VA Tightens Cyber Screws on Contractors: Standard Security Update
Published Date: 1/5/2026
Notice
Summary
The Department of Veterans Affairs is updating a contract rule about keeping information and computer systems safe. This affects companies working with the VA, who’ll need to follow new security steps and share some info. Comments on these changes are open until March 6, 2026, with no new costs expected, just smarter security.
Analyzed Economic Effects
3 provisions identified: 0 benefits, 3 costs, 0 mixed.
Must report VA data breaches
If you are a company that contracts with the VA and have access to VA information or information systems, the VAAR clause 852.204-71 requires you to report any known or suspected security or privacy incidents or data breaches related to VA information or systems. This rule comes from VA section 804.1970 and implements the Federal Information Security Modernization Act of 2014.
Notify VA when employees lose access
If you contract with the VA and your employee who had access to VA information is reassigned or terminated and no longer needs access, the VAAR clause 852.204-71 requires you to notify the VA. This is part of contractor general responsibilities under VA section 804.1970 to protect VA information and systems.
Paperwork burden estimate for contractors
The VA estimates the information collection (OMB Control No. 2900-0900) will cause 4,069 hours of annual burden in total, with an estimated 8,223 respondents and an average burden of 30 minutes per respondent. The frequency of response is listed as less than quarterly.
Your PRIA Score
Personalized for You
How does this regulation affect your finances?
Sign up for a PRIA Policy Scan to see your personalized alignment score for this federal register document and every other regulation we track. We analyze your financial profile against policy provisions to show you exactly what matters to your wallet.
Key Dates
Department and Agencies
Take It Personal
Get Your Personalized Policy View
Start a Free Government Policy Watch to see how policy affects your household, then upgrade to PRIA Full Coverage for year-round monitoring.
Already have an account? Sign in