Health Care Cybersecurity Improvement Act of 2024

This bill requires healthcare entities to meet minimum cybersecurity standards to qualify for Medicare accelerated or advance payments when a cybersecurity incident causes their cash flow problems. It modifies two existing Medicare payment programs to add these cybersecurity requirements, effective two years after the bill becomes law.

Sec. 2, Modification of the Medicare hospital accelerated payment program: Starting two years after enactment, if a cybersecurity incident caused a hospital's cash flow problems, the hospital will not receive accelerated payments unless the hospital and, if applicable, its intermediary (the organization handling its claims) each meet minimum cybersecurity standards set by the Secretary of Health and Human Services.

Sec. 3, Modification of the Medicare Part B advance payment program: Starting two years after enactment, if a cybersecurity incident leads to advance payments under the Part B program, those payments will not be made to a provider or supplier unless the provider or supplier meets minimum cybersecurity standards, and if the incident targeted their intermediary, that intermediary also meets those standards, as determined by the Secretary.