Protecting DOD Data Act of 2025

This bill directs the Secretary of Defense to prioritize protecting personal data that could affect the operational security of military members and Defense Department civilian employees. By June 1, 2026, the Secretary must review existing data protection guidance and issue new or revised guidance if needed. The bill bars storing such data on non-Department servers or cloud services unless there is a contract, the person consents (for personnel data), or the Secretary issues a written national security waiver. The Secretary must notify Congress within 30 days of waivers, data breaches, improper storage, and changes to data protection rules, and must set standards, training, and security debriefings for staff with broad access to these systems.

Full text and official record on Congress.gov

Sponsors

• Elissa Slotkin Democrat sponsor
• 1 cosponsors