
(Brussels) An EU action plan aimed at bolstering the cybersecurity of hospitals and healthcare providers has been unveiled by the European Commission in Brussels today. The action plan was announced in President von der Leyen’s political guidelines as a key priority within the first 100 days of her new mandate. “The initiative – according to the Commission – is an important step in shielding the healthcare sector from cyber threats. By enhancing threat detection, preparedness and response capabilities of hospitals and health providers, it will create a safer and more secure environment for patients and health professionals”. In a nutshell, the action plan focuses on four priorities: enhanced prevention (the plan helps to build the healthcare sector’s capacities to prevent cybersecurity incidents through enhanced preparedness measures); better detection and identification of threats; response to cyberattacks to minimise impact; and deterrence (protecting European healthcare systems by deterring cyber threat actors from attacking them). “The action plan will be implemented hand in hand with healthcare providers, Member States, and the cybersecurity community”. As explained at a press conference, the action plan is the start of a process to improve cybersecurity in the healthcare sector. “Specific actions will be rolled out progressively in 2025 and 2026”.