The bill strengthens protections and private enforcement against unauthorized access and disclosure of tax and Treasury payment data, but does so by imposing large statutory damages, broad private lawsuits, and sweeping definitions that could create heavy financial, operational, and compliance burdens for employees, contractors, nonprofits, and the government.
All taxpayers: Establishes private civil remedies for unauthorized access or disclosure of tax and payment data in Treasury systems (minimum $1,000 per disclosure; statutory damages up to $250,000 per access, equitable relief, punitive damages, and attorneys' fees), enabling compensation and deterrence for privacy and data-security harms.
Taxpayers and Treasury systems: Bars persons with short tenure, conflicts of interest, or without ethics agreements from accessing core Treasury payment systems, reducing insider risk to taxpayer data and protecting Treasury financial infrastructure.
Individuals and contractors: Holds facilitators liable when they knew or should have known an access violated prohibitions, deterring third-party facilitation of improper access to Treasury systems.
Federal employees, contractors, and small businesses: Exposes individuals and small contractors to very large statutory liability (e.g., $250,000 per unauthorized access and minimum damages for disclosures) and joint-and-several liability, risking disproportionate financial harm or bankruptcy for minor or ancillary roles.
Taxpayers and taxpayers-as-payers: A broad private right of action combined with high damages may drive up litigation and compliance costs for contractors and the government, which could be passed to taxpayers through higher contract prices or settlements.
Department of the Treasury and contractors: Restricting access for employees with under one year of service and certain covered roles may impede staffing flexibility and routine operations, creating operational challenges, hiring friction, or service delays.
Based on analysis of 3 sections of legislative text.
Prohibits certain short‑tenure or conflicted individuals from accessing Treasury payment/receipt systems, creates new private liability for violations, and bars certain tax‑return disclosures via those systems.
Makes it illegal for certain people — including some short‑tenure employees, certain executives or board members, and people with conflicts or without written ethics agreements — to access or exercise control over Department of the Treasury public money receipt and payment systems (including Bureau of the Fiscal Service systems). It creates a private right of action allowing equitable relief, punitive damages, attorney’s fees, and large statutory damages for unauthorized access. Also changes the tax‑return confidentiality rules to bar disclosure of returns or return information through those Treasury systems to the same covered individuals, and lets taxpayers sue those individuals for inspection or disclosure of returns under the tax code with statutory damages protections and limits. The bill defines covered terms and says it does not imply anything about past disclosures.
Introduced February 6, 2025 by Charles Ellis Schumer · Last progress February 6, 2025