tronic Forms Act’’ or the ‘‘Protect Veterans from the 
THIEF Act’’. 
SEC. 2. PROHIBITION OF THE SALE OF SENSITIVE PER-
SONAL INFORMATION MAINTAINED BY THE 
SECRETARY OF VETERANS AFFAIRS. 
Section 5725 of title 38, United States Code, is 
amended by adding at the end the following new sub-
section: 
‘‘(d) PROHIBITION
OF SALE
OF SENSITIVE PER-
SONAL INFORMATION.—The Secretary may not enter into 
a contract that permits the contractor to sell (or otherwise 
disclose for consideration) sensitive personal information 
to another entity.’’. 
SEC. 3. PROTECTION OF PERSONAL INFORMATION IN CON-
TRACTS OF THE DEPARTMENT OF VETERANS 
AFFAIRS. 
(a) IN GENERAL.—Not later than one year after the 
date of the enactment of this Act, the Secretary of Vet-
erans Affairs shall— 
(1) ensure that each covered contract includes, 
or is modified to include, a clause prohibiting cov-
ered information from being monetized, sold, or oth-
erwise misused by any contractor, including any sub-
contractor or affiliate thereof, or other non-Depart-
ment of Veterans Affairs entity; and 
VerDate Sep 11 2014 
21:19 Jan 30, 2026
Jkt 069200
PO 00000
Frm 00002
Fmt 6652
Sfmt 6201
E:\BILLS\H7241.IH
H7241
ssavage on LAPJG3WLY3PROD with BILLS
(2) issue a directive or other policy providing 
guidance to employees and contractors of the De-
partment on how to identify the monetization, sale, 
or misuse of covered information in order to ensure 
contractors are in compliance with clauses in covered 
contracts included pursuant to paragraph (1). 
(b) REPORT.—Not later than one year after the date 
of the enactment of this Act, the Secretary shall submit 
to the appropriate congressional committees a report that 
includes— 
(1) a copy of the contract clause required by 
subsection (a)(1); 
(2) the guidance required by subsection (a)(2); 
and 
(3) a summary of any other actions taken to 
comply with subsection (a). 
(c) DEFINITIONS.—In this section: 
(1) The term ‘‘appropriate congressional com-
mittees’’ means the Committees on Veterans’ Affairs 
of the House of Representatives and the Senate. 
(2) The term ‘‘covered contract’’ means a con-
tract of the Department of Veterans Affairs that 
provides for the handling of covered information and 
is entered into— 
VerDate Sep 11 2014 
21:19 Jan 30, 2026
Jkt 069200
PO 00000
Frm 00003
Fmt 6652
Sfmt 6201
E:\BILLS\H7241.IH
H7241
ssavage on LAPJG3WLY3PROD with BILLS
(A) after the date of the enactment of this 
Act; or 
(B) before the date of the enactment of 
this Act and does not expire before the date of 
the enactment of this Act. 
(3) The term ‘‘covered information’’— 
(A) means protected health information or 
personally identifiable information, including 
such information that has been anonymized; 
and 
(B) 
includes 
information 
protected 
under— 
(i) section 552a of title 5, United 
States Code; 
(ii) section 5701 or 7332 of title 38 
United States Code; 
(iii) parts 160, 161, and 164 of title 
45, Code of Federal Regulations; and 
(iv) any other provision of law, as de-
termined by the Secretary. 
Æ 
VerDate Sep 11 2014 
21:19 Jan 30, 2026
Jkt 069200
PO 00000
Frm 00004
Fmt 6652
Sfmt 6301
E:\BILLS\H7241.IH
H7241
ssavage on LAPJG3WLY3PROD with BILLS