The legislation mandates the development of a Sector-specific Risk Management Plan that is to be updated regularly. This plan is expected to evaluate cybersecurity vulnerabilities specific to healthcare assets, which can significantly impact patient care and access to services. Additionally, the bill will require improved collaboration between federal agencies and healthcare providers, helping to establish best practices and training programs to enhance the sector's cyber resilience against breaches and attacks.
Summary
House Bill 3841, also known as the Healthcare Cybersecurity Act of 2025, aims to enhance the cybersecurity framework within the healthcare and public health sector. The bill asserts the increasing threats posed to healthcare facilities, citing a rise in significant cyber breaches in recent years. By creating a structured approach to manage these risks, the legislation emphasizes the importance of protecting sensitive health information and ensuring the operational efficiency of these critical assets.
Contention
Key points of contention surrounding HB3841 include concerns regarding the adequacy of federal resources and the potential bureaucratic hurdles that healthcare organizations may face in complying with the new regulations. Critics argue that without additional funding, the implementation of the outlined cybersecurity measures may be challenging, especially for small to medium-sized healthcare providers that might lack the necessary infrastructure and expertise to effectively adapt to these new requirements.
Creates the healthcare worker platform act that requires platforms offering healthcare shifts to register with the Rhode Island department of health while exempting them from being classified as nursing service agencies.
Requires insurers to pay electronic claims for healthcare coverage within 14 calendar days of receipt. Permits healthcare providers to dispute claim denials within 60 days and empowers the secretary of EOHHS to establish penalties for violations.
To Prohibit Healthcare Insurers From Exercising Recoupment For Payment Of Healthcare Services More Than One Year After The Payment For Healthcare Services Was Made.