The bill increases transparency and accountability for DHS I&A's bulk data usage through audits, reporting, and GAO review, but it creates administrative costs and introduces potential operational slowdowns and disclosure risks for sensitive intelligence activities.
Taxpayers and federal employees: DHS Intelligence & Analysis (I&A) will be subject to regular audits, increasing transparency and oversight of large, non‑targeted data holdings.
Taxpayers and law‑enforcement: Congressional committees will receive timely notice when I&A first uses a new bulk data set, enabling legislative and oversight responses.
Taxpayers and federal employees: GAO will review implementation within four years to identify challenges and recommend improvements, strengthening long‑term accountability.
Law enforcement and federal employees: Mandatory reporting timelines could slow operational use of new data if agencies delay analysis to complete notification requirements or adapt processes.
Law enforcement and local governments: Disclosure of data terms to multiple congressional committees risks revealing sensitive sources, methods, or contracting details if protections are insufficient.
Taxpayers and federal employees: DHS may incur additional administrative costs and resource burdens to perform audits and annual reporting.
Based on analysis of 2 sections of legislative text.
Requires DHS I&A to audit information systems and bulk data holdings, notify Congress about new bulk datasets and changes, and provide audit reports and a GAO review.
Official title: To amend the Homeland Security Act of 2002 to direct the Under Secretary for Intelligence and Analysis of the Department of Homeland Security to conduct an annual audit of the information systems and bulk data of the Office of Intelligence and Analysis of the Department, and for other purposes.
Introduced February 27, 2025 by Laurel Lee · Last progress February 27, 2025
Requires the Department of Homeland Security’s Office of Intelligence and Analysis (I&A) to audit its information systems and ‘‘bulk data’’ holdings and to report findings to Congress. It also requires I&A to notify specified congressional committees when it first uses any new bulk dataset and when the terms for using that dataset change, and directs a GAO review of implementation within four years.