VA Tightens Rules to Safeguard Vets' Data in Contractor Deals
Published Date: 3/25/2026
Notice
Summary
The Department of Veterans Affairs is updating rules to keep veterans' information safe when contractors work with their computer systems. These changes affect companies that provide IT services or develop and host VA information systems. Comments on these updates are open until April 24, 2026, and the goal is to make sure everyone handles data securely without adding extra costs.
Analyzed Economic Effects
3 provisions identified: 0 benefits, 3 costs, 0 mixed.
VA IT Contractors Must Secure Systems
If your company provides information technology services to the VA, Clause 852.239-70 requires your firm to be responsible for information technology security for all systems connected to a VA network or operated by your company for VA, regardless of location. This clause must be included in all solicitations, contracts, and orders exceeding the micro-purchase threshold that include IT services.
Design/Hosting Contracts Must Include VA Clauses
Clause 852.239-72 must be included in all solicitations, contracts, orders, and agreements where information system design and development services are required. Clause 852.239-73 must be included where information system hosting, operation, or maintenance services are required, and both clauses require contractor and subcontractor personnel to be subject to the same Federal laws, regulations, standards, and VA directives and handbooks as VA personnel for information security.
Paperwork Burden for VA Contractors
The VA estimates the annual information-collection burden for affected businesses at 4,815 hours total, with an estimated average burden of 19 minutes per respondent and an estimated 15,384 respondents. The affected public is listed as "Business or other for-profit."
Your PRIA Score
Personalized for You
How does this regulation affect your finances?
Sign up for a PRIA Policy Scan to see your personalized alignment score for this federal register document and every other regulation we track. We analyze your financial profile against policy provisions to show you exactly what matters to your wallet.
Key Dates
Department and Agencies
Related Federal Register Documents
2025-21242 — Extending Deadline for Debtor To Request a Waiver
The VA is giving veterans more time—up to one year instead of 180 days—to ask for a waiver on debts related to benefits. This change, effective January 26, 2026, helps reduce stress by giving veterans extra breathing room to handle their debt issues. It doesn’t cost veterans extra money but makes the process friendlier and fairer.
2025-18827 — Extension of Program of Comprehensive Assistance for Family Caregivers Eligibility for Legacy Participants and Legacy Applicants
The VA is giving family caregivers of veterans more time to stay in their special support program by extending the deadline from 2025 to 2028. This means caregivers and veterans who joined the program earlier (the legacy group) can keep getting help for three more years. No changes to money or benefits, just extra time to enjoy the support they deserve!
2025-14687 — Reproductive Health Services
The VA is planning to stop covering abortions and abortion counseling again, reversing a 2022 change. This affects veterans and their families who use VA and CHAMPVA health benefits. The change aims to focus VA services on what they consider essential care, with no new costs or timing details shared yet.
2026-05982 — Agency Information Collection Activity Under OMB Review: Application for High-Technology Veterans Education, Training and Skills (VET TEC 2.0) Program
The VA is rolling out a new application for the VET TEC 2.0 program, helping veterans get training in cool tech jobs outside traditional college paths. Veterans under 62 with at least 3 years of service can apply, and the program runs through September 2027. Comments on the application process are open until April 27, 2026, so now’s the time to weigh in!
2026-06004 — Notice of Exception to Date of Receipt Rule
Because of a big Canadian postal strike from November 15 to December 17, 2024, mail to and from Canada was seriously delayed. To help veterans and claimants in Canada, the VA is making a temporary rule change so late mail won’t hurt their benefits or claims. This exception started after mail service fully resumed on January 6, 2025, making sure no one loses out because of the strike delays.
2026-05786 — Agency Information Collection Activity: Personalized Career Planning and Guidance
The Department of Veterans Affairs is asking for public feedback on continuing to collect info through VA Form 27-8832, which helps decide if veterans qualify for personalized career planning benefits. This is a routine update with no changes, but your comments can help make the process smoother. You’ve got 60 days to share your thoughts online—no cost changes, just keeping things running well!
Previous / Next Documents
Previous: 2026-05739 — Agency Information Collection Activity: Gray Market Clauses: 852.212-71 and 852.212-72
The Department of Veterans Affairs is keeping two important rules that stop fake or gray market medical and tech parts from sneaking into their supply chain. These rules affect companies that sell new medical gear or IT equipment to the VA. They’re asking for public comments by April 23, 2026, but there’s no change in costs or paperwork burden—just a smooth extension of the current process.
Next: 2026-05743 — Agency Information Collection Activities: Submission for OMB Review; Comment Request
The Centers for Medicare & Medicaid Services (CMS) wants your feedback on their plan to keep collecting important info from the public. This helps them do their job better while making sure the paperwork isn’t too much of a hassle. If you have thoughts, you’ve got until April 24, 2026, to share them—no cost, just your voice!
Take It Personal
Get Your Personalized Policy View
Start a Free Government Policy Watch to see how policy affects your household, then upgrade to PRIA Full Coverage for year-round monitoring.
Already have an account? Sign in