QuorumCivic. Hidden in plain sight Get the app
Bill intelligence

Congress tightens Treasury data access, mandates breach reporting

H.R. 1101 — Taxpayer Data Protection Act · Filed by Haley Stevens (D-MI) · 205 cosponsors · Introduced Feb 6, 2025 · Referred to committee

75%
Transparency
Typical bill: 85%
15/100
Hidden-provision risk
Typical bill: 15/100
Data Security and Access Control

Your members of Congress

Enter a ZIP to see where your representative and both senators stood on this bill.

Looked up on this device — your ZIP is never stored on our servers.

What it does

This bill restricts who can access the Treasury Department's payment systems and taxpayer financial data. Only Treasury employees with at least one year of service and a satisfactory performance rating, or cleared contractors, may access these systems—and they must complete ethics training and sign ethics agreements. Anyone else accessing the system is treated as a federal employee subject to conflict-of-interest laws, and the Treasury Inspector General must report all unauthorized access to Congress within 30 days.

Why we flagged it

The bill's core function is to establish eligibility and compliance requirements for accessing Treasury payment systems and taxpayer data, with mandatory reporting of breaches. It is a cybersecurity and data-protection measure, not a tax or appropriations bill.

What the text implies

  • The one-year tenure requirement may inadvertently slow emergency response to system failures or crises, as newly hired Treasury staff cannot access systems even in urgent situations.
  • The requirement that contractors hold security clearances and meet the same standards as civil servants may increase costs for Treasury to hire and retain qualified contractors.
  • Treating non-government individuals who access the system as federal employees for conflict-of-interest purposes (18 USC 208) may create unintended liability for private-sector consultants or auditors.
  • The 30-day reporting requirement for all unauthorized access may create a large administrative burden and flood Congress with routine breach reports, potentially diluting attention to serious incidents.

Who it affects

Ordinary citizens benefit from stronger safeguards against unauthorized access to their tax and payment data, reduced risk of fraud or misuse of Treasury systems, and mandatory reporting of breaches. The bill creates enforceable barriers to protect sensitive financial information and government payment integrity.

Named in the bill

Department of the Treasury, Bureau of the Fiscal Service, Treasury Inspector General, Office of Government Ethics, Congress, National Security Act of 1947, 18 USC 208 (conflict of interest), 31 USC 321

Where it stands

205 cosponsors: 205 Democrats.

  • Feb 6, 2025 — Introduced · Congress.gov: “Introduced in House”
  • Feb 6, 2025 — Referred to House Committee on Ways and Means and House Committee on Financial Services · Congress.gov: “Referred to the Committee on Financial Services, and in addition to the Committee on Ways and Means, for a…”

Dates and quoted wording are Congress.gov's action record; the timeline shows status changes, not every procedural step.

How this was measured

Analysis — Quorum's AI read the full bill text on Jun 8, 2026; transparency and hidden-provision scores are compared against the median of 16,222 analysed bills.

Status and sponsors — Congress.gov's bill record — actions, committee referrals and cosponsors — loaded nightly. The timeline shows status changes, not every procedural action.

As of — page rendered 2026-10-20.

“Congress tightens Treasury data access, mandates breach reporting” QuorumCivic. https://share.quorumcivic.app/bill/119/hr1101 Report an error

Correlative observation from public records — not evidence of coordination or wrongdoing, and not financial advice.
This page is the record as of today. The app tells you when it changes.
Quorum analysis of the full bill text · 119th Congress · public record

The week in bills

One email, Sunday: what Congress passed, what it changed, and who paid.

One link arrives to confirm the address. It is used for this email and nothing else, and every issue carries an unsubscribe link.