,,ii  #aah? ,,congress  #b;d ,session   
,s4 #cggc  ,,9 ,,! ,,s5ate ,,( ,,!      
,,unit$ ,,/ates  ,febru>y #h            
7legislative day1 ,febru>y #g71         
#bjbd,mr4 ,rubio 7= himself1 ,mr4 ,k+1  
,mr4 ,tillis1 & ,ms4 ,hassan7 introduc$ 
! foll[+ bill2 :i* 0 read twice & ref]r$
 to ! ,committee on ,heal?1 ,education1 
,labor1 & ,p5sions  ,a ,,bill  ,to      
require ! ,inspector ,g5]al ( !         
,dep>tm5t ( ,heal? & ,human ,s]vices to 
evaluate ! cyb]security practices &     
protocols ( ! ,dep>tm5t1 & = o!r        
purposes4  #a4 ,%ort title ,?is ,act may
 be cit$ z ! ,/r5g!n+ ,cyb]security 9   
,heal? ,c>e ,act4  #b4 ,evaluation (    
,,hhs cyb]security  7a7 ,9 g5]al ,n lat]
 ?an #b ye>s aft] ! date ( enactm5t (   
?is ,act1 & e #b ye>s !reaft]1 !        
,inspector ,g5]al ( ! ,dep>tm5t ( ,heal?
 & ,human ,s]vices %all evaluate !      
cyb]security practices & protocols ( !  
,dep>tm5t ?r\gh ! conduct ( p5etration  
te/s & o!r te/+ proc$ures to det]m9e h[ 
sy/ems process+1 transmitt+1 or /or+    

mission critical or s5sitive data by1 =1
 or on behalf ( ! ,dep>tm5t is curr5tly1
 or c\ld be compromis$ &-- 7#a7 expose  
pati5t data1 includ+ ,m$ic>e numb]s (   
individuals2 or  7#b7 impact pati5t     
safety4  7b7 ,reports ,n lat] ?an #b    
ye>s aft] ! date ( enactm5t ( ?is ,act1 
& e #b ye>s !reaft]-- 7#a7 ! ,secret>y (
 ,heal? & ,human ,s]vices %all submit to
 ,congress a report t describes h[ !    
,secret>y w update ! cyb]security       
practices & protocols ( ! ,dep>tm5t (   
,heal? & ,human ,s]vices to adapt to !  
late/ cyb]attack /rategies2 &  7#b7 !   
,inspector ,g5]al ( ! ,dep>tm5t ( ,heal?
 & ,human ,s]vices %all submit to       
,congress a report t describes-- 7,a7 h[
 ! ,inspector ,g5]al is curr5tly us+    
,f$]al funds ( ! ,inspector ,g5]al to   
c>ry out subsection 7a72 &  7,b7        
additional fund+ or legislative *anges  
requir$ = ! ,inspector ,g5]al to ma9ta9 
! evaluation describ$ 9 subsection 7a74