Veteran DATA Act

This bill prohibits the Secretary of Veterans Affairs from entering into contracts that allow contractors to sell sensitive personal information, and requires the Department to protect personal information in its contracts. Sec. 2, Prohibition of the sale of sensitive personal information: The Secretary may not enter into a contract that permits the contractor to sell or otherwise disclose for consideration sensitive personal information to another entity. Sec. 3, Protection of personal information in contracts: Within one year, the Secretary must ensure each covered contract includes a clause prohibiting covered information from being monetized, sold, or misused by any contractor, subcontractor, affiliate, or other non-Department entity, and issue guidance to employees and contractors on identifying such misuse. The Secretary must also submit a report to the House and Senate Veterans' Affairs Committees with the contract clause, guidance, and a summary of actions taken. Covered contracts are those handling covered information entered into after enactment or existing before enactment that do not expire before enactment. Covered information includes protected health information or personally identifiable information, even if anonymized, and information protected under specified federal laws and regulations.