CMS issued a request for information on increasing health care resiliency that explicitly addresses ransomware, cyberattacks, patient data protection, and safeguarding health information across digital infrastructure. The notice frames privacy as part of operational resilience in the health sector, linking continuity of care with stronger protection for sensitive patient data. It is materially distinct from previously covered FDA software and health AI items because it focuses on systemwide resiliency and protection of health information from cyber threats.
