PRIA Logo™
HR912119th CongressWALLET

9–8–8 Lifeline Cybersecurity Responsibility Act

Sponsored By: Representative Obernolte, Jay [R-CA-23]

Introduced

Summary

Protecting the 9-8-8 National Suicide Prevention Lifeline from cybersecurity incidents. This bill would add specific reporting duties for network administrators and local crisis centers and require a Comptroller General study of 9-8-8 cybersecurity risks within 180 days.

Show full summary
  • Local and regional crisis centers would have to report identified cybersecurity vulnerabilities and incidents to their program’s network administrator within a reasonable time and oversee the technology they use to provide services.
  • Program network administrators that receive Federal funding would have to report any identified vulnerabilities or incidents to the Assistant Secretary within a reasonable time. They would oversee crisis center technology when that oversight is established in the applicable network participation agreement.
  • The bill would make these reporting rules a supplement to existing Federal incident-reporting laws and direct the Comptroller General to complete a study of 9-8-8 cybersecurity risks and vulnerabilities and report findings to the Senate Committee on Health, Education, Labor, and Pensions and the House Committee on Energy and Commerce within 180 days.

Personalized for You

How does this bill affect your finances?

Personalize government policy and PRIA will tell you what this bill means for your household, plus every other piece of legislation we track. PRIA reads each provision against your financial profile to show you exactly what matters to your wallet.

Free to download

Bill Overview

Analyzed Economic Effects

1 provisions identified: 1 benefits, 0 costs, 0 mixed.

Stronger cybersecurity for 9-8-8 hotline

This bill would require federally funded 9-8-8 network administrators to report cybersecurity incidents and vulnerabilities to the Assistant Secretary. Local and regional crisis centers would have to report incidents and vulnerabilities to their network administrator within a reasonable time. All reporting would have to protect personal privacy under applicable Federal and State law. Operators would need to take steps to fix known vulnerabilities and oversee technology used to provide services. The Comptroller General would have to report on 9-8-8 cybersecurity risks to two congressional committees within 180 days after enactment.

Sponsors & CoSponsors

Sponsor

Obernolte, Jay [R-CA-23]

CA • R

Cosponsors

  • Rep. Dingell, Debbie [D-MI-6]

    MI • D

    Sponsored 2/4/2025

  • Rep. Lieu, Ted [D-CA-36]

    CA • D

    Sponsored 5/20/2025

  • Rep. Vindman, Eugene Simon [D-VA-7]

    VA • D

    Sponsored 8/15/2025

Roll Call Votes

No roll call votes available for this bill.

View on Congress.gov
Back to Legislation