2026-11613NoticeWallet

HUD Adds Sumo Logic to Track Its Own Network Logs

Published Date: 6/10/2026

Notice

Summary

HUD is setting up a new system called Sumo Logic to keep an eye on its computer security by collecting and checking logs from its apps and cloud services. This affects anyone whose data is part of HUD’s systems, making sure their info stays safe and monitored. You can share your thoughts by July 10, 2026, before it officially kicks in, with no extra costs involved.

Analyzed Economic Effects

5 provisions identified: 2 benefits, 2 costs, 1 mixed.

HUD will collect system logs with personal data

HUD will collect centralized security logs that can include device identifiers, full names, email addresses, geolocation information, phone numbers, user IDs, and web URLs. The system covers federal employees, contractors, detail personnel, other personnel who access HUD systems, and individuals (including vendors, partners, or members of the public) whose accounts, credentials, or devices interact with HUD networks, applications, or services.

Records stored securely in FedRAMP cloud

HUD will store Sumo Logic records in a FedRAMP-authorized cloud environment with encryption at rest and in transit and claims compliance with FISMA, NIST, and FIPS controls. Access requires HUD credentials and role-based privileges including HSPD-12 ID, connection to HUD's LAN, a User ID, Password, and PIN.

HUD may share records with many external parties

HUD may disclose Sumo Logic records to contractors, grantees, consultants, other Federal agencies, State and local governments, law enforcement, courts, or multilateral organizations for research, program support, litigation, enforcement, or breach response. Disclosures may be made when HUD suspects or confirms a breach or when necessary to respond to or prevent harm.

Records retention limited to 30 months

HUD will manage Sumo Logic records under General Records Schedule (GRS) 3.2 and states the records are temporary and can be destroyed when 30 months old, although longer retention is authorized for business use (Disposition Authority: DAA-GRS 2022-0005-0002).

You can request and contest records

Individuals may request to determine whether the system contains their records by written inquiry to HUD and must provide full name, current address, telephone number, and either a notarized statement or an unsworn declaration under 24 CFR 16.4. Contesting and appeals follow HUD's procedures in 24 CFR part 16.8.

Your PRIA Score

Score Hidden

Personalized for You

How does this regulation affect your finances?

Sign up for a PRIA Policy Scan to see your personalized alignment score for this federal register document and every other regulation we track. We analyze your financial profile against policy provisions to show you exactly what matters to your wallet.

Free to start

Key Dates

Published Date
Comments Due
Effective Date
6/10/2026
7/10/2026
7/11/2026

Department and Agencies

Department
Independent Agency
Agency
Housing and Urban Development Department
Source: View HTML

Related Federal Register Documents

Previous / Next Documents

Back to Federal Register