Federal contractors face permanent ban for data breaches
S. 5684 — No Cash for Incompetent and Malicious Contractors Act · Filed by Rick Scott (R-FL) · Introduced Oct 15, 2026 · Referred to committee
Your members of Congress
Enter a ZIP to see where your representative and both senators stood on this bill.
Looked up on this device — your ZIP is never stored on our servers.
What it does
This bill requires federal agencies to permanently bar (debar) contractors from receiving federal contracts if they or their employees are convicted or lose a civil judgment for improperly disclosing clients' sensitive personal information—including Social Security numbers, tax returns, health records, or trade secrets. The debarment lasts 1–5 years depending on severity; contractors can also be temporarily suspended while criminal charges are pending.
Why we flagged it
The bill's operative mechanism is a mandatory debarment sanction for contractors who improperly disclose personally identifiable information. It is a straightforward accountability and enforcement tool, not a subsidy, carve-out, or deregulation.
What the text implies
- Debarment may disproportionately affect smaller contractors with weaker compliance infrastructure, potentially consolidating federal contracting among larger firms with better data-security resources.
- The bill does not define 'improperly discloses'—reliance on existing criminal/civil law means outcomes depend on how courts interpret data-breach liability, creating uncertainty for contractors.
- Suspension pending investigation (subsection b) can begin before conviction, potentially blocking contract work for contractors later acquitted or found not liable.
Section numbers refer to the bill text the analysis read — linked under Primary records below.
Who it affects
Citizens benefit from stronger accountability for contractors handling sensitive personal data; debarment creates a financial penalty for data breaches and incentivizes better security practices. The rule protects ordinary people whose information is entrusted to federal contractors.
Named in the bill
Federal contractors, Executive agencies, Federal Acquisition Regulation (FAR), Title 41 United States Code (Federal Acquisition Law), Title 26 (Internal Revenue Code), Title 45 Code of Federal Regulations (Health Information), Title 18 United States Code (Criminal Law)
Where it stands
- Oct 15, 2026 — Introduced · Congress.gov: “Introduced in Senate”
- Oct 15, 2026 — Referred to committee · Congress.gov: “Under authority of the order of the Senate of September 30, 2026, ordered read twice and referred to the…”
Dates and quoted wording are Congress.gov's action record; the timeline shows status changes, not every procedural step.
How this was measured
Analysis — Quorum's AI read the bill text published by Congress.gov (2,596 characters) on Oct 21, 2026. Section numbers in the findings refer to that text, linked below; transparency and hidden-provision scores are compared against the median of 16,388 analysed bills.
Status and sponsors — Congress.gov's bill record — actions, committee referrals and cosponsors — loaded nightly. The timeline shows status changes, not every procedural action.
As of — page rendered 2026-10-21.
“Federal contractors face permanent ban for data breaches” QuorumCivic. https://share.quorumcivic.app/bill/119/s5684 Report an error
The week in bills
One email, Sunday: what Congress passed, what it changed, and who paid.
One link arrives to confirm the address. It is used for this email and nothing else, and every issue carries an unsubscribe link.