,,ii #aahth ,,congress #b;d ,session ,s4 #cggc ,,in ,,the ,,senate ,,of ,,the ,,united ,,states ,february #h 7legislative day1 ,february #g71 #bjbd,mr4 ,rubio 7for himself1 ,mr4 ,king1 ,mr4 ,tillis1 and ,ms4 ,hassan7 introduced the following bill2 which was read twice and referred to the ,committee on ,health1 ,education1 ,labor1 and ,pensions ,a ,,bill ,to require the ,inspector ,general of the ,department of ,health and ,human ,services to evaluate the cybersecurity practices and protocols of the ,department1 and for other purposes4 #a4 ,short title ,this ,act may be cited as the ,strengthening ,cybersecurity in ,health ,care ,act4 #b4 ,evaluation of ,,hhs cybersecurity 7a7 ,in general ,not later than #b years after the date of enactment of this ,act1 and every #b years thereafter1 the ,inspector ,general of the ,department of ,health and ,human ,services shall evaluate the cybersecurity practices and protocols of the ,department through the conduct of penetration tests and other testing procedures to determine how systems processing1 transmitting1 or storing mission critical or sensitive data by1 for1 or on behalf of the ,department is currently1 or could be compromised and-- 7#a7 expose patient data1 including ,medicare numbers of individuals2 or 7#b7 impact patient safety4 7b7 ,reports ,not later than #b years after the date of enactment of this ,act1 and every #b years thereafter-- 7#a7 the ,secretary of ,health and ,human ,services shall submit to ,congress a report that describes how the ,secretary will update the cybersecurity practices and protocols of the ,department of ,health and ,human ,services to adapt to the latest cyberattack strategies2 and 7#b7 the ,inspector ,general of the ,department of ,health and ,human ,services shall submit to ,congress a report that describes-- 7,a7 how the ,inspector ,general is currently using ,federal funds of the ,inspector ,general to carry out subsection 7a72 and 7,b7 additional funding or legislative changes required for the ,inspector ,general to maintain the evaluation described in subsection 7a74