Adds a new subsection (k) to require the Secretary to update regulations under subsection (j) within 1 year of enactment so that the breach reporting portal publicly displays specified information about breaches.

Amends Section 405 of the Cybersecurity Act of 2015 (6 U.S.C. 1533) by inserting new definitions into subsection (a) for 'cybersecurity incident' and 'cybersecurity risk', redesignating existing paragraphs (4)–(7) as (6)–(9), and adding a new paragraph (4) to subsection (d) that requires the Secretary of Health and Human Services to develop and implement a cybersecurity incident response plan with consultation and reporting requirements.

Adds a new section (310C) to Part A of title III of the Public Health Service Act directing the Secretary, through the Assistant Secretary for Preparedness and Response and in coordination with the Cybersecurity and Infrastructure Security Agency, to lead oversight and coordination of HHS cybersecurity activities for the Healthcare and Public Health Sector.

Part P of title III of the Public Health Service Act (42 U.S.C. 280g et seq.) is amended by adding a new section 399V–8 establishing a grant program to enhance cybersecurity in the health and public health sectors.

Amends 42 U.S.C. 17941(b)(1) by inserting additional text into the first sentence of that subsection (specific inserted text not provided in this section).

Requires that the annual report under 42 U.S.C. 17953(a) include information on implementation of section 13412 of the HITECH Act, including an accounting of every case in which the Secretary considered recognized security practices when effectuating audits and assessing fines.