Source: https://uscode.house.gov/view.xhtml?req=granuleid%3AUSC-prelim-title38-chapter57&saved=%7CZ3JhbnVsZWlkOlVTQy1wcmVsaW0tdGl0bGUzOC1zZWN0aW9uNTcxMg%3D%3D%7C%7C%7C0%7Cfalse%7Cprelim&edition=prelim
Timestamp: 2020-07-09 22:22:20
Document Index: 557348699

Matched Legal Cases: ['§2', '§902', '§14', '§402', '§505', '§502', '§503', '§238', '§239', '§240', '§5711', '§3311', '§5711', '§402', '§14', '§3312', '§5712', '§402', '§4', '§5713', '§3313', '§5713', '§402', '§14', '§902', '§902', '§5722', '§5723', '§902', '§1001', '§902', '§5725', '§902', '§5726', '§902', '§5728', '§902']

[USC02] 38 USC Ch. 57: RECORDS AND INVESTIGATIONS
<< Previous TITLE 38 / PART IV / CHAPTER 57 Next >>
38 USC Ch. 57: RECORDS AND INVESTIGATIONS
CHAPTER 57—RECORDS AND INVESTIGATIONS
2015—Pub. L. 114–31, §2(c), July 20, 2015, 129 Stat. 430, added item 5706.
2006—Pub. L. 109–461, title IX, §902(b), Dec. 22, 2006, 120 Stat. 3460, added item for subchapter III and items 5721 to 5728.
1991—Pub. L. 102–54, §14(d)(5)(B), (6)(C), June 13, 1991, 105 Stat. 286, amended table of sections at beginning of chapter as in effect immediately before the enactment of Pub. L. 102–40 by substituting "subpoenas" for "subpenas" in item 3311 and "subpoena" for "subpena" in item 3313.
Pub. L. 102–40, title IV, §402(c)(1), May 7, 1991, 105 Stat. 239, renumbered items 3301 to 3313 as 5701 to 5713, respectively.
1980—Pub. L. 96–385, title V, §505(b), Oct. 7, 1980, 94 Stat. 1537, added item 3305.
Pub. L. 115–407, title V, §502, Dec. 31, 2018, 132 Stat. 5376, provided that: "The Secretary of Veterans Affairs shall make such changes to such information technology systems of the Department of Veterans Affairs, including the eBenefits system or successor system, as may be necessary so that whenever the Secretary records in such systems information about a dependent of a person, the person is able to review and revise such information."
Pub. L. 115–407, title V, §503, Dec. 31, 2018, 132 Stat. 5376, provided that:
"(a) Program Documents.—Not later than 30 days after the date of the enactment of this Act [Dec. 31, 2018], the Secretary of Veterans Affairs shall submit to the appropriate congressional committees the following documents concerning the Electronic Health Record Modernization Program:
"(1) Integrated Master Plan.
"(2) Integrated Master Schedule.
"(3) Program Management Plan.
"(4) Annual and lifecycle cost estimates, including, at a minimum, cost elements relating to—
"(A) Federal Government labor;
"(B) contractor labor;
"(C) hardware;
"(D) software; and
"(E) testing and evaluation.
"(5) Cost baseline.
"(6) Risk Management Plan.
"(7) Health IT Strategic Architecture Plan.
"(8) Transition Plan for implementing updated architecture.
"(9) Data Migration Plan.
"(10) System and Data Security Plan.
"(11) Application Implementation Plan.
"(12) System Design Documents.
"(13) Legacy Veterans Information Systems and Technology Architecture Standardization, Security Enhancement, and Consolidation Project Plan.
"(14) Health Data Interoperability Management Plan.
"(15) Community Care Vision and Implementation Plan, including milestones and a detailed description of how complete interoperability with non-Department health care providers will be achieved.
"(b) Quarterly Updates.—Not later than 30 days after the end of each fiscal quarter during the period beginning with the fiscal quarter in which this Act is enacted and ending on the date on which the Electronic Health Record Modernization Program is completed, the Secretary shall submit to the appropriate congressional committees the most recent updated versions, if any exist, of the following documents:
"(1) Integrated Master Schedule.
"(2) Program Management Plan, including any written Program Management Review material developed for the Program Management Plan during the fiscal quarter covered by the submission.
"(3) Each document described in subsection (a)(4).
"(4) Performance Baseline Report for the fiscal quarter covered by the submission or for the fiscal quarter ending the fiscal year prior to the submission.
"(5) Budget Reconciliation Report.
"(6) Risk Management Plan and Risk Register.
"(c) Contracts.—Not later than 5 days after awarding a contract, order, or agreement, including any modifications thereto, under the Electronic Health Record Modernization Program, the Secretary shall submit to the appropriate congressional committees a copy of the entire such contract, order, agreement, or modification.
"(d) Notification.—
"(1) Requirement.—Not later than 10 days after an event described in paragraph (2) occurs, the Secretary shall notify the appropriate congressional committees of such occurrence, including a description of the event and an explanation for why such event occurred.
"(2) Event described.—An event described in this paragraph is any of the following events regarding the Electronic Health Record Modernization Program:
"(A) The delay of any milestone or deliverable by 30 or more days.
"(B) A request for equitable adjustment, equitable adjustment, [sic] or change order exceeding $1,000,000 (as such terms are defined in the Federal Acquisition Regulation).
"(C) The submission of any protest, claim, or dispute, and the resolution of any protest, claim, or dispute (as such terms are defined in the Federal Acquisition Regulation).
"(D) A loss of clinical or other data.
"(E) A breach of patient privacy, including any—
"(i) disclosure of protected health information that is not permitted under regulations promulgated under section 264(c) of the Health Insurance Portability and Accountability Act of 1996 (Public Law 104–191; 42 U.S.C. 1320d–2 note); and
"(ii) breach of sensitive personal information (as defined in section 5727 of title 38, United States Code).
"(A) the Committees on Veterans' Affairs of the House of Representatives and the Senate; and
"(B) the Committees on Appropriations of the House of Representatives and the Senate.
"(2) The term 'Electronic Health Record Modernization Program' means—
"(A) any activities by the Department of Veterans Affairs to procure or implement an electronic health or medical record system to replace any or all of the Veterans Information Systems and Technology Architecture, the Computerized Patient Record System, the Joint Legacy Viewer, or the Enterprise Health Management Platform; and
"(B) any contracts or agreements entered into by the Secretary of Veterans Affairs to carry out, support, or analyze the activities under subparagraph (A)."
Discontinuation of Use of Social Security Numbers To Identify Individuals in Department of Veterans Affairs Information Systems
Pub. L. 116–94, div. F, title II, §238, Dec. 20, 2019, 133 Stat. 2804, provided that:
"(a) Except as provided in subsection (b), the Secretary of Veterans Affairs, in consultation with the Secretary of Defense and the Secretary of Labor, shall discontinue using Social Security account numbers to identify individuals in all information systems of the Department of Veterans Affairs as follows:
"(1) For all veterans submitting to the Secretary of Veterans Affairs new claims for benefits under laws administered by the Secretary, not later than 5 years after the date of the enactment of this Act [Dec. 20, 2019].
"(2) For all individuals not described in paragraph (1), not later than 8 years after the date of the enactment of this Act.
"(b) The Secretary of Veterans Affairs may use a Social Security account number to identify an individual in an information system of the Department of Veterans Affairs if and only if the use of such number is required to obtain information the Secretary requires from an information system that is not under the jurisdiction of the Secretary."
Pub. L. 115–244, div. C, title II, §239, Sept. 21, 2018, 132 Stat. 2972.
Pub. L. 115–141, div. J, title II, §240, Mar. 23, 2018, 132 Stat. 822.
§5711. Authority to issue subpoenas
(a) For the purposes of the laws administered by the Secretary, the Secretary, and those employees to whom the Secretary may delegate such authority, to the extent of the authority so delegated, shall have the power to—
(1) issue subpoenas for and compel the attendance of witnesses within a radius of 100 miles from the place of hearing;
(2) require the production of books, papers, documents, and other evidence;
(3) take affidavits and administer oaths and affirmations;
(4) aid claimants in the preparation and presentation of claims; and
(5) make investigations and examine witnesses upon any matter within the jurisdiction of the Department.
(b) Any person required by such subpoena to attend as a witness shall be allowed and paid the same fees and mileage as are paid witnesses in the district courts of the United States.
(Pub. L. 85–857, Sept. 2, 1958, 72 Stat. 1237, §3311; renumbered §5711, Pub. L. 102–40, title IV, §402(b)(1), May 7, 1991, 105 Stat. 238; Pub. L. 102–54, §14(d)(5)(A), June 13, 1991, 105 Stat. 286.)
1991—Pub. L. 102–40 renumbered section 3311 of this title as this section.
Pub. L. 102–54 amended section as in effect immediately before the enactment of Pub. L. 102–40 by substituting "subpoenas" for "subpenas" in section catchline and amending text generally. Prior to amendment, text read as follows: "For the purposes of the laws administered by the Veterans' Administration, the Administrator, and those employees to whom the Administrator may delegate such authority, to the extent of the authority so delegated, shall have the power to issue subpenas for and compel the attendance of witnesses within a radius of one hundred miles from the place of hearing, to require the production of books, papers, documents, and other evidence, to take affidavits, to administer oaths and affirmations, to aid claimants in the preparation and presentation of claims, and to make investigations and examine witnesses upon any matter within the jurisdiction of the Veterans' Administration. Any person required by such subpena to attend as a witness shall be allowed and paid the same fees and mileage as are paid witnesses in the district courts of the United States."
(Pub. L. 85–857, Sept. 2, 1958, 72 Stat. 1237, §3312; renumbered §5712, Pub. L. 102–40, title IV, §402(b)(1), May 7, 1991, 105 Stat. 238; Pub. L. 102–83, §4(a)(3), (4), Aug. 6, 1991, 105 Stat. 404.)
1991—Pub. L. 102–40 renumbered section 3312 of this title as this section.
§5713. Disobedience to subpoena
In case of disobedience to any such subpoena, the aid of any district court of the United States may be invoked in requiring the attendance and testimony of witnesses and the production of documentary evidence, and such court within the jurisdiction of which the inquiry is carried on may, in case of contumacy or refusal to obey a subpoena issued to any officer, agent, or employee of any corporation or to any other person, issue an order requiring such corporation or other person to appear or to give evidence touching the matter in question; and any failure to obey such order of the court may be punished by such court as a contempt thereof.
(Pub. L. 85–857, Sept. 2, 1958, 72 Stat. 1237, §3313; renumbered §5713, Pub. L. 102–40, title IV, §402(b)(1), May 7, 1991, 105 Stat. 238; Pub. L. 102–54, §14(d)(6)(A), (B), June 13, 1991, 105 Stat. 286.)
1991—Pub. L. 102–40 renumbered section 3313 of this title as this section.
Pub. L. 102–54 amended section as in effect immediately before the enactment of Pub. L. 102–40 by substituting "subpoena" for "subpena" in section catchline and in two places in text.
(Added Pub. L. 109–461, title IX, §902(a), Dec. 22, 2006, 120 Stat. 3450.)
Pub. L. 109–461, title IX, §902(c), Dec. 22, 2006, 120 Stat. 3460, provided that: "Not later than one year after the date of the enactment of this Act [Dec. 22, 2006], the Secretary of Veterans Affairs shall prescribe regulations to carry out subchapter III of chapter 57 of title 38, United States Code, as added by subsection (a)."
§5722. Policy
(a) In General.—The security of Department information and information systems is vital to the success of the mission of the Department. To that end, the Secretary shall establish and maintain a comprehensive Department-wide information security program to provide for the development and maintenance of cost-effective security controls needed to protect Department information, in any media or format, and Department information systems.
(b) Elements.—The Secretary shall ensure that the Department information security program includes the following elements:
(c) Compliance With Certain Requirements.—The Secretary shall comply with the provisions of subchapter III of chapter 35 of title 44 and other related information security requirements promulgated by the National Institute of Standards and Technology and the Office of Management and Budget that define Department information system mandates.
§5723. Responsibilities
(a) Secretary of Veterans Affairs.—In accordance with the provisions of subchapter III of chapter 35 of title 44, the Secretary is responsible for the following:
(b) Assistant Secretary for Information and Technology.—The Assistant Secretary for Information and Technology, as the Chief Information Officer of the Department, is responsible for the following:
(c) Associate Deputy Assistant Secretary for Cyber and Information Security.—In accordance with the provisions of subchapter III of chapter 35 of title 44, the Associate Deputy Assistant Secretary for Cyber and Information Security, as the Senior Information Security Officer of the Department, is responsible for carrying out the responsibilities of the Assistant Secretary for Information and Technology under the provisions of subchapter III of chapter 35 of title 44, as set forth in subsection (b).
(d) Department Information Owners.—In accordance with the criteria of the Centralized IT Management System, Department information owners are responsible for the following:
(e) Other Key Officials.—In accordance with the provisions of subchapter III of chapter 35 of title 44, the Under Secretaries, Assistant Secretaries, and other key officials of the Department are responsible for the following:
(f) Users of Department Information and Information Systems.—Users of Department information and information systems are responsible for the following:
(g) Inspector General of Department of Veterans Affairs.—In accordance with the provisions of subchapter III of chapter 35 of title 44, the Inspector General of the Department is responsible for the following:
(2) Submitting an independent annual report to the Office of Management and Budget on the status of the Department information security program, based on the results of the annual audit.
(Added Pub. L. 109–461, title IX, §902(a), Dec. 22, 2006, 120 Stat. 3451; amended Pub. L. 111–275, title X, §1001(m)(1), Oct. 13, 2010, 124 Stat. 2897.)
2010—Subsec. (g)(2). Pub. L. 111–275 inserted "the" before "Department".
(a) Independent Risk Analysis.—(1) In the event of a data breach with respect to sensitive personal information that is processed or maintained by the Secretary, the Secretary shall ensure that, as soon as possible after the data breach, a non-Department entity or the Office of Inspector General of the Department conducts an independent risk analysis of the data breach to determine the level of risk associated with the data breach for the potential misuse of any sensitive personal information involved in the data breach.
(b) Regulations.—Not later than 180 days after the date of the enactment of the Veterans Benefits, Health Care, and Information Technology Act of 2006, the Secretary shall prescribe interim regulations for the provision of the following in accordance with subsection (a)(2):
(c) Report.—(1) For each data breach with respect to sensitive personal information processed or maintained by the Secretary, the Secretary shall promptly submit to the Committees on Veterans' Affairs of the Senate and House of Representatives a report containing the findings of any independent risk analysis conducted under subsection (a)(1), any determination of the Secretary under subsection (a)(2), and a description of any services provided pursuant to subsection (b).
(Added Pub. L. 109–461, title IX, §902(a), Dec. 22, 2006, 120 Stat. 3455.)
§5725. Contracts for data processing or maintenance
(a) Contract Requirements.—If the Secretary enters into a contract for the performance of any Department function that requires access to sensitive personal information, the Secretary shall require as a condition of the contract that—
(b) Liquidated Damages.—Each contract subject to the requirements of subsection (a) shall provide for liquidated damages to be paid by the contractor to the Secretary in the event of a data breach with respect to any sensitive personal information processed or maintained by the contractor or any subcontractor under that contract.
(c) Provision of Credit Protection Services.—Any amount collected by the Secretary under subsection (b) shall be deposited in or credited to the Department account from which the contractor was paid and shall remain available for obligation without fiscal year limitation exclusively for the purpose of providing credit protection services pursuant to section 5724(b) of this title.
(Added Pub. L. 109–461, title IX, §902(a), Dec. 22, 2006, 120 Stat. 3456.)
§5726. Reports and notice to Congress on data breaches
(a) Quarterly Reports.—(1) Not later than 30 days after the last day of a fiscal quarter, the Secretary shall submit to the Committees on Veterans' Affairs of the Senate and House of Representatives a report on any data breach with respect to sensitive personal information processed or maintained by the Department that occurred during that quarter.
(2) Each report submitted under paragraph (1) shall identify, for each data breach covered by the report—
(b) Notification of Significant Data Breaches.—(1) In the event of a data breach with respect to sensitive personal information processed or maintained by the Secretary that the Secretary determines is significant, the Secretary shall provide notice of such breach to the Committees on Veterans' Affairs of the Senate and House of Representatives.
(Added Pub. L. 109–461, title IX, §902(a), Dec. 22, 2006, 120 Stat. 3457.)
§5728. Authorization of appropriations
There are authorized to be appropriated to carry out this subchapter such sums as may be necessary for each fiscal year.
(Added Pub. L. 109–461, title IX, §902(a), Dec. 22, 2006, 120 Stat. 3460.)