VA Updates Privacy Rules for Veteran Surveys
Published Date: 1/15/2026
Notice
Summary
The VA is updating how it collects and stores survey info about Veterans, their families, and beneficiaries to keep data safer and more organized. These changes affect anyone involved in VA surveys and include new cloud storage details and updated privacy rules. You’ve got 30 days from January 15, 2026, to share your thoughts before the updates go live—no cost changes announced.
Analyzed Economic Effects
4 provisions identified: 2 benefits, 2 costs, 0 mixed.
VA stores survey data in AWS GovCloud
VA will store electronic records for the "Veterans Signals" survey on Medallia FedRAMP High hosted in Amazon Web Services (AWS) GovCloud. The cloud hosting sits primarily in US-Gov-West-1 with duplication in US-Gov-West-2 and electronic records are also stored on VA servers at the Austin Information Technology Center.
Surveys include sensitive health and ID data
The system will include names, addresses, Social Security numbers, dates of birth, military service numbers, health status information, VA benefits data, and may include DoD and Medicare records and data purchased from data brokers. Records are retrievable by personal identifiers such as name, Social Security number, date of birth, and DoD identification numbers.
Records may be shared under routine uses
VA's routine uses permit disclosures of records to contractors, Federal agencies for research and computer matches, law enforcement, NARA, DOJ in legal proceedings, and other entities for breach response. The notice also states that certain individually identifiable health information governed by 45 CFR parts 160 and 164 and 38 U.S.C. 7332 cannot be disclosed under a routine use unless statutory and regulatory authority permit disclosure.
Encryption and access controls required
VA requires encryption to NIST-verified FIPS 140-2 standard or higher for storage and transmission, restricted access via VA Single Sign On, and limited authorized VA employee access to the VSignals application. Contractors and subcontractors must maintain the same security protections and use Data Use Agreements, BAAs, and non-disclosure instruments when given data.
Your PRIA Score
Personalized for You
How does this regulation affect your finances?
Sign up for a PRIA Policy Scan to see your personalized alignment score for this federal register document and every other regulation we track. We analyze your financial profile against policy provisions to show you exactly what matters to your wallet.
Key Dates
Department and Agencies
Related Federal Register Documents
2025-21242 — Extending Deadline for Debtor To Request a Waiver
The VA is giving veterans more time—up to one year instead of 180 days—to ask for a waiver on debts related to benefits. This change, effective January 26, 2026, helps reduce stress by giving veterans extra breathing room to handle their debt issues. It doesn’t cost veterans extra money but makes the process friendlier and fairer.
2025-18827 — Extension of Program of Comprehensive Assistance for Family Caregivers Eligibility for Legacy Participants and Legacy Applicants
The VA is giving family caregivers of veterans more time to stay in their special support program by extending the deadline from 2025 to 2028. This means caregivers and veterans who joined the program earlier (the legacy group) can keep getting help for three more years. No changes to money or benefits, just extra time to enjoy the support they deserve!
2025-14687 — Reproductive Health Services
The VA is planning to stop covering abortions and abortion counseling again, reversing a 2022 change. This affects veterans and their families who use VA and CHAMPVA health benefits. The change aims to focus VA services on what they consider essential care, with no new costs or timing details shared yet.
2026-11752 — Grants for the Rural Veterans Coordination Pilot; Rescission
The VA is officially ending the Rural Veterans Coordination Pilot grant program because its legal permission has expired. This means no new grants will be given, and the rules about this program are being removed to keep things clear and simple. The change takes effect on July 13, 2026, so rural veterans and community groups should note the program is officially closed.
2026-11766 — Privacy Act of 1974; System of Records
The Department of Veterans Affairs is updating its records system that helps investigate crimes involving veterans. These changes improve how information is stored, accessed, and kept safe. If you want to share your thoughts, you have 30 days from June 11, 2026, to comment before the new rules take effect.
2026-11494 — Agency Information Collection Activity: Application for Authority To Close Loans on an Automatic Basis Nonsupervised Lenders
The VA is updating how nonsupervised lenders apply to automatically close loans and recognize agents, moving the process online. This change affects lenders who want quicker loan approvals and yearly recertifications, with more people expected to apply. Comments on this update are open until July 9, 2026, and the paperwork burden will nearly double due to more applicants.
Previous / Next Documents
Previous: 2026-00725 — Privacy Act of 1974; System of Records
The Department of Veterans Affairs is officially ending a record system that tracked info about its Office of Inspector General employees. This change means their employee records will now be handled under broader government systems, keeping things simpler and up-to-date. If you want to speak up, you’ve got 30 days from January 15, 2026, to send in your comments—no cost involved!
Next: 2026-00727 — Privacy Act of 1974; System of Records and Routine Uses
The CIA is updating how it handles and shares personal info by fixing two existing rules and adding one new rule about routine uses of records. This affects anyone whose info the CIA keeps and means the agency can share data more clearly for national security. You’ve got until February 17, 2026, to share your thoughts before these changes take effect—no extra costs involved!