Summary

Prohibits the Department of Veterans Affairs from entering into contracts that allow contractors to sell, monetize, or otherwise disclose veterans' sensitive personal information for consideration. Requires the VA to add a standard contract clause banning such monetization and to issue guidance for employees and contractors to detect and prevent sale or misuse of covered information. The VA must report the clause, guidance, and other compliance steps to the House and Senate Committees on Veterans’ Affairs within one year.

• Bans VA contracts that allow contractors to sell or otherwise disclose veterans' sensitive personal information for payment.
• Requires a standard anti-monetization clause in VA contracts that handle protected health information or personally identifiable information, including anonymized data.
• Mandates VA issue guidance to employees and contractors to identify and prevent data monetization or misuse within one year of enactment.
• VA must report to House and Senate Veterans’ Affairs committees within one year with the contract clause, guidance, and a summary of compliance actions.
• Applies to new contracts entered after enactment and existing contracts that remain in effect after enactment.
• Defines covered information broadly to include PHI, PII, and anonymized data derived from VA records.
• Relies on contractual prohibitions and existing legal authorities rather than creating new statutory penalties.
• Gives the VA authority to reference additional statutory or regulatory protections when defining covered information.