9–8–8 Lifeline Cybersecurity Responsibility Act

This bill requires the 9-8-8 National Suicide Prevention Lifeline program to strengthen cybersecurity protections. It mandates that the program coordinate with the HHS Chief Information Security Officer to address vulnerabilities and requires all participating local crisis centers and the program’s network administrator to report cybersecurity vulnerabilities or incidents within 24 hours. The law also directs a study by the Comptroller General to evaluate cybersecurity risks for the lifeline within 180 days of enactment. These changes directly affect the national lifeline program and all local crisis centers using the 9-8-8 system.