Bill > S3161

This bill, known as the "Protecting DOD Data Act of 2025," aims to enhance the protection of personal data related to operational security for Department of Defense (DOD) personnel. The bill requires the Secretary of Defense to prioritize and protect personal data that could impact the operational security of military members and civilian employees, maintaining privacy standards that were in effect prior to the bill's enactment. By June 1, 2026, the Secretary must review and potentially update guidance on data protection. The bill limits the storage of sensitive personnel data to DOD servers or cloud services, with narrow exceptions that require written certification considering operational security risks and national security interests. The Secretary must notify Congress within 30 days of any changes to departmental data protection policies, significant data storage events, or cybersecurity incidents involving personnel data. Additionally, the bill mandates the development of standards, training, and security debriefing processes for system owners with access to sensitive personnel data, including ongoing security briefings even after personnel leave the Department. These provisions are designed to create a more robust and proactive approach to protecting DOD personnel data and preventing potential security breaches.

Military Affairs and Security

https://www.congress.gov/bill/119th-congress/senate-bill/3161/all-info