Young offers bipartisan medical device cybersecurity bill

The federal government would be required to update medical device cybersecurity guidelines and make recommendations on improving their protection from hacking and cyberattacks under bipartisan legislation recently offered by U.S. Sen. Todd Young (R-IN). 

“Medical devices are increasingly connected to the internet or other health care facility networks to provide features that improve the ability of health care providers to treat patients,” Sen. Young said. “Our bill helps ensure medical devices are protected from cyberattacks and used safely and securely in order to reduce risks and vulnerabilities for patients.”

Sen. Young on May 26 signed on as the lead original cosponsor of the Strengthening Cybersecurity for Medical Devices Act, S. 4336, with bill sponsor U.S. Sen. Jacky Rosen (D-NV). The bill would require the U.S. Secretary of Health and Human Services, in consultation with the director of the Cybersecurity and Infrastructure Security Agency, to annually review and as appropriate update guidance for industry and U.S. Food and Drug Administration (FDA) administration staff on medical device cybersecurity, according to the text of the bill.

“In light of increased cyber threats, we must strengthen the security of our healthcare system’s cyber infrastructure,” said Sen. Rosen. “This bipartisan bill I introduced with Senator Young will ensure that medical devices and technologies are up to date with the latest cybersecurity, protecting patients and health care systems.” 

If enacted, S. 4336 also would require the FDA to share information publicly on federal resources for healthcare professionals, medical device manufacturers, and health systems to identify and address cyber vulnerabilities, and on how to access support, according to a bill summary provided by the lawmakers. 

Additionally, S. 4336 would require a Government Accountability Office report examining medical device cybersecurity vulnerabilities and recommendations for improving federal coordination to support cybersecurity for medical devices, the summary says.

The measure has been referred for consideration to the U.S. Senate Health, Education, Labor, and Pensions Committee.