US HB7241

Prohibits the Secretary of Veterans Affairs from entering into contracts that permit contractors to sell or disclose sensitive personal information for payment to other entities

Requires within one year that all VA contracts handling covered information include clauses prohibiting monetization, sale, or misuse of data by contractors, subcontractors, or affiliates

Mandates the VA issue guidance to employees and contractors on identifying monetization, sale, or misuse of protected veteran information

Requires a report to the House and Senate Veterans' Affairs Committees within one year containing the contract clause language, guidance document, and summary of compliance actions

Covered information includes protected health information, personally identifiable information (including anonymized data), and information protected under the Privacy Act, HIPAA regulations, and other applicable laws