# 2026-00358: GSA Updates Privacy Rules for Pegasys Financial System

2026-00358, Privacy Act of 1974; Notice of a Modified System of Records, is a Federal Register notice from General Services Administration published 2026-01-12, effective 2026-02-11 (as of 2026-06-08).

- Canonical: https://policyrisk.com/federal-register/2026-00358
- As of: 2026-06-08
- Plain-text twin of the page above; the HTML and this file carry the same facts.

## Facts
- Document number: 2026-00358
- Title: Privacy Act of 1974; Notice of a Modified System of Records
- Type: Notice
- Agencies: General Services Administration
- Citation: 91 FR 1188
- Published: 2026-01-12
- Effective: 2026-02-11
- Comments close: 2026-02-11
- Significant: no
- Touches household money: no
- Regulation identifier numbers: none
- Last updated: 2026-06-08

## In one line

GSA Updates Privacy Rules for Pegasys Financial System

## Summary

The General Services Administration (GSA) is updating its Pegasys financial records system to add new ways to share info with Congress and investigate data breaches. These changes affect anyone involved with GSA’s financial management, including key business areas like Federal Acquisition and Public Buildings. The updates take effect February 11, 2026, and GSA is open to comments until then—no extra costs involved, just smoother, clearer record handling!

## Abstract

Pursuant to the provisions of the Privacy Act of 1974, notice is given that the General Services Administration (GSA) proposes to modify an existing system of records, entitled GSA/PPFM-11, Pegasys. This system of records is directed to the records within GSA's financial management system. Pegasys is GSA's financial management system of record for financial transactions and reporting utilized for its main business lines including the Federal Acquisition Service (FAS), Public Buildings Service (PBS), and General Management and Administrative Offices.

## Effects PRIA read

- Congressional Requests Can Receive Your Data: cost, medium. If your name or financial record is in GSA's Pegasys system (used for payments and accounting), GSA may disclose your record to a Member of Congress or congressional staff upon your request. This new routine use (routine use h) becomes active on February 11, 2026 and applies to GSA vendors (members…
- Expanded Data Sharing for Breach Response: mixed, medium. GSA added routine uses that let it share Pegasys records with other agencies, entities, or persons to respond to suspected or confirmed data breaches and to compare records with other systems in coordination with an Office of Inspector General. These routine uses (including g, i, and j) take effect…
- Treasury Do Not Pay Checks on Your Payments: cost, medium. GSA may disclose Pegasys records to the U.S. Department of the Treasury to review payment and award eligibility through the Do Not Pay Working System to identify, prevent, or recoup improper payments. This routine use (k) is effective February 11, 2026 and covers payments disbursed by a state or fe…
- Sensitive Financial Data Hosted by Cloud Contractor: mixed, high. Pegasys stores sensitive financial records (including Social Security numbers, home addresses, banking information, and limited GSA-issued credit card data) on behalf of GSA by Amazon in Seattle, Washington. GSA states that records are stored electronically, encrypted in transit and at rest, and pr…

## Related documents

- [2026-19160](https://policyrisk.com/federal-register/2026-19160): Federal Acquisition Regulation: Revolutionary Federal Acquisition Regulation Overhaul Parts 16, 17, and 35, 2026-09-18
- [2026-04486](https://policyrisk.com/federal-register/2026-04486): General Services Property Management Regulation (GSPMR); Nondiscrimination on the Basis of the Age Act Regulation for Programs or Activitie…, 2026-03-06
- [2025-22915](https://policyrisk.com/federal-register/2025-22915): Federal Management Regulation; Aligning the Federal Management Regulation (FMR) With the Administration's Deregulatory Priorities, 2025-12-16
- [2025-22289](https://policyrisk.com/federal-register/2025-22289): Federal Travel Regulation; Reorganizing and Streamlining the Federal Travel Regulation To Improve Operational Efficiency, 2025-12-08
- [2026-20317](https://policyrisk.com/federal-register/2026-20317): General Services Administration Acquisition Regulation; GSAR Implementation of Executive Order 14275, Acquisition of Utility Services, 2026-10-05
- [2026-20270](https://policyrisk.com/federal-register/2026-20270): Information Collection; Presolicitation Notice and Response, 2026-10-02

## Sources
- [2026-00358 on federalregister.gov](https://www.federalregister.gov/documents/2026/01/12/2026-00358/privacy-act-of-1974-notice-of-a-modified-system-of-records)
- [2026-00358 as published (PDF)](https://www.govinfo.gov/content/pkg/FR-2026-01-12/pdf/2026-00358.pdf)

## Related
- [Previous: 2026-00356, Magnuson-Stevens Act Provisions; Fisheries Off West Coast States; Pacific Highl…](https://policyrisk.com/federal-register/2026-00356)
- [Next: 2026-00359, Arms Sales Notification](https://policyrisk.com/federal-register/2026-00359)
- [All Federal Register documents](https://policyrisk.com/federal-register)

Source: PRIA, https://policyrisk.com/federal-register/2026-00358 (as of 2026-06-08).