Health Infrastructure Security and Accountability Act of 2026

(a) Short title. This Act may be cited as the Health Infrastructure Security and Accountability Act of 2026.

(b) Table of contents. The table of contents for this Act is as follows: Sec. 1. Short title; table of contents.Title I—Strengthening and increasing oversight of, and compliance with, security standards for health informationSec. 101. Security requirements.Sec. 102. Security risk management, reporting requirements, and audits for covered entities and business associates.Sec. 103. Increased civil penalties for failure to comply with security standards and requirements for health information.Sec. 104. User fee to support data security oversight and enforcement activities.Title II—Medicare assistance to address cybersecurity incidents201. Medicare safe cybersecurity practices adoption program for eligible hospitals and critical access hospitals.202. Medicare accelerated and advanced payments in response to cybersecurity incidents.