VA Tightens Rules to Safeguard Vets' Data in Contractor Deals
Published Date: 3/25/2026
Notice
Summary
The Department of Veterans Affairs is updating rules to keep veterans' information safe when contractors work with their computer systems. These changes affect companies that provide IT services or develop and host VA information systems. Comments on these updates are open until April 24, 2026, and the goal is to make sure everyone handles data securely without adding extra costs.
Analyzed Economic Effects
3 provisions identified: 0 benefits, 3 costs, 0 mixed.
VA IT Contractors Must Secure Systems
If your company provides information technology services to the VA, Clause 852.239-70 requires your firm to be responsible for information technology security for all systems connected to a VA network or operated by your company for VA, regardless of location. This clause must be included in all solicitations, contracts, and orders exceeding the micro-purchase threshold that include IT services.
Design/Hosting Contracts Must Include VA Clauses
Clause 852.239-72 must be included in all solicitations, contracts, orders, and agreements where information system design and development services are required. Clause 852.239-73 must be included where information system hosting, operation, or maintenance services are required, and both clauses require contractor and subcontractor personnel to be subject to the same Federal laws, regulations, standards, and VA directives and handbooks as VA personnel for information security.
Paperwork Burden for VA Contractors
The VA estimates the annual information-collection burden for affected businesses at 4,815 hours total, with an estimated average burden of 19 minutes per respondent and an estimated 15,384 respondents. The affected public is listed as "Business or other for-profit."
Your PRIA Score
Personalized for You
How does this regulation affect your finances?
Sign up for a PRIA Policy Scan to see your personalized alignment score for this federal register document and every other regulation we track. We analyze your financial profile against policy provisions to show you exactly what matters to your wallet.
Key Dates
Department and Agencies
Related Federal Register Documents
2026-11973 — Implementing Regulation for National Environmental Policy Act (NEPA): Environmental Effects of the Department of Veterans Affairs Actions
The Department of Veterans Affairs is updating how it checks the environmental impact of its projects to be faster, clearer, and more in line with new laws passed since 1989. This change affects VA staff and veterans by improving planning and making sure VA actions protect the environment while delivering care. The new rules start June 15, 2026, and the VA welcomes feedback until July 15, 2026.
2025-21242 — Extending Deadline for Debtor To Request a Waiver
The VA is giving veterans more time—up to one year instead of 180 days—to ask for a waiver on debts related to benefits. This change, effective January 26, 2026, helps reduce stress by giving veterans extra breathing room to handle their debt issues. It doesn’t cost veterans extra money but makes the process friendlier and fairer.
2025-18827 — Extension of Program of Comprehensive Assistance for Family Caregivers Eligibility for Legacy Participants and Legacy Applicants
The VA is giving family caregivers of veterans more time to stay in their special support program by extending the deadline from 2025 to 2028. This means caregivers and veterans who joined the program earlier (the legacy group) can keep getting help for three more years. No changes to money or benefits, just extra time to enjoy the support they deserve!
2025-14687 — Reproductive Health Services
The VA is planning to stop covering abortions and abortion counseling again, reversing a 2022 change. This affects veterans and their families who use VA and CHAMPVA health benefits. The change aims to focus VA services on what they consider essential care, with no new costs or timing details shared yet.
2026-13399 — Agency Information Collection Activity: Application for Refund of Educational Contributions
The VA is updating its form for veterans who want to get a refund of their educational contributions from the VEAP program. Veterans who contributed to this fund can comment on the changes until August 31, 2026. This update aims to make the refund process clearer and easier, with no new costs involved.
2026-13453 — Privacy Act of 1974; System of Records
The Department of Veterans Affairs is updating its system that tracks debts from VA benefits like education, compensation, and loans. If you owe money to the VA, this change affects how your info is stored and used. You have 30 days to share your thoughts before the update goes live, but no extra costs or delays are expected.
Previous / Next Documents
Previous: 2026-05739 — Agency Information Collection Activity: Gray Market Clauses: 852.212-71 and 852.212-72
The Department of Veterans Affairs is keeping two important rules that stop fake or gray market medical and tech parts from sneaking into their supply chain. These rules affect companies that sell new medical gear or IT equipment to the VA. They’re asking for public comments by April 23, 2026, but there’s no change in costs or paperwork burden—just a smooth extension of the current process.
Next: 2026-05743 — Agency Information Collection Activities: Submission for OMB Review; Comment Request
The Centers for Medicare & Medicaid Services (CMS) wants your feedback on their plan to keep collecting important info from the public. This helps them do their job better while making sure the paperwork isn’t too much of a hassle. If you have thoughts, you’ve got until April 24, 2026, to share them—no cost, just your voice!