H.R. 10034: Reducing the Effects of the Cyberattack on OPM Victims Enduring Response and Protecting Identifiable Information Act

This bill would change existing law to extend and expand identity protection benefits for people whose personal information was exposed in federal government data breaches, and it would let federal agencies reimburse workers for privacy-related tools and services.

Identity protection coverage after federal data breaches

The bill would update a 2017 law that provided identity protection coverage to people affected by certain federal agency breaches. It would make that coverage available starting with fiscal year 2016 and continuing indefinitely, instead of only through fiscal year 2026.

• It would make the protection last for the affected person’s lifetime.
• It would require the coverage to include at least $5 million in identity theft insurance.
• It would also remove a definition section in the current law, likely to fit the revised coverage structure.

Reimbursement for privacy-enhancing services

The bill would allow federal agencies, using salary-and-expense funds appropriated for fiscal year 2026 and later, to reimburse employees for privacy-enhancing services. It would also allow agencies to reimburse contractors’ employees when those contractors provide support to the agency.

• Reimbursement could cover up to 100% of the cost.
• The services could include software, hardware, or other technical measures that reduce privacy risks from data processing.
• Examples would include tools that limit, suppress, or remove personal information.
• Agencies could require documentation before paying or reimbursing the costs.

Who it affects

In practical terms, the bill is aimed at helping federal workers, contractors, and other individuals whose personal data was compromised in government-related cyber incidents. It would also affect federal agencies that would need to administer the expanded coverage and reimbursements.

Relevant Companies

None found