The Tool Desk
Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
The Senate passed S. 3315, the Health Care Cybersecurity and Resiliency Act of 2026, on September 30, 2026. The proposal would strengthen coordination between the Department of Health and Human Services (HHS) and the Cybersecurity and Infrastructure Security Agency (CISA), while supporting healthcare organizations with training, technical assistance, planning and potential grants. It is Senate-passed legislation—not established law. Senator Mark Warner’s office reported that the Change Healthcare breach affected over 190 million people.
What the Senate passed
The Senate passed S. 3315 by unanimous consent on September 30, 2026. The Senate’s engrossed text records the bill’s passage, and the Senate Health, Education, Labor, and Pensions (HELP) Committee announced the action the following day. Read the Senate-passed bill and the HELP Committee announcement.
Senator Bill Cassidy, M.D., described the bill’s purpose as helping providers strengthen defenses and protect patient data. That is the sponsor’s stated intent; it is not evidence that the proposal has already improved healthcare cybersecurity.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Is the bill law?
No. Senate passage alone does not enact a bill. The available legislative record establishes that S. 3315 passed the Senate, but does not establish House passage or enactment. It should therefore be described as Senate-passed legislation, not as a law or an implemented program.
#1 Best Overall
What S. 3315 would do
The Senate-passed text proposes a mix of federal coordination and practical support for healthcare organizations. These are proposed measures, not documented results.
| Area | Proposed approach |
|---|---|
| Federal coordination | Improve coordination between HHS and CISA on healthcare cybersecurity and resiliency. |
| Workforce and technical support | Provide cybersecurity training and technical assistance to support the sector. |
| Rural and resource-constrained providers | Offer guidance and support tailored to rural providers and organizations with fewer resources. |
| Planning and response | Support incident-response planning and coordination. |
| Potential grants | Allow grants for eligible entities and specified uses. The bill does not mean every healthcare provider would automatically receive funding. |
The bill’s engrossed Senate text is the primary source for its provisions. A proposal to provide support or authorize grants should not be mistaken for a guarantee of funding, eligibility, or immediate implementation.
How the Change Healthcare breach figure is sourced
Senator Mark Warner’s office said in a 2025 release that the Change Healthcare attack exposed the data of over 190 million people. The release also described significant delays in care and disruption to electronic prescribing. The figure should be understood as a reported impact figure attributed to Warner’s office, not as a number independently established here by a direct Change Healthcare or HHS breach notice. Read Warner’s release.
How this bill differs from earlier proposals
S. 3315 is distinct from earlier healthcare cybersecurity bills. S. 1851, the Healthcare Cybersecurity Act of 2025, was introduced on May 21, 2025, and referred to the Senate Homeland Security and Governmental Affairs Committee. S. 4697 was a 2024 proposal whose committee report described a proposed CISA-HHS liaison and an update to a sector plan. Neither is the 2026 Senate-passed bill. S. 1851’s legislative record; S. 4697’s legislative record.
Quick Recap
Best Value
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
