Displaying 1-20 of 34 results for

Learn about the work of ASTHO's learning community to prevent ACEs through partnership, data, and messaging.

Good news and bad news on tobacco use: smoking rates are down but e-cigarette use continuing rapid rise among youth. Read how states are combating the problem.

State Policy Trends in Cybersecurity and Public Health Preparedness Maggie Nilz Learn how states are including cybersecurity in their emergency preparedness work in this Health Policy Update. Cybersecurity is an increasingly important component of public health preparedness as state cybersecurity policy intersects with public health agency responsibilities. Public health agencies rely on interconnected digital systems and critical infrastructure for disease surveillance, laboratory reporting, emergency communications, and health data management, making cybersecurity critical to maintaining these functions. Beyond compromising sensitive data and potentially harming patients, cyber incidents can disrupt essential public health services, including emergency response operations. Health care data breaches have steadily increased over the last 15 years, highlighting growing risks for government and health systems. A recent report showed that more than 7,000 health care data breaches were reported to the Department of Health and Human Services since 2009, and reported HIPAA data breaches in 2023 were nearly double the number recorded in 2018. Meanwhile, preparedness capacity has lagged: as of 2022, only 13% of local health departments reported being prepared for cyber-related disruptions, and recent scans show cybersecurity is rarely included in emergency preparedness planning. In response at the federal level, HHS recently announced it is undoing a 2024 reorganization by returning department-wide technology responsibilities to the Office of the Chief Information Officer while refocusing the Office of the National Coordinator for Health Information Technology on improving nationwide health IT interoperability and data sharing. In recent years, state and territorial legislatures have begun to address these gaps by incorporating cybersecurity into preparedness, health care oversight, and statewide governance structures. These legislative trends signal a need to integrate cybersecurity into emergency operations plans, strengthen cross-sector coordination, and safeguard the continuity of public health services. Some of the most recent policies considered and enacted by legislatures treat cyber incidents as emergencies, expand reporting requirements, and strengthen cyber governance. Cyber Incidents Are Being Built into Emergency Preparedness Frameworks In response to these growing threats, jurisdictions have begun incorporating cyber response into emergency plans and strategies, reinforcing cybersecurity as essential to preparedness. These developments highlight growing awareness that cyber incidents can disrupt critical services, much like natural disasters. In 2025, New York enacted S 7672, which requires municipal entities and public authorities report cybersecurity incidents and demands for ransom to the state Division of Homeland Security and Emergency Services. In addition, it directs the Director of the Office of Information Services to establish cybersecurity training and protection standards for state systems as well as require cybersecurity training for state and local government employees. Virginia is currently considering HB 83, which would establish a volunteer Cyber Civilian Corps within the state IT agency to provide rapid assistance during cybersecurity incidents affecting municipalities, nonprofits, education, and critical infrastructure. Preparedness efforts also extend beyond legislation to executive action. In February 2026, Minnesota Governor Tim Walz authorized $1.2 million in state disaster assistance to support response efforts and restore critical systems in response to a cyber incident that disrupted digital services in Saint Paul on July 29, 2025. Additionally, the National Governors Association has included cybersecurity as a primary consideration for planning and preparedness in their latest edition of the Public Health Emergency Playbook. Health care and Public Health Critical Sectors Are Facing New Cyber Requirements Beyond emergency response frameworks, jurisdictions are also adopting cybersecurity reporting and planning requirements for health care and public health organizations. Companion bills in Tennessee (HB 511/SB 555) would require health care providers and facilities to notify their contracted health insurers of cybersecurity incidents. In Maine, LD 2103 would require hospitals to adopt cybersecurity plans to protect patient data and maintain operations, and must include cybersecurity training for employees and board members. New Jersey is looking to adopt and implement a more comprehensive cybersecurity plan across all sectors. This session, legislators have introduced at least two cyber security bills: A 3231 would require “sensitive businesses” (defined as those engaged in financial, essential infrastructure, or health care industries) to report cybersecurity incidents to the New Jersey Cybersecurity and Communications Integration Cell (NJCCIC) when they are aware of their occurrence and would require NJCCIC to conduct a cybersecurity audit within 30 days of notification. A 3283 would require the same “sensitive businesses” to implement cybersecurity programs in accordance with standards adopted by NJCCIC and certify compliance annually. As states expand reporting and cybersecurity requirements, these obligations may intersect with public health reporting and continuity planning. States Are Strengthening Government Cyber Governance and Coordination In addition to sector-specific requirements, jurisdictions are also strengthening the governance structures responsible for coordinating cybersecurity, improving their ability to respond to large-scale incidents affecting public systems. Legislation enacted recently in Texas and California aim to improve coordination among state government by establishing a state agency centralizing cybersecurity incident prevention and response (Texas HB 150) and mandating the development of a cybersecurity playbook to strengthen information sharing (California AB 979). A 2024 bill enacted in Puerto Rico (PC 1530) requires commonwealth agencies to develop and implement a cybersecurity program, which must include a yearly risk assessment as well as vulnerability assessment. At least three jurisdictions are currently considering bills strengthening established cybersecurity programs, with two states recently passing legislation. Utah recently enacted a bill authorizing the Utah Cyber Center to conduct voluntary cybersecurity risk assessments for critical infrastructure and coordinate with government entities on infrastructure safety (HB 165). Utah also enacted legislation creating a specific funding stream for the Center to use for various activities, including implementing a statewide cybersecurity plan and conducting assessments for governmental entities (SB 123). Kansas enacted HB 2574, which would require chief information security officers for the executive, legislative, and judicial branches to adopt cybersecurity programs based on a nationally recognized standard for governmental entities. Finally, Florida recently passed SB 7024, which would expand the state’s public record exemption to include risk assessments, information related to cybersecurity breaches, and information related to data protection, ensuring the confidentiality of sensitive cybersecurity information held by state agencies; the bill is with the governor for final consideration. Key Takeaways for Preparedness Leaders Cybersecurity is critical for preparedness across multiple policy areas, and requires new planning, coordination, and oversight responsibilities. By including cyber incidents into disaster frameworks, standards for health care organizations, and governance, preparedness leaders may find themselves more directly engaged in integrating cybersecurity into emergency operations, exercises, and cross-sector partnerships. For state and territorial health agencies beginning to incorporate cybersecurity into their preparedness plans, agencies such as the Cybersecurity and Infrastructure Security Agency provide jurisdictional support and resources to guide this work. article yes

Learn how state and territorial legislatures can bolster or restrict public health legal authority, with examples from early COVID-19 as well as 2024.

This brief examines the ways states can support certification for community health workers.

As schools work to stay open for in-person learning, it is essential to understand key recommendations related to COVID-19 prevention in K-12 schools. CDC recommends that health department staff work closely with K-12 schools to effectively prevent and respond to COVID-19 infections. Health department staff may look to school officials to understand the unique context of each school setting, while school officials may look to health department staff to better understand federal, state, and local guidance. This document compiles CDC guidance for COVID-19 prevention strategies in K-12 schools and should supplement state or territorial and local policies. Schools and health departments should layer the COVID-19 prevention strategies listed in this ASTHOBrief.

This brief highlights four top takeaways from the experience of six public health agencies working to establish and strengthen their own performance management systems.

Supporting Resilience in Rural Areas Through Cross-Sector Partnerships ASTHO, Association of State and Territorial Health Officials, rural health, public health, public health partnerships, health in all policies, government agencies, community organizations, academic institutions, rural populations, infrastructure improvement, healthcare systems, environmental determinants, climate change, sustainable practices, environmental challenges, extreme weather, environmental health risks, protective factors, engaging rural partners, building trust, idaho department of health and welfare, michigan department of health, health equity, austin climate equity plan, healthy start oregon, kansas department of commerce, wisconsin broadband access, chesapeake housing mission Ali Aslam The key to making rural communities more resilient is for public health to partner with community organizations, governmental agencies, and other critical partners. Working across sectors of government agencies, community organizations, businesses, and academic institutions is critical to address public health challenges in rural communities. Using a Health in All Policies (HiAP) approach helps public health agencies better address the interconnected social, economic, and environmental determinants of health impacting rural communities and improve community well-being. HiAP brings together a multitude of perspectives to develop holistic strategies that can support infrastructure improvements, sustainable land use practices, diversified economic opportunities, safer and healthier home environments, and robust health care systems in rural communities. Through community leadership and collaboration, this cross-sector approach can enhance the capacity of rural communities to build resilience, adapt to climate change, and foster long-term sustainability to improve public health outcomes. Learn how states are implementing HiAP strategies to improve health in their rural communities in this report. Get the Report (PDF) website yes

Opportunities for Public Health Agencies to Advance Sustainable Financing of Community Health Worker Programs Advancing Sustainable Financing of Community Health Workers Explore how health officials can play key roles as funders, administrators, and policy designers to advance sustainable financing of community health workers. Many states face upcoming funding gaps for community health worker (CHW) positions, with COVID-19 related grant funding streams expiring. Concurrently, many states are rapidly beginning to cover CHW services under Medicaid. In addition, Medicare launched a new reimbursement opportunity for CHWs in January 2024. These factors create an opportunity for state and territorial health agencies to develop or contribute to equitable reimbursement and robust implementation. This report details how health officials can play key roles as funders, administrators, and policy design champions to ultimately advance sustainable financing of CHW services. Get the Report (PDF) website yes

State and territorial health agencies continue to be challenged by the opioid epidemic, which has been exacerbated by the COVID-19 pandemic. Addressing the opioid crisis requires a robust public health response, which could be helped by resources from pending and future opioid settlement funds.

When rural hospitals close, it increases the distance people must travel for essential healthcare services. The COVID-19 pandemic has highlighted and magnified the factors leading to rural hospital closures across the country. Many healthcare facilities suspended elective procedures to conserve critically needed personal protective equipment and reduce the risk of exposure to COVID-19 by patients and hospital staff. For many rural hospitals, however, the suspension of elective procedures with the reduced the use of non-urgent services by apprehensive patients meant a loss of revenue and the furloughed healthcare staff. Since the onset of the COVID-19 pandemic, approximately half of all rural hospitals are experiencing negative operating margins due to reduced outpatient revenue. The rate increases in states that have not expanded Medicaid. Unfortunately, these kinds of challenges are not new to rural hospitals.

On this episode, speakers will discuss the impact of COVID-19 on rural health infrastructure and workforce, and how to improve these conditions in rural communities. We hear from three leaders who work in states with high rural healthcare needs and vast provider shortages to learn how to increase access to quality healthcare in rural areas, barriers that exist, and innovative strategies for rural health workforce recruitment and retention.

In an effort to help meet demand, some states and territories have joined interjurisdictional licensing compacts that allow a mental health care provider licensed in one state to provide care in another state—without needing to gain licensure in multiple states. These agreements also offer guidance on patient privacy for services rendered remotely or from out-of-state.

Under the Tenth Amendment, states have the power to protect the health and welfare of their populations, including the authority to implement isolation and quarantine orders to limit the spread of disease. This post is an examination of state public health authority for isolation and quarantine.

The 2020 holiday season is coinciding with a nationwide surge of COVID-19 cases. With great concern that holiday travel to see loved ones may exacerbate community spread of the virus, many states are increasing public health measures before the winter holiday season. As of November 16, 2020, 13 states and D.C. had a quarantine requirement for out-of-state travelers. The U.S. territories also have instituted travel restrictions to limit the spread of COVID-19.

Several states and territories, as well as many local governments, are going beyond recommendations and requiring individuals to wear face coverings when they are in public settings and spaces (i.e. grocery stores, retail stores, restaurants, public and private transportation services, parks, etc.). Ongoing research and evidence suggests the relationship between mandatory face coverings and declines in daily COVID-19 growth rates is statistically significant.

ASTHO Legislative Prospectus | Prevention 2025 state legislative action on infectious disease control and prevention.

In collaboration with CDC, ASTHO launched its EPHT Fellowship Program to support state and territorial health agencies without dedicated federal funding in building tracking capacity. This brief shares solutions from Delaware and Kansas that other states and territories can explore in their jurisdictions.

Assessment of Foundational Capabilities Assessment of Foundational Capabilities in Public Health Grace Gorenflo, Brian Lentes, Melissa Touma, Anna Bradley Learn how state health departments are implementing the Foundational Public Health Services model to bolster their public health work in this report. The Foundational Public Health Services model serves as the core framework for defining cross-cutting capabilities essential for public health departments to deliver a minimum standard of service. This report compiles examples and assessments from 25 states to illustrate the implementation and progress of these foundational capabilities. Highlighting the importance of public health infrastructure, the report also includes a summary of state activities, showcases models and strategies for modernization and transformation, and reference tools such as cost assessments, legislation, and funding mechanisms used to strengthen public health systems nationwide. Dive into the full report to access these resources. Download the Report (PDF) article yes

State and territorial health agency health care-associated infection/antimicrobial-resistant programs play a critical role for spearheading prevention, detection, and outbreak response efforts in their communities. Support from agency leaders is critical to ensuring that new federally-supported requirements are met.