An Act Requiring Hospitals To Adopt Cybersecurity Plans

This bill requires hospitals in Maine to create and submit an annual cybersecurity plan to the Department of Health and Human Services. The plan must outline procedures for notifying authorities and patients of security breaches, maintaining patient care during incidents, and providing cybersecurity training for staff and board members. Additionally, the bill adds cybersecurity intrusions that affect patient access to medical care to the list of sentinel events, which are serious incidents that must be reported. Hospitals must also conduct annual tests of their cybersecurity plans to ensure they work effectively.