Federal RuleAug 21
62
DOL Rewrites Disability Rules for 'Merit-Based Opportunity' Push
RuleLabor DepartmentFederal Contract Compliance Programs OfficeSignificant Wallet
119-hr-8710119th CongressWALLET
National Defense Data Resilience Act
Sponsored By: Representative Subramanyam, Suhas [D-VA-10]
Introduced
Summary
Data recovery for national defense would require the Secretary of Defense to classify Department of Defense data into three tiers and set mandatory, risk-based recovery time objectives for each tier. The bill would also require fielding auditable recovery capabilities, adopting approved technology standards, and sending an unclassified strategy and regular certification reports to Congress to improve resilience against nation-state and other cyber threats.
Show full summary
- DoD components: Would have to sort data into critical, important, and necessary categories and meet recovery time targets. Critical data must have recovery objectives within 180 days and important or necessary data within 270 days.
- Cyber teams and suppliers: Would need to deploy immutable backups, logically separated copies, continuous monitoring, annual recovery exercises simulating nation-state attacks, and use only technologies listed in a DoD-certified inventory.
- Congress and oversight: Would receive a data recovery strategy within 90 days and auditable recovery certification reports annually and one year after enactment to track compliance and capability.
Personalized for You
How does this bill affect your finances?
Personalize government policy and PRIA will tell you what this bill means for your household, plus every other piece of legislation we track. PRIA reads each provision against your financial profile to show you exactly what matters to your wallet.
Bill Overview
Analyzed Economic Effects
1 provisions identified: 1 benefits, 0 costs, 0 mixed.
DoD data recovery and resilience
This bill would require the Secretary of Defense to label all DoD data as critical, important, or necessary. It would set recovery time objectives (RTOs) for critical data within 180 days and for important and necessary data within 270 days. The bill would require immutable, isolated backups, continuous monitoring, annual recovery exercises simulating nation‑state attacks, and independent audits. DoD would only use recovery tech listed in a certified inventory. The Secretary would send an unclassified data recovery strategy within 90 days and an auditable certification report for each DoD element within one year and every year after.
Sponsors & CoSponsors
Sponsor
Subramanyam, Suhas [D-VA-10]
VA • D
Cosponsors
Rep. McCormick, Richard [R-GA-7]
GA • R
Sponsored 5/7/2026
Roll Call Votes
No roll call votes available for this bill.
View on Congress.gov