4 ,ag5cy collaboration ) ! ,dep>tm5t 7a7 ,9 g5]al ,! ,ag5cy %all collaborate ) ! ,dep>tm5t1 includ+ by ent]+ into an agreem5t1 z appropriate1 to improve cyb]security 9 ! ,heal?c>e & ,public ,heal? ,sector4 7b7 ,assi/ance 7#a7 ,9 g5]al ,! ,ag5cy %all coord9ate ) & make res\rces available to ,in=mation ,%>+ & ,analysis ,organizations1 in=mation %>+ & analysis c5t]s1 & non-,f$]al entities t are receiv+ in=mation %>$ ?r\gh programs manag$ by ! ,dep>tm5t4 7#b7 ,scope ,! coord9ation "u p>agraph 7#a7 %all include-- 7,a7 develop+ products specific to ! ne$s ( ,heal?c>e & ,public ,heal? ,sector entities2 & 7,b7 %>+ in=mation relat+ to cyb] ?reat indicators & appropriate def5sive measures4 #e4 ,tra9+ = heal?c>e exp]ts ,! ,cyb] ,security ,advisors & ,cyb]security ,/ate ,coord9ators ( ! ,ag5cy %all1 9 coord9ation1 z appropriate1 ) private sector heal?c>e exp]ts1 provide tra9+ to ,heal?c>e & ,public ,heal? ,sector asset own]s & op]ators on-- 7#a7 cyb]security risks to ! ,heal?c>e & ,public ,heal? ,sector & assets )9 ! sector2 & 7#b7 ways to mitigate ! risks to in=mation sy/ems 9 ! ,heal?c>e & ,public ,heal? ,sector4 #f4 ,sector-specific /udy & report 7a7 ,9 g5]al ,n lat] ?an #a ye> aft] ! date ( enactm5t ( ?is ,act1 ! ,director1 9 consultation ) ! ,secret>y1 %all conduct a /udy & issue a report1 :i* %all include ! foll[+ elem5ts3 7#a7 ,an analysis ( h[ id5tifi$ cyb]security risks specifically impact ,heal?c>e & ,public ,heal? ,sector assets1 includ+ ! impact on rural & small & m$ium-siz$ ,heal?c>e & ,public ,heal? ,sector assets4 7#b7 ,an evaluation ( ! *all5ges ,heal?c>e & ,public ,heal? ,sector assets face 9-- 7,a7 secur+-- 7i7 updat$ in=mation sy/ems own$1 leas$1 or reli$ ^u by ,heal?c>e & ,public ,heal? ,sector assets2 7ii7 m$ical devices or equipm5t own$1 leas$1 or reli$ ^u by ,heal?c>e & ,public ,heal? ,sector assets1 :i* %all include an analysis ( ! ?reat l&scape & cyb]security vuln]abilities ( su* m$ical devices or equipm5t2 & 7iii7 s5sitive pati5t heal? in=mation & electronic heal? records2 7,b7 implem5t+ cyb]security protocols2 & 7,c7 respond+ to data brea*es or cyb]security attacks1 includ+ ! impact on pati5t access to c>e1 quality ( pati5t c>e1 timel9ess ( heal? c>e deliv]y1 & heal? outcomes4 7#c7 ,an evaluation ( be/ practices = ! deploym5t ( tra9$ ,cyb] ,security ,advisors & ,cyb]security ,/ate ,coord9ators ( ! ,ag5cy into ,heal?c>e & ,public ,heal? ,sector assets be=e1 dur+1 & aft] data brea*es or cyb]security attacks4 7#d7 ,an assessm5t ( relevant ,heal?c>e & ,public ,heal? ,sector cyb]security work=ce %ortages1 includ+-- 7,a7 tra9+1 recruitm5t1 & ret5tion issues2 & 7,b7 recomm5dations = h[ to address ^! %ortages & issues1 p>ticul>ly at rural & small & m$ium-siz$ ,heal?c>e & ,public ,heal? ,sector assets4 7#e7 ,an id5tification ( cyb]security *all5ges relat$ to or br\ght on by ! public heal? em]g5cy decl>$ by ! ,secret>y "u section #cai ( ! ,public ,heal? ,s]vice ,act 7#db ,u4,s4,c4 #bdg;d7 on ,janu>y #bg1 #bjbj1 ) respect to ,,covid-#ai4 7#f7 ,an evaluation ( ! mo/ accessible & timely ways = ! ,ag5cy & ! ,dep>tm5t to communicate & deploy cyb]security recomm5dations & tools to ,heal?c>e & ,public ,heal? ,sector assets4 7b7 ,report transmittal ,n lat] ?an #fj days aft] complet+ ! /udy & report requir$ "u subsection 7a71 ! ,director %all pres5t ! complet$ report to ! ,secret>y1 :i* ! ,secret>y may1 9 consultation ) ! ,director1 consult :5 updat+ ! ,heal?c>e & ,public ,heal? ,sector ,specific ,plan ( ! ,secret>y4 7c7 ,congressional brief+ ,n lat] ?an #abj days aft] ! date ( enactm5t ( ?is ,act1 ! ,director1 9 consultation ) ! ,secret>y1 z appropriate1 %all provide a brief+ on ! /atus ( ! /udy & report requir$ "u subsection 7a7 to-- 7#a7 ! ,committee on ,heal?1 ,education1 ,labor1 & ,p5sions & ! ,committee on ,homel& ,security & ,gov]nm5tal ,affairs ( ! ,s5ate2 & 7#b7 ! ,committee on ,en]gy & ,comm]ce & ! ,committee on ,homel& ,security ( ! ,h\se ( ,repres5tatives4