Reps. Crow, Fitzpatrick, and Kim Introduce Bipartisan Bill to Protect Americans’ Healthcare Data from Cyberattacks

WASHINGTON — Today, Congressman Jason Crow (D-CO-06), alongside Representatives Brian Fitzpatrick (R-PA-01) and Andy Kim (D-NJ-03), introduced the Healthcare Cybersecurity Act, a bipartisan bill to protect Americans’ healthcare data against cyberattacks. The Senate companion bill was recently introduced by Senators Jacky Rosen (D-NV), Todd Young (R-IN), and Angus King (I-ME).

In 2023 alone, over 133 million patient records were exposed by cyberattacks. Earlier this year, the healthcare sector faced a ransomware attack on the health payment platform Change Healthcare, highlighting the lack of preparation and training during the recovery process. Today’s legislation will direct the Cybersecurity and Infrastructure Security Agency (CISA) and the Department of Health and Human Services (HHS) to collaborate on improving cybersecurity and make resources available to non-federal entities relating to cyber threat indicators and appropriate defense measures. It would also create a special liaison to HHS within CISA to coordinate during cybersecurity incidents and collaborate to support health care and public health sector entities.

“Cyberattackers are targeting Americans’ medical data and must be stopped,” said Congressman Crow. “I’m leading this effort to bolster cyber defenses and protect some of Americans’ most personal and sensitive information from malicious actors.” 

“Hospitals and health centers are fundamental pillars of our nation's infrastructure. With the alarming rise in malicious cyberattacks causing critical data breaches, increased healthcare costs, and jeopardized patient health, we cannot delay action in addressing this issue. By providing new resources for cybersecurity risk training and fortifying our cybersecurity protections nationwide, our bipartisan legislation takes decisive action to safeguard our healthcare systems and protect lives,” said Congressman Fitzpatrick. 

“As data breaches and other cyber threats target more and more people each year, Americans deserve to know their healthcare information is going to be protected,” said Congressman Kim. “I am proud to help introduce this bipartisan legislation to address vulnerabilities to cyber attacks in the healthcare industry and help make sure providers on the ground have the tools and updated resources they need to protect patients and their information from any future breaches.”

“The wave of cyberattacks targeting the health care industry highlights the urgent need for public-private cooperation and interagency collaboration to improve cybersecurity for entities in Nevada and across our nation,” said Senator Rosen. “That’s why I’ve been working to pass my bipartisan legislation to improve cybersecurity in the health care sector and prevent further data breaches, and I’m glad to see this bill introduced in the House of Representatives.”

Today’s legislation builds on Congressman Crow’s long-standing fight to protect the American people and their data from cyberattacks. Crow continues to advancehealth care cybersecurity measures andsuccessfully passedhis bipartisan bill last Congress to expand cybersecurity operations at the Small Business Administration (SBA) and protect millions of businesses.  

Read the full text of the legislation here.