As cited
Copy frozen at (site build).
regulatory
Democratic Senators Reintroduce the Health Infrastructure Security and Accountability Act
Two Democratic Senators reintroduced the Health Infrastructure Security and Accountability Act on September 17, 2026, to mandate minimum cybersecurity standards for healthcare entities and provide funding for rural and underserved hospitals. The bill responds to rising healthcare breaches, with year-to-date figures (through August 2026) showing 426 hacking-related breaches affecting 73 million Americans, a 70% increase in affected individuals since the bill's initial introduction in 2024. The legislation establishes mandatory security standards enforced by the Department of Health and Human Services, requires annual audits and risk assessments, increases HIPAA penalties, and allocates 1.3 billion dollars in federal funding for cybersecurity improvements.
Why it matters: Healthcare providers and business associates face new mandatory compliance obligations if the bill passes, including independent audits, annual attestations from leadership, and substantially higher HIPAA penalties for non-compliance, making this a priority for governance and budget planning.
- Source published
- First seen by Cybersecurity Tracker