Skip to content
Congress·Reported·about 2 months ago

Congress directs HHS to build a rural hospital cybersecurity workforce plan and training materials

Also known as: Rural Hospital Cybersecurity Enhancement Act

Legislative Progress

✓ Filed
Review
Senate
House
President

Impacts

Mixed Impacts(7)
Chronic Illness
Neutral
Disability Benefits
Neutral
Unemployment Benefits
Neutral
Gig Worker
Neutral
Small Business Owner
Neutral
Student
Neutral
Student Loans
Neutral

Key Points

  • Congress would require the Health and Human Services Department to write a national plan to build up cybersecurity workers for rural hospitals within 1 year.
  • The plan must include input from rural health providers across the country and could include partnerships with schools, health systems, nonprofits, and private companies.
  • It would look at what makes cybersecurity hiring and training harder for rural hospitals and suggest practical ways to fix those problems.
  • The bill also requires training materials rural hospitals can use to teach staff basic cybersecurity, plus a campaign to make sure hospitals know the materials exist.
  • It does not add new funding, so the work would need to use existing budgets and staff unless Congress funds it later.
HealthcareCybersecurityEducation

Milestones

3 milestones3 actions
Jan 15, 2026Senate

Committee on Health, Education, Labor, and Pensions. Ordered to be reported with an amendment in the nature of a substitute favorably.

Jun 25, 2025Senate

Read twice and referred to the Committee on Health, Education, Labor, and Pensions.

Jun 25, 2025

Introduced in Senate

What Happens Next

Projected impacts based on AI analysis

Within 1 year after the bill becomes law

HHS develops and sends Congress a rural hospital cybersecurity workforce strategy

This is the roadmap that could shape future training programs, partnerships, and possible new federal guidance for rural hospitals.

Within 1 year after the bill becomes law

HHS releases training materials and launches an awareness campaign for rural hospitals

Hospitals can use these materials to train staff on basic cybersecurity steps, which may reduce the risk of ransomware and system outages over time.

About 60 days after the first full federal fiscal year ends after the strategy is sent to Congress

First annual briefing to Congress on progress and number of people trained

This is the first public checkpoint showing whether training programs actually started and how many people were reached.

Every year after the first briefing

Yearly updates continue (briefings after each fiscal year)

Hospitals and schools may see adjustments in recommended practices and partnership ideas, but new benefits still depend on follow-on actions and funding.

Related News

6 articles
AHA News·about 2 months ago

AHA expresses support for bill improving cybersecurity workforce in rural hospitals

The American Hospital Association urges support for S. 2169, which directs HHS to create a rural-hospital cybersecurity workforce strategy and expand partnerships to train cyber professionals.

+
Fierce Healthcare·8 months ago

Senate HELP debates cybersecurity, data privacy policy in hearing as Medicaid cuts loom

Coverage of a Senate HELP hearing on health cybersecurity and privacy; includes mention of the Rural Hospital Cybersecurity Enhancement Act as a proposal requiring an HHS workforce strategy.

C~
The Record (Recorded Future News)·about 2 months ago

Sean Cairncross confirmed as national cyber director

Story on ONCD leadership notes the nominee’s expressed support for the Rural Hospital Cybersecurity Enhancement Act among other cyber bills.

C=

Source Information

Document Type

Congressional Bill

Official Title

Rural Hospital Cybersecurity Enhancement Act

Bill NumberS 2169
Congress119th Congress
ChamberSenate
Latest ActionCommittee on Health, Education, Labor, and Pensions. Ordered to be reported with an amendment in the nature of a substitute favorably.

Sponsor

Cosponsors

(5)
D: 4R: 1

Analysis generated by AI. While we strive for accuracy, this should not be considered legal or professional advice. Always verify information with official government sources.