Sec. 603. Report on compliance with limitation on access to veteran and Department of Veterans Affairs information, systems, and data and Inspector General review
408 words·~2 min read·
/bill/119/s/1068/is/section-603A research copy — for the controlling text, always check the official state or federal source. Not legal advice.
Not later than 30 days after the date of the enactment of this Act, the Secretary of Veterans Affairs shall submit to the Committee on Veterans’ Affairs of the Senate and the Committee on Veterans’ Affairs of the House of Representatives a report on the compliance of the Department of Veterans Affairs with the provisions of this section and section 5729 of title 38, United States Code, as added by section 601(a), including with respect to removal of connections pursuant to section 601(c) and the removal of relevant employees and their credentials from all Department systems, premises, and networks consistent with the such sections.
Not later than 10 days of after the date of the enactment of this Act, the Inspector General of the Department of Veterans Affairs shall initiate a review on any instance of unauthorized use or other access of systems described in section 5729(a) of title 38, United States Code, as added by section 601(a), that has occurred during the period beginning on November 6, 2024, and ending on the date of the enactment of this Act. Not later than 90 days after the date of the enactment of this Act, the Inspector General shall provide the Committee on Veterans’ Affairs of the Senate and the Committee on Veterans’ Affairs of the House of Representatives a preliminary briefing on the findings of the Inspector General with respect to the review initiated pursuant to paragraph (1).
Not later than 180 days after the date of the enactment of this Act, the Inspector General shall submit to the Committee on Veterans’ Affairs of the Senate and the Committee on Veterans’ Affairs of the House of Representatives a final report on— the findings of the Inspector General with respect to the review initiated pursuant to paragraph (1); and such recommendations for administrative or legislative action as the Inspector General may have as a result of such findings. Each report submitted under this subsection shall include the following: a detailed description of the unauthorized use or access, including any actions the individual or individuals carried out; a risk assessment of any threat to privacy, contracting and financial information, protected veteran health and disability information, national security, cybersecurity, or the integrity of the applicable system as a result of such unauthorized use or access; and a detailed description of any stopped benefits, health care delivery, or other services of the Department of Veterans Affairs during the unauthorized use or access.