Kevin Coy Comments on Senate Healthcare Cybersecurity Legislation in Digital Health Insights

On October 9, 2026, Digital Health Insights quoted AGG Privacy & Cybersecurity practice chair Kevin Coy in an article examining federal legislation that would establish additional healthcare cybersecurity requirements.

The Health Care Cybersecurity and Resiliency Act passed the U.S. Senate on September 30, 2026. If enacted, it would direct the U.S. Department of Health and Human Services (“HHS”) to update the Health Insurance Portability and Accountability Act (“HIPAA”) Security Rule to address multifactor authentication, encryption, and system monitoring.

“A lot of focus is on interagency coordination and public-private coordination,” Kevin said, emphasizing the difficulty of coordinating cybersecurity efforts across agencies and private organizations. “In some ways, [that is] easier said than done. One of the focuses of the resiliency bill is to get a primary coordinator within HHS to help lead the effort there.”

To read the full article, please click here.