VA Tightens Contractor Rules for Info System Security Breaches
Published Date: 3/19/2026
Notice
Summary
The Department of Veterans Affairs is updating rules for contractors who handle VA information and computer systems to keep everything safe and secure. Contractors must report any security problems or data breaches and tell VA when employees lose access. Comments on these changes are open until April 20, 2026, with no new costs expected.
Analyzed Economic Effects
2 provisions identified: 0 benefits, 2 costs, 0 mixed.
Contractors Must Report Security Incidents
If your company is a VA contractor with access to VA information or VA information systems, you must report any known or suspected security or privacy incident or data breach related to VA information or systems. The information collection (OMB Control No. 2900-0900) covers an estimated 8,223 respondents with an estimated annual burden of 4,069 hours and an average burden of 30 minutes per respondent, frequency less than quarterly.
Notify VA When Staff Lose System Access
VA contractors who have access to VA information systems must notify VA when a contractor employee is reassigned or terminated and no longer needs access to a VA information system. The collection is part of OMB Control No. 2900-0900 and the agency estimates 8,223 respondents, an annual burden of 4,069 hours total, and an average burden of 30 minutes per respondent.
Your PRIA Score
Personalized for You
How does this regulation affect your finances?
Sign up for a PRIA Policy Scan to see your personalized alignment score for this federal register document and every other regulation we track. We analyze your financial profile against policy provisions to show you exactly what matters to your wallet.
Key Dates
Department and Agencies
Related Federal Register Documents
2025-21242 — Extending Deadline for Debtor To Request a Waiver
The VA is giving veterans more time—up to one year instead of 180 days—to ask for a waiver on debts related to benefits. This change, effective January 26, 2026, helps reduce stress by giving veterans extra breathing room to handle their debt issues. It doesn’t cost veterans extra money but makes the process friendlier and fairer.
2025-18827 — Extension of Program of Comprehensive Assistance for Family Caregivers Eligibility for Legacy Participants and Legacy Applicants
The VA is giving family caregivers of veterans more time to stay in their special support program by extending the deadline from 2025 to 2028. This means caregivers and veterans who joined the program earlier (the legacy group) can keep getting help for three more years. No changes to money or benefits, just extra time to enjoy the support they deserve!
2025-14687 — Reproductive Health Services
The VA is planning to stop covering abortions and abortion counseling again, reversing a 2022 change. This affects veterans and their families who use VA and CHAMPVA health benefits. The change aims to focus VA services on what they consider essential care, with no new costs or timing details shared yet.
2026-10305 — Agency Information Collection Activity Under OMB Review: Certification of Training Hours, Wages, and Progress
The Department of Veterans Affairs is updating a form that helps track veterans’ training hours, wages, and progress in their rehab programs. Veterans using these benefits will need to provide this info so their payments and support don’t get delayed. Comments on the changes are open until June 22, 2026, and the update aims to keep things smooth without adding extra hassle.
2026-10130 — Agency Information Collection Activity: Status of Loan Account-Foreclosure or Other Liquidation
The VA is keeping its form for tracking loans that go into foreclosure or get liquidated, making sure it stays easy to use and up to date. This affects people with VA-backed loans that are behind on payments, letting the VA handle repurchasing those loans after certain rules are met. Comments on this plan are open until June 22, 2026, and the paperwork won’t cost much time—just about 30 minutes per person.
2026-10084 — Expanding Access to State Prescription Drug Monitoring Programs
The VA is making it easier and clearer for certain VA health workers to check State Prescription Drug Monitoring Programs (PDMPs) to keep an eye on prescription drug use. This change helps prevent medicine misuse and protects those checking the data while they do their jobs. Comments on this new rule are open until July 20, 2026, and it aims to make prescribing safer for veterans.
Previous / Next Documents
Previous: 2026-05397 — Agency Information Collection Activities; Extension of Previously Approved eCollection eComments Requested; Certification of Compliance With the Statutory Eligibility Requirements of the Violence Against Women Act as Amended, STOP Formula Grant Program
The Department of Justice is asking to keep collecting info from groups getting STOP grants to show they follow the Violence Against Women Act rules. This helps make sure funds are used right and keeps the process smooth with electronic forms. Comments on this plan are open until April 20, 2026, so affected groups have a chance to weigh in without extra costs or delays.
Next: 2026-05402 — Advisory Committee on the Medical Uses of Isotopes: Call for Nominations
The U.S. Nuclear Regulatory Commission is looking for a new Agreement State Representative to join the Advisory Committee on the Medical Uses of Isotopes. If you work in a state radiation control program, you can apply by May 18, 2026, to help shape important medical safety rules. This role is all about making sure medical uses of radioactive materials stay safe and effective.