---
title: Healthcare Cybersecurity Act of 2022
description: Healthcare Cybersecurity Act of 2022. How to prepare.
image: https://tetherview.com/hubfs/Firefly%20healthcare%20security%20law%20being%20put%20into%20place%2030454.jpg
---

## Healthcare Cybersecurity Act of 2022

[ Michael Stiglianese ](https://tetherview.com/blog/author/michael-stiglianese)

 May 16, 2023 5:15:55 PM

# Healthcare Cybersecurity Act of 2022

The Healthcare Cybersecurity Act of 2022 is an important step in improving the cybersecurity of the healthcare and public health sector. The law will help to protect patient data, public health, and the healthcare system from cyberattacks. Healthcare providers must take steps to comply with the law to ensure that they are doing their part to protect patients and the healthcare system.

Healthcare Provider Responsibilities Under the Act

The Healthcare Cybersecurity Act of 2022 (H.R. 8806) imposes a number of new responsibilities on healthcare providers. These responsibilities include:

- Developing and implementing a written cybersecurity plan. The plan must include a risk assessment, a list of cybersecurity controls, and a process for monitoring and improving the plan.
- Implementing security measures to protect electronic health records (EHRs). These measures must include access controls, encryption, and incident response plans.
- Reporting cybersecurity incidents to HHS. Healthcare providers must report any cybersecurity incidents that affect the confidentiality, integrity, or availability of EHRs or other healthcare data.
- Training employees on cybersecurity best practices. Healthcare providers must train their employees on how to protect healthcare data from cyberattacks.
- Conducting cybersecurity exercises and drills. Healthcare providers must conduct regular cybersecurity exercises and drills to test their cybersecurity plans and procedures.

How to Comply with the Act

There are a number of steps that healthcare providers can take to comply with the Healthcare Cybersecurity Act of 2022. These steps include:

- Developing a written cybersecurity plan. The plan should include a risk assessment, a list of cybersecurity controls, and a process for monitoring and improving the plan.
- Implementing security measures to protect EHRs. Healthcare providers should implement security measures to protect EHRs, such as access controls, encryption, and incident response plans.
- Reporting cybersecurity incidents to HHS. Healthcare providers should report any cybersecurity incidents that affect the confidentiality, integrity, or availability of EHRs or other healthcare data to HHS.
- Training employees on cybersecurity best practices. Healthcare providers should train their employees on how to protect healthcare data from cyberattacks.
- Conducting cybersecurity exercises and drills. Healthcare providers should conduct regular cybersecurity exercises and drills to test their cybersecurity plans and procedures.

Conclusion

The Healthcare Cybersecurity Act of 2022 is an important step in improving the cybersecurity of the healthcare and public health sector. The law will help to protect patient data, public health, and the healthcare system from cyberattacks. Healthcare providers should take steps to comply with the law to protect their patients and their organizations.

##### Get more insights from the TetherView team and join in on the conversation:

Subscribe to our [Newsletter](https://tetherview.com/newsletter)  
Register for a [Workshop](https://tetherview.com/workshop-registration)  
Follow us on [LinkedIn](https://www.linkedin.com/company/tetherview/)

## Read On

### [Cyber Tips for a Safe Workplace in 2022 - TetherView Keeping a safe cyber environment is the responsibility of the entire company. Having proper...](https://tetherview.com/blog/cyber-tips-for-a-safe-workplace-in-2022)

### [HHS Outlines Cybersecurity Performance Goals The Department of Health and Human Services (HHS) has partnered with the Department of Homeland...](https://tetherview.com/blog/hhs-outlines-cybersecurity-performance-goals)

### [Deepfakes: A Guide to Understanding and Protecting Yourself In our digitally-driven age, the emergence of deepfake technology has added a new layer of...](https://tetherview.com/blog/unraveling-the-world-of-deep-fakes-a-guide-to-understanding-and-protecting-yourself)

```json
{
  "@context" : "https://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "Michael Stiglianese",
    "url" : "https://tetherview.com/blog/author/michael-stiglianese"
  },
  "dateModified" : "2024-01-08T19:45:55.241Z",
  "datePublished" : "2023-05-16T21:15:55.000Z",
  "headline" : "Healthcare Cybersecurity Act of 2022",
  "image" : [ "https://tetherview.com/hubfs/Firefly%20healthcare%20security%20law%20being%20put%20into%20place%2030454.jpg" ],
  "mainEntityOfPage" : {
    "@id" : "https://tetherview.com/blog/tetherview-virtual-desktops-are-replacing-laptops-by-creating-highly-secure-and-compliant-digital-workspaces-0",
    "@type" : "WebPage"
  },
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject",
      "url" : "https://tetherview.com/hubfs/DigitalBunker365Logo%20May%2014%202024-01-1-1.webp"
    },
    "name" : "TetherView"
  }
}
```