# 119-s-1851: Healthcare Cybersecurity Act of 2025

119-s-1851, Healthcare Cybersecurity Act of 2025, is a 119th Congress bill sponsored by Sen. Rosen, Jacky [D-NV] (D-NV); status introduced; PRIA reads it as touching household money (as of 2025-12-21).

- Canonical: https://policyrisk.com/legislation/119-s-1851
- As of: 2025-12-21
- Plain-text twin of the page above; the HTML and this file carry the same facts.

## Facts
- Bill: 119-s-1851
- Congress: 119
- Title: Healthcare Cybersecurity Act of 2025
- Status: introduced
- Introduced: 2025-05-21
- Sponsor: Sen. Rosen, Jacky [D-NV] (D-NV)
- Cosponsors: 3
- Policy area: Health
- Touches household money: yes
- Last recorded action: 2025-12-21

## Summary

**A sector-specific cybersecurity framework for the Healthcare and Public Health Sector** would coordinate CISA and HHS, set a dedicated HHS liaison, and require updated risk planning, training, and ongoing asset risk reporting.

## Cosponsors (3)

- Sen. Young, Todd [R-IN] (R-IN), 2025-05-21T00:00:00.000Z
- Sen. King, Angus S., Jr. [I-ME] (I-ME), 2025-06-02T00:00:00.000Z
- Sen. Tillis, Thomas [R-NC] (R-NC), 2025-06-02T00:00:00.000Z

## Provisions PRIA read

- Update healthcare cyber risk plan: benefit, high. This bill would require HHS, working with CISA, to update the Healthcare and Public Health Sector Risk Management Plan within one year. The update would analyze risks to covered assets, with emphasis on rural and small- and mid-sized providers. It would assess medical device and patient data vulner…
- GAO report on healthcare cyber resources: benefit, medium. This bill would require the Comptroller General (GAO) to report to Congress within 18 months. The report would list federal resources for Healthcare and Public Health Sector critical infrastructure and note recent collaboration with CISA and HHS. The report would inform congressional oversight and…
- CISA-HHS cybersecurity liaison and training: benefit, medium. This bill would require CISA to assign a qualified cybersecurity liaison to HHS. The liaison would coordinate threats, help during incidents, and assist with Plan updates. CISA would provide training for owners and operators on cyber risks and how to protect systems. CISA would also coordinate with…
- Which healthcare assets are covered and prioritized: mixed, high. This bill would define what counts as a covered Healthcare and Public Health Sector asset. The definition would follow NSM-22 (April 30, 2024). HHS, with CISA, could set objective rules to call some assets "high-risk." HHS would keep a list, tell owners when assets are added or removed, notify Cong…
- No new money or extra powers: mixed, low. This bill would say nothing in it lets HHS or CISA act beyond existing law. It would also say it cannot be used to violate constitutional rights. The bill would not authorize any new money to carry out its provisions.

## Related bills

- 119-s-1541: SHIPS for America Act of 2025
- 119-s-3923: Weather Research and Forecasting Innovation Reauthorization Act of 2026
- 119-s-4744: Take Care of America’s Veterans Act
- 119-s-1639: American Innovation and Jobs Act
- 119-s-1552: Living Donor Protection Act of 2025
- 119-s-1241: Sanctioning Russia Act of 2025

## Sources
- [119-s-1851 on Congress.gov](https://www.congress.gov/bill/119th-congress/senate-bill/1851)

## Related
- [119-s-1541: SHIPS for America Act of 2025](https://policyrisk.com/legislation/119-s-1541)
- [119-s-3923: Weather Research and Forecasting Innovation Reauthorization Act of 2026](https://policyrisk.com/legislation/119-s-3923)
- [119-s-4744: Take Care of America’s Veterans Act](https://policyrisk.com/legislation/119-s-4744)
- [119-s-1639: American Innovation and Jobs Act](https://policyrisk.com/legislation/119-s-1639)
- [119-s-1552: Living Donor Protection Act of 2025](https://policyrisk.com/legislation/119-s-1552)
- [119-s-1241: Sanctioning Russia Act of 2025](https://policyrisk.com/legislation/119-s-1241)
- [All bills in Congress](https://policyrisk.com/legislation)

Source: PRIA, https://policyrisk.com/legislation/119-s-1851 (as of 2025-12-21).