9–8–8 Lifeline Cybersecurity Responsibility Act

This bill, the 9-8-8 Lifeline Cybersecurity Responsibility Act, aims to bolster the cybersecurity of the National Suicide Prevention Lifeline. It mandates that the Lifeline program coordinate with the Chief Information Security Officer of the Department of Health and Human Services to protect against cybersecurity incidents and eliminate known vulnerabilities. This proactive measure ensures the program's infrastructure remains secure for those seeking help.

The legislation also establishes a strict cybersecurity reporting framework, requiring the program's network administrator and participating crisis centers to report identified vulnerabilities and incidents within 24 hours, while safeguarding personal privacy. The network administrator must then notify the Assistant Secretary within 24 hours of discovery or being informed. Additionally, the Comptroller General is directed to conduct a study within 180 days to evaluate the Lifeline's cybersecurity risks and report findings to Congress.