119 S1943 IS: Protecting Seniors' Data Act of 2025 U.S. Senate 2025-06-04 text/xml EN Pursuant to Title 17 Section 105 of the United States Code, this file is not subject to copyright protection and is in the public domain.

II 119th CONGRESS 1st Session S. 1943 IN THE SENATE OF THE UNITED STATES June 4, 2025 Mr. Whitehouse (for himself, Mr. Wyden, and Ms. Warren) introduced the following bill; which was read twice and referred to the Committee on Finance A BILL To require performance and security audits of the computer systems of the Social Security Administration, and for other purposes.

1.

Short title

This Act may be cited as the Protecting Seniors' Data Act of 2025.

2.

Comptroller General study

(a)

In general

Not later than 60 days after the date of enactment of this Act, the Comptroller General of the United States shall commence a comprehensive audit of the Social Security Administration computer systems and networks accessed by the United States DOGE Service, the U.S. DOGE Service Temporary Organization, or any employees or volunteers affiliated with those agencies, or, if applicable, associated agency DOGE teams, to identify security vulnerabilities or bugs in software installed, created, or modified by such individuals or entities, and whether such individuals or entities violated Federal privacy laws, including section 552a of title 5, United States Code (commonly referred to as the Privacy Act of 1974), section 6103 of the Internal Revenue Code, subchapter II of chapter 35 of title 44, United States Code (commonly referred to as the Federal Information Security Management Act), or section 1106 of the Social Security Act (42 U.S.C. 1306). (b)

Audit report

Not later than 1 year after the date of enactment of this Act, the Comptroller General shall submit to the Committee on Finance of the Senate, the Committee on Ways and Means of the House of Representatives, and the Commissioner of the Social Security Administration a report or reports describing the results of the comprehensive systems audits performed under subsection (a), including recommendations for legislation and administrative action as the Comptroller General determines appropriate. (c)

Agency action

Not later than 90 days after receipt of an audit report by the Commissioner of the Social Security Administration under subsection (b), the Commissioner shall— (1) fix any vulnerabilities or bugs identified in the report; and (2) submit to the Committee on Finance of the Senate and the Committee on Ways and Means of the House of Representatives a report on the status of those vulnerabilities or bugs.