An Act Requiring Hospitals To Adopt Cybersecurity Plans

Summary

The act obligates every licensed hospital in Maine to create a written cybersecurity plan, file it with the Department of Health and Human Services, and test it each year. The plan must cover notification of breaches, continuity of care, patient complaint handling, and staff training. It also expands the definition of a sentinel event to include cyber intrusions that affect patient access to care.

AI-generated summary — may be incomplete or inaccurate. Verify against the official bill text.

Topics

Share