Protecting Seniors' Data Act of 2025

Bill Number

S. 1943

Origin Chamber

Senate

Congress

119th Congress, Session 1

Policy Area

Social Welfare

Status

Introduced

Latest Action

2025-06-04: Read twice and referred to the Committee on Finance.

Last Updated

2025-06-23T14:14:29Z

AI-Generated Summary

Purpose

The Protecting Seniors' Data Act of 2025 aims to safeguard sensitive personal data held by the Social Security Administration (SSA) by mandating audits of its computer systems. It focuses on identifying security risks and privacy violations potentially introduced by specific government entities or individuals, ensuring the protection of seniors' and beneficiaries' information.

Key Provisions

• Audit Initiation: Within 60 days of enactment, the Comptroller General of the United States (head of the Government Accountability Office, or GAO) must begin a comprehensive audit of SSA's computer systems and networks. This includes systems accessed by the United States DOGE Service, the U.S. DOGE Service Temporary Organization, their employees, volunteers, or related DOGE teams.
• Audit Scope: The audit will examine security vulnerabilities or software bugs created, installed, or modified by these entities or individuals. It will also check for violations of key federal privacy laws, such as:
• The Privacy Act of 1974 (protects personal information in government records).
• Section 6103 of the Internal Revenue Code (restricts disclosure of tax return information).
• The Federal Information Security Management Act (FISMA; requires federal agencies to secure their IT systems).
• Section 1106 of the Social Security Act (governs disclosure of SSA information).
• Audit Report: Within one year of enactment, the Comptroller General must submit a report (or multiple reports) to the Senate Committee on Finance, the House Committee on Ways and Means, and the SSA Commissioner. The report will detail findings and include recommendations for new laws or administrative fixes.
• Required Actions by SSA: Within 90 days of receiving the report, the SSA Commissioner must:
• Repair any identified vulnerabilities or bugs.
• Submit a status update on these repairs to the Senate Finance Committee and House Ways and Means Committee.

Significant Changes to Existing Law

This bill introduces a targeted, time-bound audit requirement specifically for SSA systems accessed by DOGE-related entities, which does not appear in current law. It builds on existing privacy statutes (like the Privacy Act and FISMA) by enforcing accountability for potential breaches or modifications by temporary or affiliated government groups. Previously, such audits might occur under general GAO authority or agency self-assessments, but this mandates a focused review with strict deadlines and congressional reporting.

Potential Impacts

• Government Agencies: The SSA will face immediate operational demands to conduct repairs and reporting, potentially increasing administrative costs and workload. The GAO will need resources for the audit, and DOGE Service entities may undergo scrutiny, leading to tighter controls on their access to federal systems.
• Citizens: Seniors and Social Security beneficiaries could benefit from enhanced data security, reducing risks of identity theft or unauthorized disclosures of personal information like Social Security numbers or benefit details.
• International Relations: No direct impacts, as the bill focuses on domestic federal systems and privacy laws.

Main Stakeholders Affected

• Social Security Administration (SSA): Directly responsible for implementing fixes and reporting.
• Government Accountability Office (GAO) and Comptroller General: Tasked with performing and reporting on the audit.
• Congressional Committees: Senate Finance and House Ways and Means, which receive reports and may act on recommendations.
• United States DOGE Service and Affiliates: Subject to investigation for potential security and privacy issues in their interactions with SSA systems.
• Seniors and Social Security Beneficiaries: Primary beneficiaries of improved data protection, as the bill is framed around "protecting seniors' data."

Notable Legal, Constitutional, or Political Implications

• Legal Implications: Strengthens enforcement of existing privacy laws by requiring proactive audits and remedies, potentially setting a precedent for similar reviews of other agencies' systems accessed by temporary government bodies. It could lead to civil or administrative penalties if violations are found.
• Constitutional Implications: Aligns with the Constitution's allocation of congressional oversight powers (Article I) over executive agencies, ensuring accountability without infringing on separation of powers.
• Political Implications: The bill, introduced by Senators Whitehouse, Wyden, and Warren, highlights concerns over data handling by newer or temporary entities like the DOGE Service (possibly referring to efficiency-focused initiatives). It may fuel debates on government transparency and the risks of outsourced or volunteer-led modifications to critical systems, influencing future appropriations or reforms for federal IT security.

This summary was generated by AI and may contain inaccuracies. Refer to the official source document for the authoritative text.

Sponsor

Sen. Whitehouse, Sheldon [D-RI]

Cosponsors (2)

Sen. Wyden, Ron [D-OR], Sen. Warren, Elizabeth [D-MA]

Recent Actions

• 2025-06-04: Read twice and referred to the Committee on Finance.
• 2025-06-04: Introduced in Senate

Bill Versions

• Protecting Seniors' Data Act of 2025 — issued 2025-06-04 — PDF (3 pages)