# 119-hr-3841: Healthcare Cybersecurity Act of 2025

119-hr-3841, Healthcare Cybersecurity Act of 2025, is a 119th Congress bill sponsored by Rep. Crow, Jason [D-CO-6] (D-CO); status in_committee; PRIA reads it as touching household money (as of 2026-09-21).

- Canonical: https://policyrisk.com/legislation/119-hr-3841
- As of: 2026-09-21
- Plain-text twin of the page above; the HTML and this file carry the same facts.

## Facts
- Bill: 119-hr-3841
- Congress: 119
- Title: Healthcare Cybersecurity Act of 2025
- Status: in_committee
- Introduced: 2025-06-09
- Sponsor: Rep. Crow, Jason [D-CO-6] (D-CO)
- Cosponsors: 2
- Policy area: Health
- Touches household money: yes
- Last recorded action: 2026-09-21

## Summary

**Strengthen cybersecurity for the Healthcare and Public Health Sector.** This bill would make the Cybersecurity and Infrastructure Security Agency (CISA) the primary coordinator with the Department of Health and Human Services and require a sector risk management plan, training, reporting, and a system to prioritize high-risk health assets. - Patients and families: Would see added protections for sensitive patient health information and electronic health records through required risk assessments and sector-specific safeguards. - Owners and operators of covered healthcare assets: Would get CISA training, a dedicated Agency liaison, and an updated Sector-Specific Risk Management Plan within 1 year that emphasizes rural and small and medium-sized providers. The bill also lets HHS and CISA identify and update a biannual list of high-risk assets to guide support. - Federal oversight and resource targeting: Would require a CISA report to Congress within 120 days, a coordination report from HHS and CISA within 18 months, and a Comptroller General review of federal resources for the sector within 18 months. *Would not authorize new federal funding for implementation and would rely on existing resources.*

## Cosponsors (2)

- Rep. Fitzpatrick, Brian K. [R-PA-1] (R-PA), 2025-06-09T00:00:00.000Z
- Rep. Nunn, Zachary [R-IA-3] (R-IA), 2025-09-30T00:00:00.000Z

## Provisions PRIA read

- Stronger CISA–HHS coordination and planning: benefit, high. If enacted, the Agency would appoint a qualified liaison to work with HHS on healthcare cybersecurity. The Secretary and the Agency would update the Healthcare and Public Health Sector Risk Management Plan within one year. The update would study risks to covered assets, especially rural and small o…
- High-risk healthcare asset list and prioritization: benefit, medium. If enacted, the Secretary could set objective criteria and make a list of high-risk healthcare assets. Owners and operators would be notified when assets are added or removed. The list would be reviewed at least twice a year and Congress would be notified on initial creation and each update. The De…
- Constitutional limits and funding restriction: mixed, low. If enacted, the bill would say nothing in the Act can be used to violate rights protected by the U.S. Constitution, including censoring protected speech or unauthorized surveillance. The bill would also say no new funds are authorized to carry out the Act, so agencies must use existing resources un…

## Related bills

- 119-hr-3151: SHIPS for America Act of 2025
- 119-hr-2725: Affordable Housing Credit Improvement Act of 2025
- 119-hr-6644: 21st Century ROAD to Housing Act
- 119-hr-4206: CONNECT for Health Act of 2025
- 119-hr-1262: Mikaela Naylon Give Kids a Chance Act
- 119-hr-5106: Restore Trust in Congress Act

## Sources
- [119-hr-3841 on Congress.gov](https://www.congress.gov/bill/119th-congress/house-bill/3841)

## Related
- [119-hr-3151: SHIPS for America Act of 2025](https://policyrisk.com/legislation/119-hr-3151)
- [119-hr-2725: Affordable Housing Credit Improvement Act of 2025](https://policyrisk.com/legislation/119-hr-2725)
- [119-hr-6644: 21st Century ROAD to Housing Act](https://policyrisk.com/legislation/119-hr-6644)
- [119-hr-4206: CONNECT for Health Act of 2025](https://policyrisk.com/legislation/119-hr-4206)
- [119-hr-1262: Mikaela Naylon Give Kids a Chance Act](https://policyrisk.com/legislation/119-hr-1262)
- [119-hr-5106: Restore Trust in Congress Act](https://policyrisk.com/legislation/119-hr-5106)
- [All bills in Congress](https://policyrisk.com/legislation)

Source: PRIA, https://policyrisk.com/legislation/119-hr-3841 (as of 2026-09-21).