The Healthcare Cybersecurity Act of 2025 requires the Cybersecurity and Infrastructure Security Agency (CISA) and the Department of Health and Human Services (HHS) to improve coordination on cybersecurity for healthcare facilities and systems. It mandates a new agency liaison to the HHS, updates a sector-specific risk management plan within one year (focusing on rural and small providers), and establishes a process to identify "high-risk" healthcare assets for prioritized support. The bill also requires CISA to provide cybersecurity training for healthcare owners/operators and report on support efforts to Congress. This directly affects hospitals, clinics, and health systems - especially smaller or rural facilities - by creating new coordination mechanisms and risk assessment requirements to address rising cyber threats.
HR 7145 defines "essential health systems" as hospitals serving large numbers of Medicaid and low-income patients, specifically targeting non-Federal, nonprofit, or government-run hospitals that meet one of three criteria for at least two of the past three years (e.g., high Medicaid patient percentage, high uncompensated care, or top 16th percentile in state rankings for low-income care). The bill requires MACPAC to annually publish an "essential health system index" ranking qualifying hospitals nationally, by state, and within local areas, using data from Medicare reporting. Hospitals designated as essential health systems receive a five-year designation, renewable if they maintain eligibility. This framework aims to identify facilities providing critical community care for vulnerable populations through standardized metrics.
The Save Healthcare Workers Act (S 1600) makes it a federal crime to assault healthcare workers while they are performing job duties at hospitals or medical facilities engaged in interstate commerce. It covers assaults on staff at hospitals, long-term care facilities, rehabilitation centers, children’s hospitals, cancer hospitals, and critical access hospitals, with enhanced penalties for using weapons, causing injury, or during declared emergencies. The bill establishes fines and prison sentences of up to 20 years for aggravated cases, while allowing a limited defense if the assailant has a disability that impaired their understanding of their actions. The law directly affects healthcare workers and hospitals by creating new federal prosecution pathways for workplace violence.
This bill allows states to waive the 35-mile rule for certain rural hospitals seeking Critical Access Hospital (CAH) designation under Medicare. It targets hospitals that are sole community hospitals, Medicare-dependent small rural hospitals, low-volume hospitals, or subsection (d) hospitals located in high-poverty or health professional shortage areas, with two consecutive years of negative margins. To qualify, hospitals must commit to adding high-demand services like obstetrics or behavioral health and submit annual reports on these services. The bill caps total CAH designations at 120 nationwide (5 per state) and requires transition to new payment models after 9 years. It also mandates studies by GAO and MedPAC to evaluate impacts on access and costs.
This bill requires psychiatric hospitals to have their accreditation inspections documented using a standardized form (CMS-2567 or a future successor) starting two years after enactment. It mandates that the Centers for Medicare & Medicaid Services publish key inspection findings on the Care Compare website two years after enactment, helping healthcare consumers compare facilities. The law includes privacy safeguards to prevent disclosure of patient or staff identities, ensuring compliance with HIPAA regulations. The bill directly affects psychiatric hospitals, accreditation bodies, and patients seeking care, by increasing transparency around facility inspections.
S 3047, the Restoring Rural Health Act, modifies Medicare rules to protect certain rural hospitals from losing critical access hospital (CAH) status due to distance rule violations. It directly affects rural hospitals designated as CAHs as of January 1, 2024, that receive a noncompliance notice from Medicare (CMS) between December 1, 2024, and January 1, 2027, regarding distance requirements. The bill adds a new exception allowing these hospitals to retain CAH status during that specific 14-month period, even if they fail the distance standard. This provides temporary stability for rural healthcare access without changing the underlying distance rule. The policy change applies only to hospitals meeting the defined criteria during the specified notice period.
This bill amends Medicare rules to temporarily waive distance requirements for certain rural hospitals seeking critical access hospital designation. Specifically, it allows rural community hospitals participating in a Medicare demonstration program (as of the bill's enactment date) to qualify as critical access hospitals without meeting standard distance criteria during a one-year window starting six months after the bill becomes law. The change directly affects eligible rural hospitals in the Medicare demonstration program, enabling them to maintain or gain critical access status without strict geographic proximity rules. This adjustment updates existing Medicare regulations to provide flexibility for these facilities during a defined transition period.
This bill repeals two provisions from a previous reconciliation act that reduced Medicaid funding flexibility for states and rescinds related funds. It directly affects Medicaid programs and rural hospitals by restoring prior funding structures and adding $10 billion annually from 2031 through 2035 to the Rural Health Transformation Program. Key mechanisms include undoing changes to state Medicaid provider tax authority and state-directed payments, while increasing annual funding for rural hospital support. The bill makes concrete policy changes by reversing specific funding cuts and guaranteeing new, sustained investment for rural healthcare facilities.
This bill prohibits health care entities (like hospitals, clinics, and nursing facilities) and their for-profit owners from selling or leasing property to real estate investment trusts (REITs) if the deal risks weakening the entity's finances or public health. It requires the Health and Human Services (HHS) Secretary to review all such proposed transactions before they proceed. Violations can result in civil penalties up to $10,000 per incident, with states also having enforcement authority. The law directly affects health care providers participating in Medicare and their corporate owners, focusing on preventing financial instability through REIT arrangements.
This bill establishes a framework for states to create their own universal health care systems by applying for waivers to replace or supplement federal health programs. States would need to demonstrate they can provide comprehensive coverage that meets or exceeds federal standards, cover at least 95% of residents within 5 years, and include specific protections for Indian health care. The federal government would redirect funds that would have gone to federal programs to the states for implementation, with states required to submit annual reports and undergo a 5-year review to maintain the waiver.
