Skip to content
Congress·In Committee·about 1 month ago

Congress targets VA contractors’ ability to sell veterans’ health and identifying information

Also known as: Protect Veterans from the THIEF Act

Legislative Progress

✓ Filed
Review
House
Senate
President

Impacts

Mixed Impacts(1)
Federal Employee
Neutral
Positive Impacts(5)
Military Veteran
Helps
Veterans Benefits
Helps
Chronic Illness
Helps
Mental Health
Helps
Disability Benefits
Helps

Key Points

  • Would bar the Department of Veterans Affairs from signing contracts that let a contractor sell veterans’ sensitive personal info for money.
  • Covers health and identifying information, even if it has been “anonymized,” aiming to stop companies from cashing in on veterans’ data.
  • Would require VA, within 1 year of the law taking effect, to add or update contract language that blocks contractors, subcontractors, and affiliates from monetizing or misusing this info.
  • Would require VA to issue guidance to staff and contractors on how to spot and prevent data-selling or other misuse in VA contracts.
  • Would require VA to report back to Congress within 1 year with the new contract clause, the guidance, and other steps taken.
VeteransData PrivacyHealthcareConsumer Protection

Milestones

3 milestones3 actions
Feb 12, 2026House

Referred to the Subcommittee on Oversight and Investigations.

Jan 27, 2026House

Referred to the House Committee on Veterans' Affairs.

Jan 27, 2026

Introduced in House

What Happens Next

Projected impacts based on AI analysis

After the law is enacted (applies to contracts the VA enters into going forward)

VA updates new contracts so contractors cannot sell VA-held sensitive personal or health information

If you’re a veteran, vendors working with the VA should be barred from profiting by selling your data as soon as new contracts are signed under the updated rules

Within 1 year after enactment

VA modifies existing covered contracts to add a clause banning monetization, sale, or misuse of covered information

Companies already handling VA information may have their contracts changed, which can reduce privacy risk from ongoing vendor relationships

Within 1 year after enactment

VA issues guidance for employees and contractors on how to identify data monetization, sale, or misuse

You may see stricter rules for who can access your records and clearer reporting if something looks like data misuse

Within 1 year after enactment

VA sends a report to the House and Senate Veterans’ Affairs Committees with the new clause and guidance

Congress gets a paper trail to check whether the VA actually tightened contracts and enforcement, which can affect how strongly the policy is carried out

Related News

1 article
U.S. Representative Nikki Budzinski (official House website / press post)·about 1 month ago

Budzinski, Barrett Introduce Legislation to Protect Veterans’ Data

Announcement of the Veteran Data Accountability for Third-party Actors (DATA) Act to prevent third-party VA vendors from monetizing/misusing veterans’ data; describes contract clause, guidance, and reporting requirements.

+

Source Information

Document Type

Congressional Bill

Official Title

Protect Veterans from the THIEF Act

Bill NumberHR 7241
Congress119th Congress
ChamberHouse of Representatives
Latest ActionReferred to the Subcommittee on Oversight and Investigations.

Sponsor

Cosponsors

(1)
R: 1

Analysis generated by AI. While we strive for accuracy, this should not be considered legal or professional advice. Always verify information with official government sources.