The authority for the civil action was enacted in H.R. 5371, the Continuing Appropriations, Agriculture, Legislative Branch, Military Construction and Veterans Affairs, and Extensions Act, 2026, which was signed by the President on November 12, 2026. The relevant provision requires written notice from the internet service provider or the SAA to the Senate office upon receipt of any legal process seeking access or disclosure of covered data. A Senator affected by a federal violation of the provision may sue the federal government for the greater of $500,000 per violation or the actual damages, plus attorney's fees and related costs.