Health Care Cybersecurity and Resiliency Act of 2026
Introduced Dec 2, 2025 by Sen. Bill Cassidy
The Senate passed it. The House has to pass it before it can reach the President.
This bill expands federal requirements and resources for preventing and responding to cybersecurity incidents in the health care and public health sectors.
The bill directs the Department of Health and Human Services (HHS) to
require private health care-related entities to adopt minimum cybersecurity practices (e.g., multifactor authentication),
more specifically identify the standards for mitigating penalties relating to violations of health information privacy and security,
Read the full summary on Congress.govSummary by the Congressional Research Service.
No recorded roll-call vote on this bill — it may have passed by voice vote or unanimous consent, which don't record individual votes.
- Oct 5, 2026Held at the desk.
- Oct 5, 2026Received in the House.
- Oct 5, 2026Message on Senate action sent to the House.
- Sep 30, 2026Passed Senate with an amendment by Unanimous Consent. (text: CR S5234-5236)
- Sep 30, 2026Passed/agreed to in Senate: Passed Senate with an amendment by Unanimous Consent.
- Sep 30, 2026The committee substitute withdrawn by Unanimous Consent.
- Sep 30, 2026Measure laid before Senate by unanimous consent. (consideration: CR S5231-5236)
- Mar 23, 2026Placed on Senate Legislative Calendar under General Orders. Calendar No. 365.
- Mar 23, 2026Committee on Health, Education, Labor, and Pensions. Reported by Senator Cassidy with an amendment in the nature of a substitute. Without written report.
- Feb 26, 2026Committee on Health, Education, Labor, and Pensions. Ordered to be reported with an amendment in the nature of a substitute favorably.
- Dec 2, 2025Read twice and referred to the Committee on Health, Education, Labor, and Pensions.
- Dec 2, 2025Introduced in Senate