Breach reporting portal

(a) Updates to breach reporting portal Section 13402 of the HITECH Act (42 U.S.C. 17932) is amended by adding at the end the following: (k) Updates to regulations Not later than 1 year after the date of enactment of the Health Care Cybersecurity and Resiliency Act of 2025, the Secretary shall update the regulations promulgated pursuant to subsection (j) to require that information required to be publicly displayed in the breach reporting portal established pursuant to this section includes— (1) information on any corrective action taken against a covered entity that provided notification of a breach under this section; (2) information on whether and to what extent, as appropriate, recognized security practices (as defined in section 13412(b)(1)) were considered in the investigation of such a breach; and (3) such additional information about such a breach as the Secretary may require..

(a) Updates to breach reporting portal Section 13402 of the HITECH Act (42 U.S.C. 17932) is amended by adding at the end the following: (k) Updates to regulations Not later than 1 year after the date of enactment of the Health Care Cybersecurity and Resiliency Act of 2025, the Secretary shall update the regulations promulgated pursuant to subsection (j) to require that information required to be publicly displayed in the breach reporting portal established pursuant to this section includes— (1) information on any corrective action taken against a covered entity that provided notification of a breach under this section; (2) information on whether and to what extent, as appropriate, recognized security practices (as defined in section 13412(b)(1)) were considered in the investigation of such a breach; and (3) such additional information about such a breach as the Secretary may require..