I 
119TH CONGRESS 
1ST SESSION H. R. 2363 
To prohibit the authorization of certain individuals to access certain systems 
containing individually identifiable health information. 
IN THE HOUSE OF REPRESENTATIVES 
MARCH 26, 2025 
Ms. DEGETTE (for herself, Mr. GOLDMAN of New York, Mr. CARTER of Lou-
isiana, Ms. PRESSLEY, and Ms. SA´NCHEZ) introduced the following bill; 
which was referred to the Committee on Energy and Commerce 
A BILL 
To prohibit the authorization of certain individuals to access 
certain systems containing individually identifiable health 
information. 
Be it enacted by the Senate and House of Representa-
tives of the United States of America in Congress assembled, 
SECTION 1. SHORT TITLE. 
This Act may be cited as the ‘‘Data Of Government 
health Entities must be Protected from Overreach by 
Unelected Nonsecure Disruption Act of 2025’’ or the 
‘‘DOGE POUND Act of 2025’’. 
VerDate Sep 11 2014 
23:15 Mar 31, 2025
Jkt 059200
PO 00000
Frm 00001
Fmt 6652
Sfmt 6201
E:\BILLS\H2363.IH
H2363
kjohnson on DSK7ZCZBW3PROD with $$_JOB
SEC. 2. PROHIBITING THE AUTHORIZATION OF CERTAIN IN-
DIVIDUALS TO ACCESS CERTAIN SYSTEMS 
CONTAINING INDIVIDUALLY IDENTIFIABLE 
HEALTH INFORMATION. 
(a) IN GENERAL.—Notwithstanding any other provi-
sion of law, no individual may be authorized to use, exer-
cise administrative control over, or otherwise access any 
specified system (as defined in subsection (d)), or any data 
from any such system, unless— 
(1) such individual is an officer, employee, or 
contractor of the Department of Health and Human 
Services who— 
(A) was otherwise eligible to access such 
system or data prior to January 20, 2025; and 
(B) continued to be otherwise eligible to 
access such system or data between January 
20, 2025, and the date of access to such system 
or data; or 
(2) in the case of an individual not described in 
paragraph (1)— 
(A) such individual holds a security clear-
ance at the appropriate level with respect to 
such system or data and such clearance was 
granted pursuant to the procedures established 
under section 801 of the National Security Act 
of 1947 (50 U.S.C. 3161); 
VerDate Sep 11 2014 
23:15 Mar 31, 2025
Jkt 059200
PO 00000
Frm 00002
Fmt 6652
Sfmt 6201
E:\BILLS\H2363.IH
H2363
kjohnson on DSK7ZCZBW3PROD with $$_JOB
(B) such individual’s access to such system 
or data, or use thereof, does not constitute a 
violation of section 208 of title 18, United 
States Code (determined after the application of 
subsection (b)); 
(C) such individual is not a special Govern-
ment employee (as defined in section 202 of 
title 18, United States Code); 
(D) such individual’s current continuous 
service in the civil service (as that term is de-
fined in section 2101 of title 5, United States 
Code) as of the date of such access is for a pe-
riod of at least 1 year; 
(E) such individual has completed any re-
quired training or compliance procedures with 
respect to privacy laws and cybersecurity and 
national security regulations and best practices; 
and 
(F) such individual has signed a written 
ethics agreement with either the Department of 
Health and Human Services or the Office of 
Government Ethics. 
(b) APPLICATION OF PENALTIES.— 
(1) IN GENERAL.—Whoever knowingly— 
VerDate Sep 11 2014 
23:15 Mar 31, 2025
Jkt 059200
PO 00000
Frm 00003
Fmt 6652
Sfmt 6201
E:\BILLS\H2363.IH
H2363
kjohnson on DSK7ZCZBW3PROD with $$_JOB
(A) uses, exercises administrative control 
over, or otherwise accesses any system or data 
described in subsection (a) in violation of such 
subsection, or 
(B) authorizes the use, exercise of adminis-
trative control over, or other access to any sys-
tem or data described in subsection (a) in viola-
tion of such subsection, 
shall be imprisoned not more than 5 years or fined 
under title 18, United States Code, or both. 
(2) 
STATUTE
OF
LIMITATIONS.—Notwith-
standing section 3282 of title 18, United States 
Code, no person shall be prosecuted, tried, or pun-
ished for any offense under this subsection unless 
the indictment is found or the information is insti-
tuted not later than 10 years after the date on 
which the offense was committed. 
(c) REPORTS ON UNAUTHORIZED USE.—The Inspec-
tor General of the Department of Health and Human 
Services shall investigate, and submit a report to Congress 
on such investigation, each instance of unauthorized use 
or other access of any specified system. Any such report 
shall be submitted not later than 30 days after any such 
instance and shall include— 
VerDate Sep 11 2014 
23:15 Mar 31, 2025
Jkt 059200
PO 00000
Frm 00004
Fmt 6652
Sfmt 6201
E:\BILLS\H2363.IH
H2363
kjohnson on DSK7ZCZBW3PROD with $$_JOB