The bill strengthens oversight and clarity around DHS I&A's use of bulk data—improving transparency and potential reforms—but increases administrative costs, compliance burdens, and carries a risk that wider notifications could reveal sensitive operational details.
Taxpayers, congressional oversight staff, and DHS stakeholders gain stronger transparency and accountability because DHS I&A must audit its information systems and bulk data within 180 days and annually thereafter, and must notify congressional committees when it first uses a new bulk dataset.
Taxpayers and DHS decisionmakers stand to benefit from an independent GAO review within four years that will identify implementation challenges and recommend improvements to practices and oversight.
DHS staff and analysts get clearer guidance because the bill defines 'bulk data' and 'discriminants,' reducing ambiguity about what holdings trigger audits and reporting requirements.
DHS personnel and intelligence operations could be exposed to risk because notifying multiple congressional committees about new datasets and audit details may reveal sensitive operational methods or timelines.
Taxpayers and DHS programs may face higher costs because conducting mandated audits and producing recurring reports imposes administrative and compliance expenses that can divert resources from operations.
DHS analysts and program managers could face excessive compliance burdens because a broad definition of 'bulk data' might trigger audits for large datasets of uncertain relevance, slowing analytic work and creating procedural delays.
Based on analysis of 2 sections of legislative text.
Requires the DHS Office of Intelligence and Analysis (I&A) to audit its information systems and ‘‘bulk data’’ holdings within 180 days of enactment and then every year, to notify Congress within 30 days when I&A first uses any new bulk data set (and when terms change), and to send audit findings to specified congressional committees. The Comptroller General must review how the audits are being implemented and report to Congress within four years. Imposes routine oversight and reporting responsibilities on the Under Secretary for Intelligence and Analysis and I&A operations, with potential administrative impacts for DHS staff and contractors that manage or supply bulk data sets.
Introduced February 27, 2025 by Laurel Lee · Last progress February 27, 2025