The Congressional Budget Office has estimated that the Rural Hospital Cybersecurity Enhancement Act would cost $8 million over five years.
The legislation would require the Department of Health and Human Services to recommend ways to improve recruitment and training of cybersecurity professionals at rural hospitals and develop cybersecurity training materials for rural hospital staff, according to the CBO.
CBO said the work would increase HHS’ workload by the “equivalent of two full-time employees,” with additional technology costs to publish instructional materials. The spending would be subject to the availability of appropriated funds.
The Senate Health, Education, Labor and Pensions Committee unanimously advanced the bill in mid-January. The bill is supported by the American Hospital Association; and Sen. Josh Hawley, R-Mo., said the legislation is intended to help rural hospitals protect patients’ health records from cyberattacks.
The Senate HELP Committee reported on the bill Jan. 28. CBO released its cost estimate Feb. 3.
