Protect Veterans from the THIEF Act
Sponsored By: Representative Rep. Budzinski, Nikki [D-IL-13]
In Committee
Summary
Prevents VA contractors from selling or monetizing veterans' sensitive health and personal data. This bill would require the Department of Veterans Affairs to put a no‑monetization clause in covered contracts and to issue guidance so employees and contractors can spot and stop data misuse.
Show full summary
- Veterans: Limits how their protected health information and personally identifiable information can be sold or shared by contractors. This covers anonymized data as well.
- Contractors and subcontractors: Would force every covered contract to ban monetization, sale, or misuse of covered information by contractors, subcontractors, affiliates, and other non‑Department entities.
- VA staff and contracting officers: Requires the Department to issue a directive or policy that helps identify monetization, sale, or misuse and ensure contract compliance.
- Scope and oversight: Applies to covered contracts that handle covered information entered into after enactment or existing contracts that do not expire before enactment. The Secretary must report to the House and Senate Committees on Veterans' Affairs within one year with the required contract clause, the guidance, and a summary of actions taken.
Your PRIA Score
Personalized for You
How does this bill affect your finances?
Sign up for a PRIA Policy Scan to see your personalized alignment score for this bill and every other piece of legislation we track. We analyze your financial profile against policy provisions to show you exactly what matters to your wallet.
Bill Overview
Analyzed Economic Effects
1 provisions identified: 1 benefits, 0 costs, 0 mixed.
Ban sale of VA patient data
If enacted, this bill would bar the VA Secretary from signing any contract that lets a contractor sell or disclose veterans' sensitive personal data for money. It would define which VA contracts are covered and what counts as covered information, including protected health information and personally identifiable information (including anonymized data) and material protected under 5 U.S.C. 552a; 38 U.S.C. 5701 and 7332; and 45 C.F.R. parts 160, 161, and 164. The VA would have to ensure every covered contract includes a clause forbidding monetization, sale, or misuse of covered information by contractors, subcontractors, affiliates, or other non-Department entities, or issue a directive giving guidance to staff and contractors. Not later than one year after enactment, the Secretary would have to send the Committees on Veterans' Affairs a report with the required contract clause, the guidance, and a summary of other steps taken to comply.
Free Policy Watch
You just read the policy. Now see what it costs you.
Pick a topic. PRIA runs your household against live legislation and sends you a free personalized readout.
Pick a topic to get started
Sponsors & CoSponsors
Sponsor
Rep. Budzinski, Nikki [D-IL-13]
IL • D
Cosponsors
Rep. Barrett, Tom [R-MI-7]
MI • R
Sponsored 1/27/2026
Roll Call Votes
No roll call votes available for this bill.
View on Congress.govTake It Personal
Get Your Personalized Policy View
Take the PRIA Score to see how policy affects your household, then upgrade to PRIA Full Coverage for year-round monitoring.
Already have an account? Sign in