RECOVER PII Act
- Sponsor
- Del. Norton, Eleanor Holmes [D-DC-At Large]
- Committees
- Judiciary Committee (primary)
- Last action
- Aug 3, 2026
Bottom line
The bill aims to provide enhanced, lifelong identity protection and financial reimbursement for privacy services to federal employees and contractors affected by government data breaches.
What it actually does
This bill amends existing law to extend identity protection coverage for individuals affected by federal agency data breaches to be effective for the remainder of their lives and increases the minimum identity theft insurance to $5,000,000. Additionally, it authorizes federal agencies to use their existing 'salaries and expenses' appropriations to reimburse employees and contractors for up to 100% of the costs of privacy-enhancing services.
Proponents argue
Supporters would argue this bill provides essential, long-term security and financial relief to individuals whose personal information was compromised due to federal agency negligence, ensuring they are protected for the remainder of their lives and can proactively safeguard their privacy. It addresses a critical vulnerability exposed by past breaches and empowers individuals to take control of their data security.
Opponents contend
Critics might contend that extending coverage indefinitely and increasing insurance to $5 million could create an open-ended, significant financial burden on taxpayers without necessarily preventing future breaches. They might also question the scope and cost-effectiveness of reimbursing for 'privacy-enhancing services' without clear guidelines or a cap on total agency spending.
The bill is very short and straightforward, allowing for a quick and comprehensive understanding of its provisions.
Section 2
Lifelong Identity Protection and Enhanced Insurance for Data Breach Victims
This provision changes existing law to make identity protection coverage for individuals whose personally identifiable information was compromised during federal agency data breaches effective for the remainder of their lives, rather than for a limited fiscal year period. It also mandates that this coverage include at least $5,000,000 in identity theft insurance, significantly increasing the previous standard.
Supporters argue
Supporters argue that this provision provides necessary and overdue protection for individuals who suffered harm due to government failures to protect their data. Lifelong coverage acknowledges the permanent risk of identity theft once data is compromised, and the increased insurance reflects the potential financial devastation.
Critics contend
Opponents might argue that while protection is warranted, lifelong coverage and a $5 million insurance policy could be excessively costly and create an open-ended liability for taxpayers, potentially exceeding the actual risk or typical damages from identity theft.
Tradeoffs
This provision balances the need to protect individuals from the long-term consequences of data breaches against the potential for significant, ongoing federal expenditures.
Section 3
Agency Reimbursement for Employee/Contractor Privacy-Enhancing Services
This section authorizes federal agencies to use their existing 'salaries and expenses' appropriations to reimburse their employees, or contractors to reimburse their employees supporting the agency, for up to 100% of the costs of 'privacy-enhancing services.' These services are broadly defined as any software, hardware, or technical means that mitigates privacy risks by eliminating, reducing, or suppressing personal information.