To The Administration

HLC letter to the Cybersecurity and Infrastructure Security Agency (CISA) regarding the proposed rule for implementing the Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA)

HLC supports the intent of CIRCIA but argues that the proposed rule, as written, is too ambiguous, too burdensome, and insufficiently harmonized with existing healthcare cybersecurity obligations. They urge CISA to refine definitions, reduce reporting burdens, expand flexibility, and ensure protections for healthcare organizations that are victims of cyberattacks.

Related Letters & Comments

HLC drives policy change through strategic letters, comments, and reports that promote private-sector innovation. Focused on priorities like Medicare reform, telehealth, and health equity, HLC engages with lawmakers and agencies to shape a smarter, more responsive healthcare system.