Empowering States to Serve Veterans Act
- Sponsor
- Sen. Cortez Masto, Catherine [D-NV]
- Committees
- Veterans' Affairs Committee (primary)
- Last action
- Aug 6, 2026
Bottom line
The bill aims to improve veteran access to state-level benefits and services by enabling data sharing, while implementing robust privacy protections and an opt-out mechanism.
What it actually does
This bill mandates the Department of Veterans Affairs (VA) to share veterans' contact information quarterly with State veterans agencies to facilitate outreach and statistical analysis. It includes strict privacy limitations, prohibiting the sharing of sensitive data like health, financial, or Social Security information. Crucially, the bill establishes a clear opt-out process for veterans and requires State agencies to adhere to federal data protection and cybersecurity standards, with VA oversight to ensure compliance.
Proponents argue
Proponents argue that many veterans are unaware of the full range of benefits and services available to them at the state level. By enabling the VA to share contact information with State veterans agencies, this bill will significantly improve outreach efforts, ensuring more veterans receive the support they have earned. The built-in privacy safeguards, including an opt-out option and strict data security requirements for states, address potential concerns, making it a responsible approach to enhance veteran welfare.
Opponents contend
Opponents, particularly privacy advocates, might contend that any sharing of personal contact information, even with opt-out provisions, inherently increases the risk of data breaches or misuse. They may argue that while the intent is good, the potential for unintended consequences, especially given varying cybersecurity capacities across numerous state agencies, outweighs the benefits of centralized data sharing. Concerns could also be raised about the administrative burden on states without explicit federal funding.
The bill is concise and clearly written, making it accessible for a quick read and easy comprehension by any interested party.
Section 2(a)
Mandatory Contact Information Sharing
This provision requires the Department of Veterans Affairs (VA) to share contact information for veterans with the respective State veterans agency where the veteran resides. This sharing must occur at least quarterly and is specifically for statistical purposes and conducting outreach to veterans. The intent is to help state agencies connect veterans with state-specific benefits and services they might not be aware of, thereby improving overall access to support.
Supporters argue
Supporters argue that this direct sharing mechanism is essential to bridge the information gap between veterans and state-level services. It ensures that state agencies have the necessary tools to proactively reach out to veterans who may be underserved or unaware of available support, ultimately improving veteran well-being.
Critics contend
Some privacy advocates might argue that even with limitations, mandating data sharing increases the surface area for potential data breaches and could lead to unwanted solicitation, despite the stated outreach purpose. They may prefer an opt-in system rather than an opt-out.
Tradeoffs
The provision balances the desire for comprehensive veteran outreach with concerns about individual privacy and data security. It aims to maximize the former while mitigating risks to the latter through subsequent provisions.
Section 2(a)(2)
Privacy Limitations on Shared Information
This crucial subsection explicitly defines what contact information *cannot* be shared by the VA with State veterans agencies. It prohibits the transfer of protected health information, Social Security numbers, dates of birth, financial details, disability ratings, appeal or claims information, or any data the Secretary designates as sensitive or restricted under Federal law. These limitations are designed to safeguard veterans' most sensitive personal and medical data, ensuring that only basic contact information is used for outreach.
Section 2(b)
Veteran Notice and Opt-Out Process
This section mandates that the VA provide clear notice to every veteran, both in paper and electronic formats, informing them that their contact information may be shared with their State veterans agency for outreach and statistical purposes, and that they have the right to opt out at any time. The notice must be given 45 days before the initial transfer for existing veterans and at the time of military service transition for new veterans. The VA must also establish an accessible opt-out process, including online and toll-free telephone options. If a veteran opts out, the VA must cease sharing their data, and any State agency already possessing that data must immediately destroy it.
Section 2(c)
State Agency Privacy and Security Requirements
This section imposes strict requirements on State veterans agencies that receive veteran contact information. They must use the data *solely* for statistical and authorized outreach purposes, and are explicitly prohibited from selling, transferring, disclosing the information to any third party, or publishing data derived from it. Furthermore, State agencies must implement data protection and cybersecurity measures consistent with Federal standards for personally identifiable information. The VA is tasked with requiring proof of compliance from states before sharing data, refusing to share with non-compliant agencies, and mandating ongoing certifications or audits to ensure continued adherence to these security and privacy standards.
Subsections (a) through (d), which contain the core requirements for data sharing, privacy limitations, notice, opt-out, and state agency security, will not take effect until one year after the date of the Act's enactment.
Section 2(f)
Why it matters:This is standard legislative practice for providing implementing agencies with sufficient time to develop regulations, establish systems, and prepare for new requirements. It's not necessarily evasive but is a critical detail for understanding the timeline.
Case for: The one-year delay is crucial for the VA and State veterans agencies to develop the necessary technical infrastructure, establish robust privacy and security protocols, implement the notice and opt-out systems, and train personnel. This lead time ensures a smoother and more secure implementation, reducing the risk of errors or privacy breaches.
Case against: While a delay is practical, some might argue that veterans are currently missing out on potential outreach, and a full year could be seen as an unnecessarily long wait for a program designed to address immediate needs. Expediting the process, perhaps with phased implementation, could be considered.
Estimated impact: Delays the full operationalization of veteran contact information sharing and associated outreach by one year from enactment.