GSA Updates Privacy Rules for Pegasys Financial System
Published Date: 1/12/2026
Notice
Summary
The General Services Administration (GSA) is updating its Pegasys financial records system to add new ways to share info with Congress and investigate data breaches. These changes affect anyone involved with GSA’s financial management, including key business areas like Federal Acquisition and Public Buildings. The updates take effect February 11, 2026, and GSA is open to comments until then—no extra costs involved, just smoother, clearer record handling!
Analyzed Economic Effects
4 provisions identified: 0 benefits, 2 costs, 2 mixed.
Sensitive Financial Data Hosted by Cloud Contractor
Pegasys stores sensitive financial records (including Social Security numbers, home addresses, banking information, and limited GSA-issued credit card data) on behalf of GSA by Amazon in Seattle, Washington. GSA states that records are stored electronically, encrypted in transit and at rest, and protected by passwords, firewalls, intrusion detection, and other security monitoring.
Congressional Requests Can Receive Your Data
If your name or financial record is in GSA's Pegasys system (used for payments and accounting), GSA may disclose your record to a Member of Congress or congressional staff upon your request. This new routine use (routine use h) becomes active on February 11, 2026 and applies to GSA vendors (members of the public), other federal agency employees, and GSA employees.
Expanded Data Sharing for Breach Response
GSA added routine uses that let it share Pegasys records with other agencies, entities, or persons to respond to suspected or confirmed data breaches and to compare records with other systems in coordination with an Office of Inspector General. These routine uses (including g, i, and j) take effect February 11, 2026.
Treasury Do Not Pay Checks on Your Payments
GSA may disclose Pegasys records to the U.S. Department of the Treasury to review payment and award eligibility through the Do Not Pay Working System to identify, prevent, or recoup improper payments. This routine use (k) is effective February 11, 2026 and covers payments disbursed by a state or federal entity.
Your PRIA Score
Personalized for You
How does this regulation affect your finances?
Sign up for a PRIA Policy Scan to see your personalized alignment score for this federal register document and every other regulation we track. We analyze your financial profile against policy provisions to show you exactly what matters to your wallet.
Key Dates
Department and Agencies
Take It Personal
Get Your Personalized Policy View
Start a Free Government Policy Watch to see how policy affects your household, then upgrade to PRIA Full Coverage for year-round monitoring.
Already have an account? Sign in