VA Call Center Multi-Factor Authentication Act

Bill Number

H.R. 7704

Origin Chamber

House

Congress

119th Congress, Session 2

Policy Area

Armed Forces and National Security

Status

Introduced

Latest Action

2026-02-25: Referred to the House Committee on Veterans' Affairs.

Last Updated

2026-04-28T08:06:00Z

AI-Generated Summary

Purpose

The legislation, titled the "VA Call Center Multi-Factor Authentication Act," aims to improve security for veterans' personal and financial information by requiring stronger identity verification in Department of Veterans Affairs (VA) call centers. It focuses on preventing fraud or impersonation during sensitive interactions that could harm veterans or beneficiaries.

Key Provisions

• Multi-Factor Authentication (MFA) Requirement: VA call centers must use MFA—a method that verifies identity through multiple steps, such as a password plus a code sent to a phone or email—to confirm the caller's identity.
• Application to High-Impact Actions: MFA applies only to "high-impact" actions, defined as those where someone pretending to be the veteran or beneficiary could cause lasting harm. Examples include:
• Diverting funds (e.g., redirecting benefit payments).
• Manipulating access to accounts (e.g., changing login details).
• Disclosing sensitive information (e.g., medical or personal records).
• Scope: This builds on existing VA security controls under Section 5722(b)(3) of title 38, United States Code, which deals with protecting veterans' data.

Significant Changes to Existing Law

• Amends Section 5722(b)(3) of title 38, U.S. Code, by adding a specific mandate for MFA in call centers for high-impact actions.
• Previously, this section required general security controls for information systems but did not explicitly demand MFA for phone-based interactions, leaving a potential gap in verifying callers over the phone.

Potential Impacts

• On Government Agencies: The VA will need to update call center procedures and technology to implement MFA, which may involve training staff, upgrading systems, and ensuring compliance. This could increase short-term costs but reduce long-term fraud losses.
• On Citizens: Veterans and beneficiaries gain stronger protection against identity theft and unauthorized access to benefits, potentially building trust in VA services. However, it might add slight delays or inconvenience during calls for sensitive matters.
• On International Relations: No direct impact, as the bill focuses on domestic VA operations.

Main Stakeholders Affected

• Veterans and Beneficiaries: Primary beneficiaries of enhanced security, as it safeguards their funds, accounts, and private data.
• VA Call Centers and Staff: Must adopt and enforce MFA, affecting daily operations and workflow.
• Taxpayers and Congress: Indirectly involved through funding for implementation and oversight of VA efficiency.

Notable Legal, Constitutional, or Political Implications

• Legal: Strengthens compliance with federal data protection laws (e.g., under the Privacy Act) by mandating proactive fraud prevention, without creating new penalties or enforcement mechanisms in this bill.
• Constitutional: No apparent conflicts; it aligns with the government's duty to protect citizens' information without infringing on due process or privacy rights, as MFA targets only high-risk actions.
• Political: Supports bipartisan priorities in veteran care by addressing fraud vulnerabilities, potentially influencing future VA funding debates on cybersecurity. The bill was introduced by Representatives Moore (AL), Van Epps, and Rose, and referred to the House Committee on Veterans' Affairs for review.

This summary was generated by AI and may contain inaccuracies. Refer to the official source document for the authoritative text.

Sponsor

Rep. Moore, Barry [R-AL-1]

Cosponsors (4)

Rep. Van Epps, Matt [R-TN-7], Rep. Rose, John W. [R-TN-6], Rep. Schmidt, Derek [R-KS-2], Rep. Cline, Ben [R-VA-6]

Recent Actions

• 2026-02-25: Referred to the House Committee on Veterans' Affairs.
• 2026-02-25: Introduced in House
• 2026-02-25: Introduced in House

Bill Versions

• VA Call Center Multi-Factor Authentication Act — issued 2026-02-25 — PDF (2 pages)