Healthcare Cybersecurity Act of 2024

This bill requires the Cybersecurity and Infrastructure Security Agency (CISA) and the Department of Health and Human Services (HHS) to coordinate on healthcare cybersecurity through a dedicated liaison. It mandates updated sector-specific risk management plans for healthcare facilities, including analysis of cybersecurity challenges for rural and small providers, medical device vulnerabilities, and breach response. The law establishes a process to identify "high-risk" healthcare facilities (like major hospitals) for prioritized security support. These provisions directly affect hospitals, clinics, and other healthcare providers handling sensitive patient data.