Bill > S1007

This bill aims to enhance the cybersecurity protections for the 9-8-8 National Suicide Prevention Lifeline, a critical mental health support service. The legislation requires the Lifeline's network administrator and local crisis centers to promptly report any cybersecurity vulnerabilities or incidents to the Assistant Secretary within hours of identification, while maintaining personal privacy in accordance with federal and state laws. The bill mandates coordination with the Department of Health and Human Services' Chief Information Security Officer to eliminate known cybersecurity risks and protect the program from potential cyber threats. Additionally, the legislation requires the Comptroller General to conduct a comprehensive study evaluating the cybersecurity risks and vulnerabilities associated with the Lifeline within 180 days of the act's enactment, with findings to be reported to key congressional committees. The bill also clarifies oversight responsibilities for technology used by crisis centers, specifying that local centers will generally oversee their own technology, with the network administrator potentially taking on oversight responsibilities as defined in participation agreements. Importantly, these new reporting requirements are designed to supplement, not replace, existing federal cybersecurity reporting regulations.

Health and Social Services

https://www.congress.gov/bill/119th-congress/senate-bill/1007/all-info