Tap any paragraph to write a margin note. Your notes collect in the Desk below the text and file under cases with @. The side-by-side margin rail opens on a larger screen.

Code · U.S. Code · Title 38 - VETERANS’ BENEFITS · CHAPTER 57— RECORDS AND INVESTIGATIONS · SUBCHAPTER III— INFORMATION SECURITY · § 5724

§ 5724. Provision of credit protection and other services

458 words·~2 min read·/usc/title-38/section-5724

A research copy — for the controlling text, always check the official state or federal source. Not legal advice.

(a)Independent Risk Analysis.—
(1)In the event of a data breach with respect to sensitive personal information that is processed or maintained by the Secretary, the Secretary shall ensure that, as soon as possible after the data breach, a non-Department entity or the Office of Inspector General of the Department conducts an independent risk analysis of the data breach to determine the level of risk associated with the data breach for the potential misuse of any sensitive personal information involved in the data breach.
(2)If the Secretary determines, based on the findings of a risk analysis conducted under paragraph (1), that a reasonable risk exists for the potential misuse of sensitive personal information involved in a data breach, the Secretary shall provide credit protection services in accordance with the regulations prescribed by the Secretary under this section.
(b)Regulations.— Not later than 180 days after the date of the enactment of the Veterans Benefits, Health Care, and Information Technology Act of 2006, the Secretary shall prescribe interim regulations for the provision of the following in accordance with subsection (a)(2):
(1)Notification.
(2)Data mining.
(3)Fraud alerts.
(4)Data breach analysis.
(5)Credit monitoring.
(6)Identity theft insurance.
(7)Credit protection services.
(c)Report.—
(1)For each data breach with respect to sensitive personal information processed or maintained by the Secretary, the Secretary shall promptly submit to the Committees on Veterans’ Affairs of the Senate and House of Representatives a report containing the findings of any independent risk analysis conducted under subsection (a)(1), any determination of the Secretary under subsection (a)(2), and a description of any services provided pursuant to subsection (b).
(2)In the event of a data breach with respect to sensitive personal information processed or maintained by the Secretary that is the sensitive personal information of a member of the Army, Navy, Air Force, Marine Corps, or Space Force or a civilian officer or employee of the Department of Defense, the Secretary shall submit the report required under paragraph
(1)to the Committee on Armed Services of the Senate and the Committee on Armed Services of the House of Representatives in addition to the Committees on Veterans’ Affairs of the Senate and House of Representatives.
(Added Pub. L. 109–461, title IX, § 902(a), Dec. 22, 2006, 120 Stat. 3455; amended Pub. L. 116–283, div. A, title IX, § 926(h), Jan. 1, 2021, 134 Stat. 3831.)
Connections126 cite this · traces to 1
Cited by 126 sections · top 60
register
4 references not yet in our index
  • Pub. L. 109–461, title IX, § 902(a)
  • 120 Stat. 3455
  • 134 Stat. 3831
  • Pub. L. 109–461
Citation graph
cites case law
§ 5724
Provision of credit protection and other services
Fed. Reg.×123
C.F.R.×2
U.S.C.×1
Pub. L.Pub. L. 109–461, title IX, § 902(a)
Stat.120 Stat. 3455
Stat.134 Stat. 3831
Pub. L.Pub. L. 109–461
Cites 5Cited by 126 across 3 sources
★   the supreme law of the land   ★
Don't Tread on Me
E Pluribus Unum — out of many, one

"If you don't know your rights, you don't have any."

Marginalia · a citizen's law index
A research desk, not legal advice. Always read the cited source before relying on a summary.
Questions or an issue? support@self-law.org
disclaimerMarginalia is a research index, not a law firm. Nothing on this site is legal, tax, or financial advice and no attorney–client relationship is formed by using it. Statutes, regulations, and case law change; summaries, search results, AI output, and member posts may be incomplete, out of date, or wrong. Any interpretation drawn from material on this site should be validated by a licensed attorney in your jurisdiction before you act on it.