HB 4191 would require the Secretary to maintain an Essential Medicines List and update it regularly, with initial updates within 180 days of enactment and ongoing updates at least every two years. It also directs a comprehensive risk assessment of the supply chains for medicines on that list, detailing materials, foreign-supply dependencies, and single-source risks, and it directs a mapping initiative to visualize supply chains from starting materials to finished products using data analytics.
The bill tightens interagency coordination, requires annual reporting to Congress, and establishes confidentiality safeguards and cybersecurity measures to support information sharing.
At a Glance
What It Does
The Secretary shall maintain and regularly update the Essential Medicines List, conduct a comprehensive risk assessment of associated supply chains, and map those supply chains using data analytics.
Who It Affects
Federal agencies (HHS, FDA, and partner departments), drug manufacturers, distributors, and large healthcare providers that rely on listed medicines, plus foreign suppliers with significant production shares.
Why It Matters
It creates proactive visibility and risk management for medicines essential to public health and national security, aiming to prevent shortages and improve resilience.
More articles like this one.
A weekly email with all the latest developments on this topic.
What This Bill Actually Does
The MAPS Act codifies a centralized process to identify medicines that are essential for public health and national security. It requires the Secretary to establish and maintain an Essential Medicines List, with an initial update due within 180 days of enactment and updates at least every two years.
The list will include medicines and active ingredients tied to chemical, biological, radiological, or nuclear threats, as well as medicines whose shortages would seriously harm patients with chronic conditions. After establishing the list, the Secretary must regularly review and publish updates.
In parallel, the bill mandates a formal risk assessment of the supply chains for items on the Essential Medicines List. The assessment will catalog key starting materials and excipients, identify dependencies on foreign suppliers for more than half of production, flag single-source risks, examine domestic manufacturing capabilities, and evaluate cybersecurity and other public health or national security risks.
It also requires analysis of policy gaps and provides for mitigation under authorities such as the Defense Production Act. The Secretary must submit a risk assessment report to Congress within 180 days of enactment and annually thereafter.
Separately, the MAPS Act directs HHS to map and visualize supply chains from the production of starting materials to finished dosage forms for listed medicines, using data analytics to uncover vulnerabilities. The effort involves interagency coordination, roles and responsibilities, and information-sharing protocols among the relevant federal entities, including provision for sharing information that may be confidential or proprietary with safeguards.
A not-insignificant feature is the commitment to cybersecurity protections and to exchange of information in ways that comply with confidentiality laws. The Act also sets reporting timelines: initial and ongoing lists and mappings, with annual congressional reports detailing progress, gaps, and industry engagement.
Through public-private collaboration, it aims to provide decision-makers with timely, actionable data to prevent shortages and to strengthen the nation’s pharmaceutical supply resilience.
The Five Things You Need to Know
The bill creates an Essential Medicines List and requires initial updates within 180 days, with updates at least every two years and prompt publication after each update.
The risk assessment must identify starting materials, foreign-supply reliance above 50 percent, single-supplier dependencies, domestic manufacturing capabilities, and cybersecurity and policy gaps.
The MAPS Act mandates supply-chain mapping from starting materials to finished dosage forms using data analytics, plus interagency information sharing and role definitions.
Annual reporting to Congress on risk assessment and mapping is required, with an initial 180-day report and ongoing annual updates.
Confidentiality protections and cybersecurity measures are in place to enable data sharing while safeguarding sensitive information, including use of Defense Production Act authorities for mitigation.
Section-by-Section Breakdown
Every bill we cover gets an analysis of its key sections.
Essential Medicines List (creation, updates, publication)
This section requires the Secretary to establish and maintain an Essential Medicines List. The list will be updated regularly—initially within 180 days of enactment and at least every two years thereafter—and each update must be published promptly. The criteria tie medicines to national security threats, high care priority, and risk of shortage to ensure the list reflects current public health needs.
Essential Medicines Risk Assessment
The Secretary must conduct a comprehensive risk assessment of supply chains for medicines on the Essential Medicines List. The assessment will identify key starting materials, foreign-supply dependencies greater than 50 percent, single-source risks, domestic manufacturing capabilities, cybersecurity and infrastructure risks, policy gaps, and proposed mitigations, including potential Defense Production Act authorities. A report with findings is due within 180 days of enactment and annually thereafter.
U.S. Pharmaceutical Supply Chains Mapping
The Secretary shall map and visualize supply chains for listed medicines from raw materials to finished products and use data analytics to identify vulnerabilities. The section requires clear agency roles, interagency information sharing, and inclusion of data on establishment locations, production volumes, and regulatory actions where available, while safeguarding confidentiality.
Definitions
This section defines key terms used in the Act, including advanced manufacturing, cybersecurity threat, drug, and Secretary, aligning their meanings with related federal statutes to ensure consistent interpretation across departments.
Additional Provisions
This section clarifies that the Secretary’s role in updating the Essential Medicines List is treated as full compliance with Executive Order obligations, provides confidential-information protections for information shared under Sections 3 and 4, and requires robust cybersecurity measures to protect data integrity and privacy in the monitoring efforts.
This bill is one of many.
Codify tracks hundreds of bills on Healthcare across all five countries.
Explore Healthcare in Codify Search →Who Benefits and Who Bears the Cost
Every bill creates winners and losers. Here's who stands to gain and who bears the cost.
Who Benefits
- HHS, FDA and other participating federal agencies gain structured visibility into essential medicines and coordinated risk responses.
- Hospitals and health systems that rely on essential medicines gain advance warning of potential shortages to adjust procurement.
- Pharmaceutical manufacturers with diversified supply chains receive clearer signals about vulnerabilities and collaboration opportunities.
- State and local public health agencies benefit from data-driven insights for planning and response.
- National security and public health policymakers obtain richer data for contingency planning.
Who Bears the Cost
- Manufacturers and suppliers must provide data and participate in mapping and risk assessment, incurring compliance costs.
- Distributors and wholesalers face new reporting obligations and data-sharing requirements.
- Foreign suppliers with portions of the supply chain may face increased regulatory visibility.
- Federal agencies must fund and operate the mapping, data-sharing infrastructure, and cybersecurity protections.
- Private entities sharing data may bear cybersecurity obligations and confidentiality considerations.
Key Issues
The Core Tension
The central dilemma is balancing comprehensive, timely visibility into global and domestic pharmaceutical supply chains with the need to protect confidential business information and avoid imposing unsustainable compliance costs, all while ensuring accurate, actionable data informs fast, protective decision-making.
The bill creates a robust framework for visibility into pharmaceutical supply chains, but it raises tensions around data sharing, confidentiality, and the costs of compliance for industry. While the public health and national security rationale is clear, the quality and timeliness of data, potential data gaps, and the risk of overburdening industry with reporting requirements are real considerations.
The act relies on cross-agency coordination and public-private partnerships, which can be slow to harmonize tools, standards, and workflows. Finally, the balance between openness of information for resilience and protection of confidential commercial information will be essential to implementation.
Try it yourself.
Ask a question in plain English, or pick a topic below. Results in seconds.