Sponsors (153)
Official title: To amend title XI of the Social Security Act to establish that political appointees and special governments may not access beneficiary data systems, to establish civil penalties for certain violations relating to disclosure or access of beneficiary information, and for other purposes.
Introduced March 5, 2025 by John B. Larson · Last progress March 5, 2025
The bill strengthens privacy, remedies, and transparency for Social Security beneficiaries and gives Congress clearer oversight tools, but it raises administrative and litigation costs, risks hampering certain oversight or transition functions, and delays some protections until after enactment.
Seniors, people with disabilities, and other SSA beneficiaries will have stronger privacy protections because political appointees and certain special government employees are barred from accessing beneficiary systems, reducing insider-access risk to Social Security records.
Individuals whose Social Security records are improperly accessed gain clearer, stronger remedies — including at least $5,000 per violation or actual damages, potential punitive damages for willful or grossly negligent disclosures, and recovery of attorneys' fees — improving deterrence and access to justice.
Beneficiaries and taxpayers get faster oversight and more transparency because the SSA Inspector General must investigate breaches and report quickly, Congress receives risk assessments (privacy/cybersecurity/data-integrity), and GAO must report on enforcement outcomes, improving congressional and public visibility into SSA data safety.
Federal officials and transition teams may be unable to access beneficiary data needed for legitimate oversight, audits, or transition-related duties, which could slow policy implementation and hamper accountability.
SSA, other federal agencies, and taxpayers could face substantial administrative and legal costs — from creating exception processes and alternative access channels to increased litigation payouts and mandatory per‑violation penalties — potentially diverting funds from programs.
An absolute ban or poorly designed exceptions could hinder necessary investigations and audits by officials legally permitted to review SSA operations, weakening some accountability and oversight functions.
Based on analysis of 7 sections of legislative text.
Bars political appointees and special government employees from accessing SSA beneficiary systems, creates a private right of action for negligent disclosures, and requires IG/GAO reporting.
Prohibits political appointees and special government employees from accessing Social Security beneficiary data systems and creates a private right of action and damages for negligent unauthorized access or disclosure. It requires the Social Security Inspector General to investigate breaches, mandates GAO reporting on the law’s effects, and makes the new protections apply to violations that occur on or after enactment. The bill defines covered beneficiary systems, sets minimum statutory damages and attorneys’ fees for successful plaintiffs, requires notice to affected individuals in certain criminal or disciplinary cases, preserves an existing portion of the federal regulations unchanged, and establishes reporting deadlines for monthly interim GAO reports and a final report within one year.