How HHS has strengthened cybersecurity of hospitals and health care systems

HHS details a multi-year effort to strengthen health care cybersecurity in response to rising cyberattacks on hospitals and health systems, organized into three pillars: policy and regulation (including HIPAA Security Rule updates, FDA device requirements, and CMS actions), resources and funding (hospital preparedness funds, ARPA-H investments, proposed Medicare funding for cybersecurity), and improved sector coordination and incident response. The piece emphasizes support for under-resourced and rural providers, guidance for safe AI adoption, and the need for a comprehensive, ecosystem-wide approach to reduce patient safety risks and maintain health system resilience.