Kelly Introduces Bipartisan Bill Improving Rural Hospital Cybersecurity

Senator Mark Kelly (D-AZ) is introducing bipartisan legislation to improve the cybersecurity of rural hospitals in the United States.

Given the simple name of the Rural Hospital Cybersecurity Enhancement Act, Sen. Kelly's bill establishes a comprehensive strategy to help rural hospitals find and train cybersecurity specialists for the protection of their digital and online infrastructure through public-private cooperation.

"Rural hospitals are on the frontlines of care for so many Arizonans, but too often they're underfunded and overexposed to cyber threats that can jeopardize patient safety," said Sen. Kelly in his press release, referencing a June 2022 ransomware attack on the Yuma Regional Medical Center (YRMC) which exposed the data of over 700,000 patients.

"We are giving rural hospitals the tools and workforce they need to strengthen their security and keep delivering care, especially as they navigate new digital reporting requirements," Sen. Kelly added.

Senator Josh Hawley (R-MO), one of the bill's cosponsors, said, "Nearly half of the hospitals in my state are rural. I grew up in a town of 4,000 people – I have lived this firsthand. Congress must take action to shore up the ability of small-town hospitals to protect working Americans' health records from debilitating cyberattacks."

Finally, Senator Maggie Hassan (D-NH) stated, "Cyberattacks on hospitals can put at risk people's medical information, and also sometimes shut the hospital down as it recovers, putting lifesaving care at risk."

"This bipartisan legislation is an important step toward ensuring that rural hospitals have the resources, tools, and training that they need to keep patients safe and protect hospitals from attacks from cybercriminals," Sen. Hassan concluded.

At the beginning of May, Kelly's colleague, Senator Ruben Gallego (D-AZ), introduced a similar bill addressing the cybersecurity of water systems, another vital piece of infrastructure that hostile actors can attack.

Like the Rural Hospital Cybersecurity Enhancement Act, the Drinking Water Infrastructure Risk and Resilience Program awards grants to fund guidance and training for state and local actors on protecting the cybersecurity of their water infrastructure.