S. 2533

119 S2533 IS: Pick Up After Your DOGE Act
 U.S. Senate
 2025-07-30
 text/xml
 EN
 Pursuant to Title 17 Section 105 of the United States Code, this file is not subject to copyright protection and is in the public domain.
 II  119th CONGRESS  1st Session  S. 2533  IN THE SENATE OF THE UNITED STATES   July 30, 2025   Mr. Whitehouse  (for himself,  Mr. Wyden , and  Ms. Warren ) introduced the following bill; which was read twice and referred to the  Committee on Homeland Security and Governmental Affairs    A BILL
To require performance and security audits of certain agency computer systems, and for other purposes.
1.
Short title
This Act may be cited as the   Pick Up After Your DOGE Act  .
2.
Definition
In this Act, the term  appropriate congressional committee  means any committee with jurisdiction over an agency that is the subject of an audit under this Act.
3.
United States DOGE service access to data
Not later than 30 days after the date of enactment of this Act, the Administrator of the United States DOGE Service shall submit to the appropriate congressional committees and the Comptroller General of the United States a full accounting of all Federal agencies where agency DOGE teams, as defined in Executive Order 14158 (90 Fed. Reg. 8441; relating to establishing and implementing the President's Department of Government Efficiency), or individuals acting on behalf of, or at the instruction of, the United States DOGE Service or agency DOGE teams, accessed Federal agency computer systems, networks, data, or information.
4.
Comptroller General studies
(a)
In general
Not later than 60 days after the date of enactment of this Act, the Comptroller General of the United States shall commence a comprehensive audit of Federal agency computer systems and networks accessed by the United States DOGE Service, the U.S. DOGE Service Temporary Organization, or any employees or volunteers affiliated with those agencies, or, if applicable, associated agency DOGE teams, to identify security vulnerabilities or bugs in software installed, created, or modified by the United States DOGE Service, the U.S. DOGE Service Temporary Organization, or any employees or volunteers affiliated with those agencies, or, if applicable, associated agency DOGE teams.
(b)
Priority review
In conducting the audits described in subsection (a), the Comptroller General shall give priority to reviews of the systems, networks, and databases of the Social Security Administration, the Department of Health and Human Services and the Centers for Medicare & Medicaid Services, and the Department of the Treasury and the Internal Revenue Service.
(c)
Initial Audit Results
Not later than 1 year after the date of enactment of this Act, the Comptroller General shall submit to the appropriate congressional committees and agency heads a report or reports describing the results of the comprehensive systems audits performed under subsection (a) for the Social Security Administration, the Department of Health and Human Services and the Centers for Medicare & Medicaid Services, and the Department of the Treasury and the Internal Revenue Service, including recommendations for legislation and administrative action as the Comptroller General determines appropriate.
(d)
Final audit results
Not later than 2 years after the date of enactment of this Act, the Comptroller General shall submit to the appropriate congressional committees and agency heads a report or reports describing the results of the comprehensive systems audits performed under subsection (a) for other Federal agencies selected for review by the Comptroller General, in consultation with the appropriate congressional committees, including recommendations for legislation and administrative actions as the Comptroller General determines appropriate.
(e)
Agency action
Not later than 90 days after receipt of an audit report by an agency head under subsections (c) or (d), the agency head shall—
(1)
fix any vulnerabilities or bugs identified in the report; and
(2)
submit to the appropriate committee of jurisdiction a report on the status of those vulnerabilities or bugs.