Definitions

In this Act: (1) Agency The term Agency means the Cybersecurity and Infrastructure Security Agency. (2) Business associate The term business associate has the meaning given such term in section 160.103 of title 45, Code of Federal Regulations (or a successor regulation). (3) Covered entity The term covered entity has the meaning given such term in section 160.103 of title 45, Code of Federal Regulations (or a successor regulation). (4) Cybersecurity incident The term cybersecurity incident has the meaning given the term incident in section 3552 of title 44, United States Code. (3) (5) Cybersecurity State Coordinator The term Cybersecurity State Coordinator means a Cybersecurity State Coordinator appointed under section 2217(a) of the Homeland Security Act of 2002 (6 U.S.C. 665c(a)). (4) (6) Director The term Director means the Director of the Agency. (5) (7) Healthcare and Public Health Sector The term Healthcare and Public Health Sector means the Healthcare and Public Health sector, as identified in Presidential Policy Directive 21 (February 12, 2013; National Security Memorandum–22 (April 30, 2024; relating to critical infrastructure security and resilience). (6) (8) Information Sharing and Analysis Organization The term Information Sharing and Analysis Organization has the meaning given such term in section 2200 of the Homeland Security Act of 2002 (6 U.S.C. 650). (7) (9) Information system The term information system has the meaning given such term in section 102 2200 of the Cybersecurity Information Sharing Homeland Security Act of 2015 2002 (6 U.S.C. 1501). (8) 650). (10) Recognized security practices The term recognized security practices has the meaning given such term in section 13412(b)(1) of the HITECH Act (42 U.S.C. 17941(b)(1)). (11) Secretary The term Secretary means the Secretary of Health and Human Services.