US HB7280

Prohibits the Secretary of Veterans Affairs from entering into contracts that allow contractors to sell or disclose for consideration sensitive personal information maintained by the VA

Requires within one year that all covered VA contracts include or be modified to include clauses prohibiting contractors, subcontractors, and affiliates from monetizing, selling, or misusing covered veteran information

Mandates the VA issue guidance to employees and contractors on identifying monetization, sale, or misuse of covered information to ensure compliance

Requires the Secretary to submit a report to the House and Senate Veterans' Affairs Committees within one year, including the contract clause language, guidance issued, and summary of compliance actions

Defines "covered information" to include protected health information, personally identifiable information (including anonymized data), and information protected under the Privacy Act, HIPAA regulations, and other applicable laws