1. Short title This Act may be cited as the 9–8–8 Lifeline Cybersecurity Responsibility Act . 2. Protecting suicide prevention lifeline from cybersecurity incidents (a) National suicide prevention lifeline program Section 520E–3(b) of the Public Health Service Act (42 U.S.C. 290bb–36c(b)) is amended— (1) in paragraph (4), by striking and at the end; (2) in paragraph (5), by striking the period at the end and inserting ; and ; and (3) by adding at the end the following: (6) coordinating with the Chief Information Security Officer of the Department of Health and Human Services to take such steps as may be necessary to ensure the program is protected from cybersecurity incidents and eliminates known cybersecurity vulnerabilities. . (b) Reporting Section 520E–3 of the Public Health Service Act ( 42 U.S.C. 290bb–36c ) is amended— (1) by redesignating subsection (f) as subsection (g); and (2) by inserting after subsection (e) the following: (f) Cybersecurity reporting (1) In general (A) In general The program’s network administrator receiving Federal funding pursuant to subsection (a) shall report to the Assistant Secretary, in a manner that protects personal privacy, consistent with applicable Federal and State privacy laws— (i) any identified cybersecurity vulnerabilities to the program within 24 hours of identification of such a vulnerability; and (ii) any identified cybersecurity incidents to the program within 24 hours of identification of such incident. (B) Local and regional crisis centers Local and regional crisis centers participating in the program shall report to the program’s network administrator identified in subparagraph (A), in a manner that protects personal privacy, consistent with applicable Federal and State privacy laws— (i) any identified cybersecurity vulnerabilities to the program within 24 hours of identification of such vulnerability