Statements On Introduced Bills And Joint Resolutions
Mr. President, every American has the justifiable expectation that the Federal Government will protect their private personal information--information that they are required to provide to a Federal agencies. It is a basic and fundamental…
Mr. President, every American has the justifiable expectation that the Federal Government will protect their private personal information--information that they are required to provide to a Federal agencies. It is a basic and fundamental responsibility of government to make sure that this sensitive data is handled appropriately, accessed only by authorized personal, and used only for intended purposes.
Earlier this week, the Veterans Administration, VA, announced that computer disks containing as many as 26.5 million veterans' personal information were stolen from an employee who had taken the information home. I, along with many of my colleagues, am outraged at this enormous lapse in security. The Veterans Administration must make sure that veterans are not harmed because of the agency's failure to protect sensitive personal data.
This information includes veterans' social security numbers and dates of birth, the underpinnings of almost all of our financial information. In the wrong hands, this information can be used to steal a person's identity causing substantial harm. All of us have constituents who have been victims of identity theft. When a person's identity is stolen, it can have devastating financial consequences for that person and that family. Even if the financial harm is minimal, it often takes years to clear your name. For our nation's veterans, many of whom are older and disabled, identity theft poses even greater problems.
I understand that the Veterans Administration has launched an internal investigation, but Congress must also conduct a thorough investigation into how this security breach occurred. I want to know why the Veterans Administration waited almost 3 weeks to inform our nation's veterans and Congress of this breach. In my opinion, it is inexcusable that veterans were not notified immediately that their personal information had been stolen and were not given any guidance as to the steps they should take to protect themselves from identity theft. I understand the Veterans Administration Inspector General has cited the agency for poor security policies and procedures. Congress must also begin a comprehensive review of the agency's security protocols and policies and force the agency to adopt stricter security measures to make sure that the personal data our veterans are required to provide the agency is not ever again at risk.
It is for this reason that I am introducing the Veterans' Privacy Protection Act today. Although all Federal agencies need comprehensive data privacy policies, this is a targeted bill to address the security breach at the Veterans Administration on an urgent basis.
Congress has required the Federal Trade Commission to address identity theft and its consequences. The agency has taken an aggressive approach in combating this devastating crime. My bill would require the Federal Trade Commission to develop a hotline explicitly for veterans to provide the information, counseling, and help necessary to allow a veteran to protect himself from the loss of personal data.
At this point, our legislative response must cover all 26.5 million veterans that the Veterans Administration believes may have had their personal information compromised. If further investigations conclusively prove that fewer veterans are at-risk, my bill would target services and support to the affected individuals. To help veterans, my bill would make it easier for them to request a long-term credit alert for their records so credit agencies are aware that their personal information could be being used by others. It is my understanding that a security freeze on an individual's record can have a modest cost, and my bill would have the Veterans Administration cover that cost.
Finally, my bill requires the General Accountability Office to evaluate the Veterans Administration response to this incident and to analyze the agency's security protocols. I believe that an independent investigation could generate a number of recommendations to improve the security of personal information not just in the Veterans Administration but in all Federal agencies.
It is my great hope that a thorough investigation will find the criminals responsible for the theft and determine that they were only after the computer and not the millions of valuable private records of our veterans. If in fact these thieves were after our veterans' data, we will have a major catastrophe on our hands, inexcusably adding more hardship to the lives of those who have so ably served their country.
Mr. President, today the Veterans Administration has failed our Nation's veterans. It is inconceivable to me how any Federal agency could have let this happen. We all have heard the stories during the past year regarding massive breaches of private and confidential data by private entities. The Federal Government acted quickly to respond to these breaches and now it must act just as quickly if not more so to address its own failings. My bill is a critical step in providing the necessary assistance that millions of veterans may require, and I urge my colleagues to act on it with the urgency this situation demands.
I ask unanimous constent that text of the bill be printed in the Record.