S. 5217 — RECOVER PII Act

This section makes permanent the requirement that federal agencies provide identity protection coverage to individuals affected by data breaches. It extends such coverage for the lifetime of each affected individual (from a fixed period ending in 2026) and requires inclusion of at least $5,000,000 in identity theft insurance.

This section authorizes agencies across the executive, legislative, and judicial branches to use salaries and expenses appropriations to reimburse employees and contractors for up to 100 percent of costs for privacy-enhancing services beginning in FY2026. Such services include software, hardware, or technical processes that eliminate, reduce, or suppress personal information to mitigate privacy risks. Reimbursements require submission of documentation specified by the agency.