2012 US Code
Title 38 - Veterans Benefits
Part IV - GENERAL ADMINISTRATIVE PROVISIONS (§§ 5100 - 6308)
Chapter 57 - RECORDS AND INVESTIGATIONS (§§ 5701 - 5728)
Subchapter III - INFORMATION SECURITY (§§ 5721 - 5728)
Section 5726 - Reports and notice to Congress on data breaches

View Metadata
Metadata
Publication TitleUnited States Code, 2012 Edition, Title 38 - VETERANS BENEFITS
CategoryBills and Statutes
CollectionUnited States Code
SuDoc Class NumberY 1.2/5:
Contained WithinTitle 38 - VETERANS BENEFITS
PART IV - GENERAL ADMINISTRATIVE PROVISIONS
CHAPTER 57 - RECORDS AND INVESTIGATIONS
SUBCHAPTER III - INFORMATION SECURITY
Sec. 5726 - Reports and notice to Congress on data breaches
Containssection 5726
Date2012
Laws in Effect as of DateJanuary 15, 2013
Positive LawYes
Dispositionstandard
Source CreditAdded Pub. L. 109-461, title IX, §902(a), Dec. 22, 2006, 120 Stat. 3457.
Statutes at Large Reference120 Stat. 3457
Public Law ReferencePublic Law 109-461

Download PDF

INFORMATION SECURITY - 38 U.S.C. § 5726 (2012)
§5726. Reports and notice to Congress on data breaches

(a) Quarterly Reports.—(1) Not later than 30 days after the last day of a fiscal quarter, the Secretary shall submit to the Committees on Veterans’ Affairs of the Senate and House of Representatives a report on any data breach with respect to sensitive personal information processed or maintained by the Department that occurred during that quarter.

(2) Each report submitted under paragraph (1) shall identify, for each data breach covered by the report—

(A) the Administration and facility of the Department responsible for processing or maintaining the sensitive personal information involved in the data breach; and

(B) the status of any remedial or corrective action with respect to the data breach.


(b) Notification of Significant Data Breaches.—(1) In the event of a data breach with respect to sensitive personal information processed or maintained by the Secretary that the Secretary determines is significant, the Secretary shall provide notice of such breach to the Committees on Veterans’ Affairs of the Senate and House of Representatives.

(2) In the event of a data breach with respect to sensitive personal information processed or maintained by the Secretary that is the sensitive personal information of a member of the Army, Navy, Air Force, or Marine Corps or a civilian officer or employee of the Department of Defense that the Secretary determines is significant under paragraph (1), the Secretary shall provide the notice required under paragraph (1) to the Committee on Armed Services of the Senate and the Committee on Armed Services of the House of Representatives in addition to the Committees on Veterans’ Affairs of the Senate and House of Representatives.

(3) Notice under paragraphs (1) and (2) shall be provided promptly following the discovery of such a data breach and the implementation of any measures necessary to determine the scope of the breach, prevent any further breach or unauthorized disclosures, and reasonably restore the integrity of the data system.

(Added Pub. L. 109–461, title IX, §902(a), Dec. 22, 2006, 120 Stat. 3457.)

Disclaimer: These codes may not be the most recent version. The United States Government Printing Office may have more current or accurate information. We make no warranties or guarantees about the accuracy, completeness, or adequacy of the information contained on this site or the information linked to on the US site. Please check official sources.

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.