Bill · S. 3161· Senate(119-S-3161)
Protecting DOD Data Act of 2025
- Introduced
- 11/7/2025
- Last activity
- 11/7/2025 — Read twice and referred to the Committee on Armed Services.
- Sponsored by
- Elissa Slotkin
- Cosponsors
- - 0 - 1
- Introduced
- In Committee
What this bill would do
The Protecting DOD Data Act of 2025 aims to improve the protection of personal data that affects the operational security of Department of Defense civilian employees and members of the Armed Forces. It requires the Secretary of Defense to prioritize the prevention of unauthorized collection, use, or retention of this data. The bill mandates a review of existing guidance by June 1, 2026, and limits where this data can be stored. Additionally, it establishes reporting requirements to Congress regarding data breaches, waivers, and policy changes. It also requires new standards and training for system owners who manage this data across multiple platforms.
Yes· 3 of 6
Does this give people more control over their personal data?+8
Specifically prioritizes the prevention of unauthorized collection and retention of DOD personnel personal data.
Does this protect people from being watched or searched?+7
Strengthens privacy protections for members of the Armed Forces and DOD civilian employees.
Does this better protect the country from computer attacks?+7
Enhances the protection of sensitive DOD personnel data against exfiltration and unauthorized collection.
The opposite
No question was scored the opposite.
Who it would affect, and how
Potential Positive Impacts for People
-
Enhanced Data Protection: The bill requires the Secretary to prioritize protecting personal data to prevent its collection, use, dissemination, or retention if it does not follow privacy practices and law. This benefits members of the Armed Forces and civilian employees of the Department of Defense (Section 2(a)).
-
Stricter Storage Controls: Personal data affecting operational security generally cannot be stored on non-Department servers or cloud services unless there is a contract or the data subject gives permission. This limits where sensitive information is kept (Section 2(c)(1)).
-
Increased Accountability: The Secretary must notify Congress within 30 days of cybersecurity incidents where personal data is exposed or when data is exfiltrated in violation of regulations. This ensures oversight of how personnel data is handled (Section 2(e)).
-
Better Training for System Managers: The bill mandates the development of standards, training, and regular security debriefings for personnel with high-level access to systems hosting this personal data (Section 2(f)(1), 2(f)(2)).
Potential Negative Impacts for People
- Potential for Privacy Waivers: The Secretary of Defense has the authority to waive the restrictions on storing data on non-Department servers if the Secretary certifies it is necessary in the interest of national security. This could allow data to be stored in locations that would otherwise be prohibited (Section 2(c)(2)).
Groups and Interests Ranking
Every group the model scored this bill for, from -10 to +10. Hover a score for the reason it gave.
- Governance And Ideology
- Improves Privacy Rights+7Improves Government Transparency+5
- Education And Technology
- Improves Data Privacy+8Increases Big Tech Regulation+2
- National Security And Foreign Policy
- Improves Cybersecurity Defense+7
- Demographic And Interest Groups
- Good For Veterans+3
- 11/7/2025
- Read twice and referred to the Committee on Armed Services.
- 1 Cosponsor added.
- Introduced in Senate
Joni ErnstRepublican · Iowa