Insurance, Health, Accident - As introduced, requires a healthcare provider, healthcare group, practice, or clinic, healthcare facility, or other entity to provide notice to each health insurance entity with which it is under contract as soon as practicable if the healthcare provider, healthcare group, practice, or clinic, healthcare facility, or other entity is the subject of a cyber-attack. - Amends TCA Title 33; Title 56; Title 63; Title 68, Chapter 11 and Title 71.

SB 555 requires healthcare providers, clinics, facilities, and related entities in Tennessee to notify all health insurance companies they work with "as soon as practicable" if they experience a cyber-attack. This applies to any organization that contracts with insurers for patient care billing. The law mandates immediate notification to help insurers protect patient data and maintain billing systems during security incidents. It amends Tennessee health insurance codes (Titles 33, 56, 63, 68, and 71) to implement this requirement. The bill focuses solely on triggering timely communication about cyber incidents, not on preventing attacks or altering insurance coverage.