Healthcare Cybersecurity Act of 2025

[Congressional Bills 119th Congress] [From the U.S. Government Publishing Office] [H.R. 3841 Introduced in House (IH)] <DOC> 119th CONGRESS 1st Session H. R. 3841 To enhance the cybersecurity of the Healthcare and Public Health Sector. _______________________________________________________________________ IN THE HOUSE OF REPRESENTATIVES June 9, 2025 Mr. Crow (for himself and Mr. Fitzpatrick) introduced the following bill; which was referred to the Committee on Homeland Security, and in addition to the Committee on Energy and Commerce, for a period to be subsequently determined by the Speaker, in each case for consideration of such provisions as fall within the jurisdiction of the committee concerned _______________________________________________________________________ A BILL To enhance the cybersecurity of the Healthcare and Public Health Sector. Be it enacted by the Senate and House of Representatives of the United States of America in Congress assembled, SECTION 1. SHORT TITLE. This Act may be cited as the ``Healthcare Cybersecurity Act of 2025''. SEC. 2. DEFINITIONS. In this Act-- (1) the term ``Agency'' means the Cybersecurity and Infrastructure Security Agency; (2) the term ``covered asset'' means a Healthcare and Public Health Sector asset, including technologies, services, and utilities; (3) the term ``Cybersecurity State Coordinator'' means a Cybersecurity State Coordinator appointed under section 2217(a) of the Homeland Security Act of 2002 (6 U.S.C. 665c(a)); (4) the term ``Department'' means the Department of Health and Human Services; (5) the term ``Director'' means the Director of the Agency; (6) the term ``Healthcare and Public Health Sector'' means the Healthcare and Public Health sector, as identified in the National Security Memorandum on Critical Infrastructure and Resilience (NSM-22), issued April 30, 2024; (7) the term ``Information Sharing and Analysis Organizations'' has the meaning given the term in section 2200 of the Homeland Security Act