Displaying 17 results for

State Policy Trends in Cybersecurity and Public Health Preparedness Maggie Nilz Learn how states are including cybersecurity in their emergency preparedness work in this Health Policy Update. Cybersecurity is an increasingly important component of public health preparedness as state cybersecurity policy intersects with public health agency responsibilities. Public health agencies rely on interconnected digital systems and critical infrastructure for disease surveillance, laboratory reporting, emergency communications, and health data management, making cybersecurity critical to maintaining these functions. Beyond compromising sensitive data and potentially harming patients, cyber incidents can disrupt essential public health services, including emergency response operations. Health care data breaches have steadily increased over the last 15 years, highlighting growing risks for government and health systems. A recent report showed that more than 7,000 health care data breaches were reported to the Department of Health and Human Services since 2009, and reported HIPAA data breaches in 2023 were nearly double the number recorded in 2018. Meanwhile, preparedness capacity has lagged: as of 2022, only 13% of local health departments reported being prepared for cyber-related disruptions, and recent scans show cybersecurity is rarely included in emergency preparedness planning. In response at the federal level, HHS recently announced it is undoing a 2024 reorganization by returning department-wide technology responsibilities to the Office of the Chief Information Officer while refocusing the Office of the National Coordinator for Health Information Technology on improving nationwide health IT interoperability and data sharing. In recent years, state and territorial legislatures have begun to address these gaps by incorporating cybersecurity into preparedness, health care oversight, and statewide governance structures. These legislative trends signal a need to integrate cybersecurity into emergency operations plans, strengthen cross-sector coordination, and safeguard the continuity of public health services. Some of the most recent policies considered and enacted by legislatures treat cyber incidents as emergencies, expand reporting requirements, and strengthen cyber governance. Cyber Incidents Are Being Built into Emergency Preparedness Frameworks In response to these growing threats, jurisdictions have begun incorporating cyber response into emergency plans and strategies, reinforcing cybersecurity as essential to preparedness. These developments highlight growing awareness that cyber incidents can disrupt critical services, much like natural disasters. In 2025, New York enacted S 7672, which requires municipal entities and public authorities report cybersecurity incidents and demands for ransom to the state Division of Homeland Security and Emergency Services. In addition, it directs the Director of the Office of Information Services to establish cybersecurity training and protection standards for state systems as well as require cybersecurity training for state and local government employees. Virginia is currently considering HB 83, which would establish a volunteer Cyber Civilian Corps within the state IT agency to provide rapid assistance during cybersecurity incidents affecting municipalities, nonprofits, education, and critical infrastructure. Preparedness efforts also extend beyond legislation to executive action. In February 2026, Minnesota Governor Tim Walz authorized $1.2 million in state disaster assistance to support response efforts and restore critical systems in response to a cyber incident that disrupted digital services in Saint Paul on July 29, 2025. Additionally, the National Governors Association has included cybersecurity as a primary consideration for planning and preparedness in their latest edition of the Public Health Emergency Playbook. Health care and Public Health Critical Sectors Are Facing New Cyber Requirements Beyond emergency response frameworks, jurisdictions are also adopting cybersecurity reporting and planning requirements for health care and public health organizations. Companion bills in Tennessee (HB 511/SB 555) would require health care providers and facilities to notify their contracted health insurers of cybersecurity incidents. In Maine, LD 2103 would require hospitals to adopt cybersecurity plans to protect patient data and maintain operations, and must include cybersecurity training for employees and board members. New Jersey is looking to adopt and implement a more comprehensive cybersecurity plan across all sectors. This session, legislators have introduced at least two cyber security bills: A 3231 would require “sensitive businesses” (defined as those engaged in financial, essential infrastructure, or health care industries) to report cybersecurity incidents to the New Jersey Cybersecurity and Communications Integration Cell (NJCCIC) when they are aware of their occurrence and would require NJCCIC to conduct a cybersecurity audit within 30 days of notification. A 3283 would require the same “sensitive businesses” to implement cybersecurity programs in accordance with standards adopted by NJCCIC and certify compliance annually. As states expand reporting and cybersecurity requirements, these obligations may intersect with public health reporting and continuity planning. States Are Strengthening Government Cyber Governance and Coordination In addition to sector-specific requirements, jurisdictions are also strengthening the governance structures responsible for coordinating cybersecurity, improving their ability to respond to large-scale incidents affecting public systems. Legislation enacted recently in Texas and California aim to improve coordination among state government by establishing a state agency centralizing cybersecurity incident prevention and response (Texas HB 150) and mandating the development of a cybersecurity playbook to strengthen information sharing (California AB 979). A 2024 bill enacted in Puerto Rico (PC 1530) requires commonwealth agencies to develop and implement a cybersecurity program, which must include a yearly risk assessment as well as vulnerability assessment. At least three jurisdictions are currently considering bills strengthening established cybersecurity programs, with two states recently passing legislation. Utah recently enacted a bill authorizing the Utah Cyber Center to conduct voluntary cybersecurity risk assessments for critical infrastructure and coordinate with government entities on infrastructure safety (HB 165). Utah also enacted legislation creating a specific funding stream for the Center to use for various activities, including implementing a statewide cybersecurity plan and conducting assessments for governmental entities (SB 123). Kansas enacted HB 2574, which would require chief information security officers for the executive, legislative, and judicial branches to adopt cybersecurity programs based on a nationally recognized standard for governmental entities. Finally, Florida recently passed SB 7024, which would expand the state’s public record exemption to include risk assessments, information related to cybersecurity breaches, and information related to data protection, ensuring the confidentiality of sensitive cybersecurity information held by state agencies; the bill is with the governor for final consideration. Key Takeaways for Preparedness Leaders Cybersecurity is critical for preparedness across multiple policy areas, and requires new planning, coordination, and oversight responsibilities. By including cyber incidents into disaster frameworks, standards for health care organizations, and governance, preparedness leaders may find themselves more directly engaged in integrating cybersecurity into emergency operations, exercises, and cross-sector partnerships. For state and territorial health agencies beginning to incorporate cybersecurity into their preparedness plans, agencies such as the Cybersecurity and Infrastructure Security Agency provide jurisdictional support and resources to guide this work. article yes

While communities transition from emergency response to long-term monitoring and recovery, the federal government and states are taking legislative action to improve emergency preparedness capabilities.

Several states and territories, as well as many local governments, are going beyond recommendations and requiring individuals to wear face coverings when they are in public settings and spaces (i.e. grocery stores, retail stores, restaurants, public and private transportation services, parks, etc.). Ongoing research and evidence suggests the relationship between mandatory face coverings and declines in daily COVID-19 growth rates is statistically significant.

Conditioning school attendance on student vaccinations is an evidence-based way of maintaining and increasing vaccine coverage. State law establishes school vaccination requirements which apply not only to public schools but often to private schools and childcare facilities as well. All states allow an exemption for those where a vaccine poses a medical risk. Several states also allow non-medical exemptions, often based on an asserted religious, philosophical, or personal belief of the parents or child opposing vaccinations. However, a few states have recently abolished all non-medical exemptions.

The 2020 holiday season is coinciding with a nationwide surge of COVID-19 cases. With great concern that holiday travel to see loved ones may exacerbate community spread of the virus, many states are increasing public health measures before the winter holiday season. As of November 16, 2020, 13 states and D.C. had a quarantine requirement for out-of-state travelers. The U.S. territories also have instituted travel restrictions to limit the spread of COVID-19.

On Dec. 3, the International Day of People with Disabilities commemorates disability rights and brings awareness to essential issues for those with disabilities by promoting the “well-being of persons with disabilities in all spheres of society.” While the ADA laid a critical foundation for disability rights, the work to ensure equitable access to services and needs continues, including access to state and local emergency preparedness and response activities like crisis communication, access to resources, allocation of vaccine and other medical countermeasures, and transportation.

States have largely dismissed weakening policies, but legislatures are likely to continue considering vaccine-related bills, which may allow public health leaders to work collaboratively toward improving vaccination rates and bolster the positive impact vaccines have on population health.

Under the Tenth Amendment, states have the power to protect the health and welfare of their populations, including the authority to implement isolation and quarantine orders to limit the spread of disease. This post is an examination of state public health authority for isolation and quarantine.

States and territories have broad powers to protect public health and safety, including powers to prevent and control the spread of communicable disease typically exercised by state and territorial health departments. This authority is an essential tool in the fight to keep the public safe and healthy.

Each September marks National Preparedness Month. This year, public health emergency preparedness professionals look back on 20 years since the 9/11 attacks—the event that effectively launched the preparedness field—while actively responding to COVID-19.

Description (ideally 120-160 characters)

This report highlights lessons learned about how to remain resilient in the face of complex disasters and environmental events, following two listening sessions hosted by ASTHO and the Environmental Council of the States.

Toxic stress contributes to a variety of negative outcomes for children. And unfortunately, COVID-19 has increased the likelihood of children experiencing childhood trauma, adverse childhood experiences (ACEs), and toxic stress. States and territories should have programmatic, and policy mechanisms to both prevent and mitigate the lifelong effects. A CDC Vital Signs Report found that preventing or mitigating ACEs could reduce depressive disorder by 44%, smoking by 33%, and unemployment by 15%.

State Policy Advances in Extreme Weather Preparedness Margaret Nilz Learn about recent policies that aim to improve extreme weather preparedness, boost community resilience, and ultimately protect public health. Extreme weather events are increasing in both frequency and severity — challenging public health systems, straining infrastructure, and risking lives. As states face rising temperatures, more intense wildfires, historic flooding, and stronger hurricanes, state legislatures are adopting forward-looking policies to improve preparedness. These policies aim to boost community resilience, protect public health, and modernize emergency responses across the country. They reflect a move toward proactive planning and investment, grounded in innovation and cross-sector collaboration. Strengthening Critical Infrastructure A growing area of legislative focus is pre-disaster planning and infrastructure resilience, with jurisdictions considering policies that proactively strengthen critical systems (e.g., infrastructure, energy, and communications). For example, in Maine, LD 1 creates the Office of Resilience, tasked with coordinating and implementing state policies to improve resistance to extreme weather events. It also increases homeowners’ access to home resiliency grants, establishes a revolving loan fund for county, municipal, and tribal hazard mitigation infrastructure projects, and invests in floodplain mapping improvements. Texas SB 75 establishes a Grid Security Commission, directs an evaluation of hazards to the state’s electric grid, and makes recommendations that ensure municipalities have energy, power, and fuel supplies in the event of a catastrophic power outage. Jurisdictions are also considering legislation that would: Amend procedures for cities and counties to finance post-disaster infrastructure repair and long-term climate adaptation projects (California SB 782). Require biennial emergency preparedness exercises as well as conduct disaster preparedness training in vulnerable areas (California AB 1200). Create a real-time, interoperable emergency communication platform to improve coordination across agencies during disasters (Texas HB 147). Addressing Wildfire Risk and Air Quality Jurisdictions are also paying close attention to growing wildfire threats and subsequent poor air quality. They’re moving beyond emergency response, ensuring systems/personnel are in place before a crisis unfolds and advancing wildfire mitigation strategies. Systems and Personnel Hawaii recently enacted HB 1064, establishing an Office of the State Fire Marshal. The office is tasked with increasing the state’s readiness for wildfires, including exploring opportunities to reduce wildfire risk and developing a statewide map that displays wildfire hazard zones. California is considering AB 1003, which would require the Department of Public Health to complete a plan that includes recommendations for counties during a significant air quality event by June 30, 2026. California is considering AB 1003, which would require the Department of Public Health to complete a plan that includes recommendations for counties during a significant air quality event by June 30, 2026. It would also require these plans to incorporate county-specific outreach, stakeholder communication, and implementation. These measures build critical infrastructure for training, staffing, and coordinated response. Mitigation Strategies California (SB 326) introduced policies that accelerate the implementation of ember-resistant zones, enhance risk modeling, and support local governments through grant funding for fire reduction efforts. New legislation (CA SB 629) also updates the state’s fire hazard severity maps and sets new criteria for safety zones, including annual defensible space inspections to help residents manage fuel loads around their homes. In Colorado, recently enacted laws support increased use of prescribed burns to improve forest health (SB 7) and empower local fire protection jurisdictions to mandate vegetation removal from private properties (HB 1009). Oregon enacted SB 85, which requires the State Fire Marshal to develop recommendations for community-based wildfire mitigation and submit them to the legislature by February 2, 2026. Two bills being considered in California would: Require the creation of a framework for wildfire mitigation and a wildfire risk forecast (SB 326). Update the state’s fire hazard severity maps and set new criteria for safety zones, including annual defensible space inspections to help residents manage fuel loads around their homes (SB 629). Together, these policies signal a shift from reactive firefighting to community-level risk reduction and long-term adaptation. Improving Flooding and Hurricane Preparedness Flooding, hurricanes, and coastal erosion remain central concerns for many states, particularly those already experiencing repeat disaster declarations. As flooding and coastal threats intensify, states are taking multi-pronged approaches to preparedness — investing in early warning systems, expanding access to mitigation funding, and examining the readiness of critical facilities. These policies can assist states in both major non-hurricane flood events and hurricane preparedness and response. Several states are working to improve community-level preparedness and emergency alert systems. Vermont recently enacted H 397, which expands the Governor’s authority in the anticipation of a flood event, increases municipal access to weather alert systems, and expands access to disaster recovery grants. Texas recently introduced HB 108, which requires the Division of Emergency Management to develop a flood preparedness guide for local organizations that includes structured guidance around training, communication, and post-disaster recovery. Alongside these efforts, states are strengthening long-term mitigation strategies through grant and buyout programs. Massachusetts (H 980) and New Jersey (A 5226) are considering legislation that would establish funding programs for municipalities to address flooding (i.e., through risk assessments and mitigation measures). In Virginia, recently enacted HB 2077 expands eligibility for the Virginia Community Flood Preparedness Fund to include federally and state-recognized tribes. Employing Innovation and Research Innovation continues to shape the next frontier of preparedness policy as jurisdictions pilot emerging technologies, promote cross-sector collaboration, and rethink how they can adapt infrastructure for a changing climate. In California, legislators are considering three bills that merge cutting-edge science with emergency responses: AB 270 directs the Department of Forestry and Fire Protection to assess whether autonomous firefighting helicopters could be transitioned to operational use in the state. SB 599 proposes improvements to atmospheric river forecasting, a key strategy in flood management. SB 223 would establish a centralized wildfire smoke and health data platform within the Department of Public Health to better inform public health decisions during smoke events. Additionally, jurisdictions are addressing the resilience of the built environment, balancing traditional engineering with nature-based approaches. Mississippi enacted HB 959, extending a program focused on wind hazard mitigation and grants to retrofit homes to July 2028. Additionally, Puerto Rico introduced PS 579 (en español), which establishes the use of natural mitigation structures (e.g., sand deposits and coral planting) as the first alternative to protect infrastructure affected by coastal erosion, flooding, or other events. In Conclusion The scale of today’s public health challenges requires long-term planning, robust infrastructure, and coordination across different sectors and levels of government. Investments in real-time data systems, interoperable communication, and resilient financing tools will be essential. This Preparedness Month, the increasing momentum behind jurisdiction-level policy action shows a clear understanding: Preparedness is public health. And by focusing on resilience, jurisdictions are not only preparing for the next emergency — they are actively creating a healthier, safer, and more climate-resilient future. ASTHO will continue to monitor and provide updates on extreme weather preparedness legislation. article yes

States Stay Prepared by Supporting the Public Health Workforce Margaret Nilz, Christina Severin Learn how states use policy to support emergency preparedness and bolster the public health workforce. Public health — particularly public health preparedness — continues to experience workforce shortages, driven by longstanding systemic challenges such as chronic underfunding, high turnover, limited recruitment, and an aging workforce. While some jurisdictions report increased capacity to hire and train public health staff in recent years, they often rely on short-term or temporary funding streams, which limit long-term sustainability. State, local, tribal, and territorial health agencies have varying capacities to respond to public health emergencies, particularly in rural and underserved communities. Because a limited workforce can inhibit emergency preparedness efforts, jurisdictions recognize the importance of cultivating a resilient public health preparedness workforce to respond to future emergencies. In recent years, jurisdictions have pursued several policy interventions to bolster the public health preparedness workforce such as legislation supporting front-line clinical staff and first responders, and rulemaking and other executive powers to provide structural and financial support to critical personnel. Legislative Efforts Legislative efforts to increase benefits and support for health care and public health workers can help address the root causes of workforce challenges and lay the groundwork for sustainable, long-term investment in public health preparedness. Laws that establish standards and expectations for the preparedness workforce, including expansions of benefits or additional training, support workforce growth and retention. Since 2024, several jurisdictions expanded mental health benefits and related support for first responders and other preparedness personnel. Both Alaska (SB 103) and California (AB 2859) enacted legislation that allows peer support programs for emergency service personnel. In Alaska, the bill creates programs for entities such as law enforcement agencies, firefighters, and emergency dispatchers, while California’s bill creates programs to serve a variety of health care providers involved in emergency medical care, including physicians, nurses, paramedics, and emergency medical technicians (EMTs). Utah enacted HB 378, which requires the Department of Public Safety to annually distribute information about its critical incident stress management program to first responder agencies. The bill also requires first responder agencies to annually notify employees about the availability of mental health resources, including periodic screenings for employees and continued support for retired or separated first responders and their spouses. On a broader scale, Hawaii SB 3279 recently established a well-being project tasked with mental health trainings and support for several community organizations, including first responders, hospitals, and medical staff. In Washington, HB 2311 directs the state’s Criminal Justice Training Commission to develop resources for first responder wellness, including a peer support network for active and retired first responders and their families. States have also enacted legislation expanding traditional employment-related benefits, including Colorado (HB 24-1219), which expanded certain health benefits for firefighters to include part-time and volunteer firefighters, and Idaho HB 55, which allows retired public employees to volunteer with public employers without it being considered reemployment. In addition, Georgia HB 451 requires state and local entities to provide disability benefits for first responders who experience occupational or volunteer-related post-traumatic stress disorder. Finally, several jurisdictions enacted legislation to support education and training for their public health and health care workforce. For example, Kentucky HB 484 established an emergency medical service education grant program that provides tuition support for students pursuing paramedic certification, wage reimbursement to ambulance providers whose employees pursue certification, and funding for institutions planning to offer EMT, advanced EMT, and paramedic programs. Oklahoma HB 1696 expands eligibility for the Oklahoma Medical Loan Repayment program to include certified nurse practitioners. Two new laws in Puerto Rico require police officers with the Puerto Rico Police Bureau to be certified in first aid or immediate rescue (PC 0859) and adds seminars on sign language, suicide prevention, and conflict mediation to the Bureau’s continuing education training (PC 0543). Other Policy Levers: Beyond the Legislature Jurisdictions can also use non-legislative policy tools to enhance workforce capacity in public health preparedness. This includes rulemaking, where executive agencies use existing legal authority to adopt or amend regulations. Regulations have the force of law and can help support the public health workforce by establishing licensure standards, training requirements, and operational protocols. Wisconsin, following the enactment of AB 576 in 2024, is developing rules to establish a program for peer support and critical stress management teams in the state. And Utah recently adopted rules for its first responder mental health services grant, which helps these professionals pursue a degree or certification as a mental health provider. Government agencies can also leverage grants and contracts to fund and otherwise direct workforce development initiatives, support training programs, and expand capacity in targeted areas. Jurisdictions can strategically direct funds to address skill gaps and assist local, state, tribal, and territorial agencies build a more resilient workforce. One example of this is in Michigan, where in 2024 the state health agency issued a request for grant proposals to award up to $9 million in EMS workforce grants, building on similar awards to address EMS shortages in 2023. Executive orders are another policy option for jurisdictions to consider as they explore different pathways to workforce sustainability. Executive orders are issued by a jurisdiction’s chief executive (often the governor) and direct certain policy actions or activities. Generally, the power to issue an executive order comes from existing law or a jurisdiction’s constitution and, in most cases, does not require legislative approval or review. Several states have leveraged executive orders to advance the public health workforce and support preparedness activities more specifically. For example, Vermont and New Jersey have recently used executive orders to create or extend advisory councils on issues pertinent to public health preparedness. In 2024, Virginia’s governor issued an executive order formalizing the Office of First Responder Wellness, which provides training, counseling, and other resources to first responders in Virginia. In 2023, the governor of Maryland issued an executive order establishing a State of Preparedness directive if there is a risk of public emergency, and the actions state agencies must undertake to promote improved coordination and hazard planning. Key Takeaways Addressing public health emergency preparedness workforce challenges demands strategic, long-term policy solutions, but several implementation options are available. Health agencies can pursue a variety of policy interventions to support and prepare their public health workforce for future emergencies. ASTHO will continue to monitor this important issue and provide updates as appropriate. article yes

In 2021, ASTHO convened state environmental health directors and directors of public health preparedness to discuss innovations developed during the COVID-19 pandemic such as virtual inspections. This ASTHOBrief explores how state health and partner agencies developed methods to support environmental health work and how they are continuing to adapt moving forward.

To ensure that establishments were abiding by food safety rules during the COVID-19 pandemic and to protect the health of professionals who inspect these facilities, multiple state health agencies implemented virtual inspection protocols.