# 119-s-3161: Protecting DOD Data Act of 2025

119-s-3161, Protecting DOD Data Act of 2025, is a 119th Congress bill sponsored by Sen. Slotkin, Elissa [D-MI] (D-MI); status introduced (as of 2026-04-21).

- Canonical: https://policyrisk.com/legislation/119-s-3161
- As of: 2026-04-21
- Plain-text twin of the page above; the HTML and this file carry the same facts.

## Facts
- Bill: 119-s-3161
- Congress: 119
- Title: Protecting DOD Data Act of 2025
- Status: introduced
- Introduced: 2025-11-07
- Sponsor: Sen. Slotkin, Elissa [D-MI] (D-MI)
- Cosponsors: 1
- Policy area: Armed Forces and National Security
- Touches household money: no
- Last recorded action: 2026-04-21

## Summary

**Protecting DoD personal data tied to operational security.** This bill would require the Department of Defense to identify and prioritize personal data that could affect military or civilian operational security and to limit its collection, use, sharing, and storage. - Members of the Armed Forces and civilian DoD personnel would get tighter limits on collection, use, dissemination, and retention of personal data tied to operational security. The bill generally bars storing that data on non-DoD servers unless under a DoD contract or with the individual's permission. - DoD system owners and staff with read or write access would face new standards, training, reporting, and regular security debriefings, including a debriefing after departure. The Secretary must send details of these requirements to Congress within 30 days after they are developed. - Contractors and cloud providers could host this data only under a DoD contract unless the Secretary issues a written waiver that certifies operational security risks were considered and national security is not at risk. - Congress would receive notifications within 30 days of changes to related departmental policy, waivers, noncompliant storage or data exfiltration, unauthorized storage on non-DoD servers, or exposure of personal data in a cyber incident. The notification requirement sunsets after five years.

## Cosponsors (1)

- Sen. Ernst, Joni [R-IA] (R-IA), 2025-11-07T00:00:00.000Z

## Provisions PRIA read

- Stronger DoD data protections and rules: mixed, low. If enacted, the bill would require the Secretary of Defense to identify personal data that could affect operational security and protect it. The Secretary would review guidance and, if needed, issue new guidance by June 1, 2026. DoD personal data could not be stored on non-DoD servers or cloud serv…

## Related bills

- 119-s-1748: Kids Online Safety Act
- 119-s-1541: SHIPS for America Act of 2025
- 119-s-5283: Momnibus Act
- 119-s-3990: PrEP Access and Coverage Act of 2026
- 119-s-4189: INSULIN Act of 2026
- 119-s-2654: Biomanufacturing and Jobs Act of 2025

## Sources
- [119-s-3161 on Congress.gov](https://www.congress.gov/bill/119th-congress/senate-bill/3161)

## Related
- [119-s-1748: Kids Online Safety Act](https://policyrisk.com/legislation/119-s-1748)
- [119-s-1541: SHIPS for America Act of 2025](https://policyrisk.com/legislation/119-s-1541)
- [119-s-5283: Momnibus Act](https://policyrisk.com/legislation/119-s-5283)
- [119-s-3990: PrEP Access and Coverage Act of 2026](https://policyrisk.com/legislation/119-s-3990)
- [119-s-4189: INSULIN Act of 2026](https://policyrisk.com/legislation/119-s-4189)
- [119-s-2654: Biomanufacturing and Jobs Act of 2025](https://policyrisk.com/legislation/119-s-2654)
- [All bills in Congress](https://policyrisk.com/legislation)

Source: PRIA, https://policyrisk.com/legislation/119-s-3161 (as of 2026-04-21).