Sponsors (3)
The bill strengthens oversight, security, and privacy for SSA systems through a required GAO audit and timely reporting/remediation, but it risks added costs, operational strain, and possible exposure of sensitive details if timelines or reporting rules are mishandled.
Taxpayers and Social Security beneficiaries (including seniors and retirees) will get an independent GAO audit that identifies security vulnerabilities in SSA systems and requires fixes within 90 days of the report, improving system security and reducing risk of compromise.
Congress and taxpayers receive a formal GAO report with findings and recommendations within one year, improving oversight and enabling legislative or funding responses to SSA system weaknesses.
Taxpayers and SSA beneficiaries benefit from stronger privacy protections because the audit could reveal violations of federal privacy laws and prompt remediation of identified data-handling weaknesses.
Taxpayers (and SSA operations) may incur additional costs because remediating identified vulnerabilities could require extra SSA spending or reallocation of resources, potentially raising taxpayer costs or diverting agency priorities.
GAO and SSA staff may be strained by short deadlines (60‑day start, 1‑year report, 90‑day remediation), increasing the risk of rushed reviews or incomplete fixes that could reduce the effectiveness of the audit effort.
Audit and reporting requirements could expose sensitive system details or suffer from incomplete specification of recipients and rules, risking confidentiality breaches or confusing/partial accountability.
Based on analysis of 2 sections of legislative text.
Mandates a GAO audit of SSA systems accessed by DOGE Service actors to find vulnerabilities, check privacy-law compliance, and require remediation and reporting.
Official title: Require performance and security audits of the computer systems of the Social Security Administration, and for other purposes.
Introduced June 4, 2025 by Sheldon Whitehouse · Last progress June 4, 2025
Requires the Comptroller General to begin a comprehensive audit of Social Security Administration computer systems and networks accessed by the U.S. DOGE Service, U.S. DOGE Service Temporary Organization, their employees, volunteers, or associated agency DOGE teams. The audit must identify security vulnerabilities and software bugs introduced by those parties and determine whether they violated federal privacy and information-security laws, with a report due to relevant congressional committees and the SSA Commissioner within one year and a required SSA remediation and status report following receipt of the audit.