RECOVER PII Act

[Congressional Bills 119th Congress] [From the U.S. Government Publishing Office] [H.R. 10034 Introduced in House (IH)]

<DOC>

119th CONGRESS 2d Session H. R. 10034

To amend the Consolidated Appropriations Act, 2017 to extend the availability of identity protection coverage to individuals whose personally identifiable information was compromised during recent data breaches at Federal agencies, and for other purposes.

_______________________________________________________________________

IN THE HOUSE OF REPRESENTATIVES

August 3, 2026

Ms. Norton (for herself, Mr. Beyer, Mr. Hoyer, and Mr. Walkinshaw) introduced the following bill; which was referred to the Committee on Oversight and Government Reform, and in addition to the Committees on House Administration, and the Judiciary, for a period to be subsequently determined by the Speaker, in each case for consideration of such provisions as fall within the jurisdiction of the committee concerned

_______________________________________________________________________

A BILL

To amend the Consolidated Appropriations Act, 2017 to extend the availability of identity protection coverage to individuals whose personally identifiable information was compromised during recent data breaches at Federal agencies, and for other purposes.

Be it enacted by the Senate and House of Representatives of the United States of America in Congress assembled,

SECTION 1. SHORT TITLE.

This Act may be cited as the ``Reducing the Effects of the Cyberattack on OPM Victims Enduring Response and Protecting Identifiable Information Act'' or the ``RECOVER PII Act''.

SEC. 2. IDENTITY PROTECTION COVERAGE FOR INDIVIDUALS AFFECTED BY FEDERAL AGENCY DATA BREACHES.

Section 633 of title VI of division E of the Consolidated Appropriations Act, 2017 (Public Law 115-31), as amended by section 630 of title VI of division D of the Consolidated Appropriations Act, 2018 (Public Law 115-141), is amended-- (1) in subsection (a)-- (A) in the matter preceding paragraph (1), by striking ``For fiscal years 2016 through 2026,'' and inserting ``For fiscal year 2016 and each fiscal year thereafter,''; (B) in paragraph (1), by striking ``and'' at the end; and (C) by striking paragraph (2) and inserting the following: ``(2) is effective for the remainder of the life of the affected individual; and ``(3) includes not less than $5,000,000 in identity theft insurance.''; and (2) in subsection (b), by striking ``Definition.--''.

SEC. 3. REIMBURSEMENTS RELATING TO PRIVACY-ENHANCING SERVICES.

(a) Definitions.--In this section: (1) Agency.--The term ``agency'' means each authority of the executive, legislative, or judicial branch of the Government of the United States. (2) Privacy-enhancing service.--The term ``privacy- enhancing service'' means any software or hardware solution, technical process, technique, or other technological means that mitigates privacy risks arising from data processing, including by eliminating, reducing, or suppressing personal information, including restricted personal information, as defined in section 119(b) of title 18, United States Code. (b) Reimbursements.--Notwithstanding any other provision of law, amounts appropriated by any Act for fiscal year 2026, or any fiscal year thereafter, for salaries and expenses of an agency may be used by that agency to reimburse an employee employed by that agency (or to make a payment to a contractor of the agency to reimburse an employee of the contractor who provides support to that agency) for not more than 100 percent of the costs incurred by the applicable individual for privacy-enhancing services. (c) Documentation.--Any reimbursement or payment that is authorized under subsection (b) shall be contingent upon the submission by the employee or contractor, as applicable, of such information or documentation as the applicable agency may reasonably require. <all>