Skip to content
Govbase
Govbase
Congress·In Committee·H.R. 7241

Congress targets VA contractors’ ability to sell veterans’ health and identifying information

Protect Veterans from the THIEF Act

about 2 months ago·View on Congress.gov

Legislative Progress

House
Senate
President
Law

Key Points

  • Would bar the Department of Veterans Affairs from signing contracts that let a contractor sell veterans’ sensitive personal info for money.
  • Covers health and identifying information, even if it has been “anonymized,” aiming to stop companies from cashing in on veterans’ data.
  • Would require VA, within 1 year of the law taking effect, to add or update contract language that blocks contractors, subcontractors, and affiliates from monetizing or misusing this info.
  • Would require VA to issue guidance to staff and contractors on how to spot and prevent data-selling or other misuse in VA contracts.
  • Would require VA to report back to Congress within 1 year with the new contract clause, the guidance, and other steps taken.
VeteransData PrivacyHealthcareConsumer Protection

Impact Analysis

Personal Impact

How this policy affects specific groups of people

Mixed Impacts(1)
Federal Employee
Neutral
Positive Impacts(5)
Military Veteran
Helps
Veterans Benefits
Helps
Chronic Illness
Helps
Mental Health
Helps
Disability Benefits
Helps

Milestones

3 milestones3 actions
Feb 12, 2026House

Referred to the Subcommittee on Oversight and Investigations.

Jan 27, 2026House

Referred to the House Committee on Veterans' Affairs.

Jan 27, 2026

Introduced in House

What Happens Next

Projected impacts based on AI analysis

After the law is enacted (applies to contracts the VA enters into going forward)

VA updates new contracts so contractors cannot sell VA-held sensitive personal or health information

If you’re a veteran, vendors working with the VA should be barred from profiting by selling your data as soon as new contracts are signed under the updated rules

Within 1 year after enactment

VA modifies existing covered contracts to add a clause banning monetization, sale, or misuse of covered information

Companies already handling VA information may have their contracts changed, which can reduce privacy risk from ongoing vendor relationships

Within 1 year after enactment

VA issues guidance for employees and contractors on how to identify data monetization, sale, or misuse

You may see stricter rules for who can access your records and clearer reporting if something looks like data misuse

Within 1 year after enactment

VA sends a report to the House and Senate Veterans’ Affairs Committees with the new clause and guidance

Congress gets a paper trail to check whether the VA actually tightened contracts and enforcement, which can affect how strongly the policy is carried out

Related Bills

1 bill

Source Information

Document Type

Congressional Bill

Official Title

Protect Veterans from the THIEF Act

Bill NumberHR 7241
Congress119th Congress
ChamberHouse of Representatives
Latest ActionReferred to the Subcommittee on Oversight and Investigations.

Sponsor

Cosponsors

(1)
R: 1

Analysis generated by AI. Always verify with official sources.