(Washington, D.C.) – Congresswoman Erin Houchin (R-IN-09) and Congresswoman Kim Schrier, M.D. (D-WA-08) recently introduced the bipartisan Rural Hospital Cybersecurity Enhancement Act.
Co-sponsors are Representatives Jefferson Shreve (R-IN), Glenn “GT” Thompson (R-PA), Jill Tokuda (D-HI), and Jennifer McClellan (D-VA).
Companion legislation was introduced in the Senate by Senators Josh Hawley (R-MO), Maggie Hassan (D-NH), and Mark Kelly (D-AZ).
The legislation aims to strengthen cybersecurity at rural hospitals by directing the Department of Health and Human Services (HHS) to develop a comprehensive rural hospital cybersecurity workforce strategy, expand cybersecurity training resources, and improve preparedness against growing cyber threats.
“Rural hospitals are often operating with limited staff and resources, yet they’re expected to defend against increasingly sophisticated cyberattacks,” said Rep. Houchin. “When a rural hospital is forced offline, patient care is put at risk. This bipartisan bill is a practical step toward giving rural providers the workforce, training, and tools they need to strengthen their cybersecurity and continue serving their communities.”
“As a doctor and a patient, I know we must protect hospitals from cyberattacks,” said Rep. Schrier, M.D.“Rural hospitals in particular often lack the funding and workforce necessary to prevent cyberattacks and some in Washington have already been impacted. This bill will give rural hospitals the tools they need to keep patients safe, protect personal data, and secure medical systems.”
“For many years, TRIMEDX has worked with, and provided medical device service for, small town and rural hospitals throughout the country. Already challenged by increasing cost pressures, we have seen first- hand how vulnerable rural hospitals are to cybersecurity attacks and we support any efforts for the development of strategies to address cyber challenges,”said Kristi McDermott, TRIMEDX Chief Operating Officer.“Accordingly, TRIMEDX applauds Rep. Houchin and Rep. Schrier for introducing this strong bipartisan bill which seeks to address growing cybersecurity challenges, to include workforce development strategies, in rural hospitals throughout the country.”
The Rural Hospital Cybersecurity Enhancement Act requires HHS to:
-
Develop a comprehensive rural hospital cybersecurity workforce development strategy that considers public-private partnerships, cybersecurity curricula, workforce training, and policy recommendations.
-
Make instructional materials available to help rural hospitals train staff on fundamental cybersecurity practices.
-
Provide annual updates to Congress on the implementation of the strategy and any related workforce development initiatives.
Cyberattacks against hospitals have become more frequent and more sophisticated, placing patient care, medical records, and critical healthcare infrastructure at risk. Rural hospitals are particularly vulnerable because they often lack the resources to recruit and retain dedicated cybersecurity professionals.
The legislation is endorsed by the American Hospital Association, Blue Cross Blue Shield Association, National Rural Health Association, American Academy of Family Physicians, TRIMEDX, and the Alliance for Quality Medical Device Servicing.
The Senate companion legislation has twice advanced out of the Senate Committee on Health, Education, Labor, and Pensions.
The full text of the bill can be read here.
