The 9-8-8 Lifeline Cybersecurity Responsibility Act aims to enhance the security of the National Suicide Prevention Lifeline by addressing cybersecurity risks. It amends the Public Health Service Act to require the program to take necessary steps to protect itself from cybersecurity incidents and eliminate known vulnerabilities. The bill establishes a comprehensive cybersecurity reporting framework. The program's network administrator, receiving federal funding, must report identified cybersecurity vulnerabilities and incidents to the Assistant Secretary, ensuring personal privacy is protected. Similarly, local and regional crisis centers participating in the program are required to report such issues to the network administrator, who then relays them to the Assistant Secretary. These reporting requirements are designed to supplement, not replace, existing federal cybersecurity incident reporting laws. Furthermore, the legislation mandates the Comptroller General to conduct a study within 180 days to evaluate the cybersecurity risks and vulnerabilities associated with the 9-8-8 Lifeline, with findings to be reported to relevant congressional committees.
Computer security and identity theftCongressional oversightEmergency communications systemsGovernment information and archivesGovernment studies and investigationsMental health
9–8–8 Lifeline Cybersecurity Responsibility Act
USA119th CongressHR-912| House
| Updated: 2/4/2025
The 9-8-8 Lifeline Cybersecurity Responsibility Act aims to enhance the security of the National Suicide Prevention Lifeline by addressing cybersecurity risks. It amends the Public Health Service Act to require the program to take necessary steps to protect itself from cybersecurity incidents and eliminate known vulnerabilities. The bill establishes a comprehensive cybersecurity reporting framework. The program's network administrator, receiving federal funding, must report identified cybersecurity vulnerabilities and incidents to the Assistant Secretary, ensuring personal privacy is protected. Similarly, local and regional crisis centers participating in the program are required to report such issues to the network administrator, who then relays them to the Assistant Secretary. These reporting requirements are designed to supplement, not replace, existing federal cybersecurity incident reporting laws. Furthermore, the legislation mandates the Comptroller General to conduct a study within 180 days to evaluate the cybersecurity risks and vulnerabilities associated with the 9-8-8 Lifeline, with findings to be reported to relevant congressional committees.
Computer security and identity theftCongressional oversightEmergency communications systemsGovernment information and archivesGovernment studies and investigationsMental health