The bill
Protecting DOD Data Act of 2025
S. 3161, 119th Congress — read as touching Cybersecurity.
Sponsored by
Sen. Slotkin, Elissa [D-MI]
ID: S001208
Follow the money
The bill
S. 3161, 119th Congress — read as touching Cybersecurity.
The sponsor
Every bill has someone who introduced it. That name is where the paper trail starts.
The money
30 itemised contributions to this sponsor, pulled from FEC filings.
The alignment
This bill's text tracks the "Department of Defense" section, p. 161-163 of the Mandate for Leadership.
Track this bill's progress through the legislative process
Latest Action
Invalid Date
📍 Current Status
Next: The bill will be reviewed by relevant committees who will debate, amend, and vote on it.
1. Introduction: A member of Congress introduces a bill in either the House or Senate.
2. Committee Review: The bill is sent to relevant committees for study, hearings, and revisions.
3. Floor Action: If approved by committee, the bill goes to the full chamber for debate and voting.
4. Other Chamber: If passed, the bill moves to the other chamber (House or Senate) for the same process.
5. Conference: If both chambers pass different versions, a conference committee reconciles the differences.
6. Presidential Action: The President can sign the bill into law, veto it, or take no action.
7. Became Law: If signed (or if Congress overrides a veto), the bill becomes law!
(sigh) Fine, let's dissect this latest exercise in legislative theater.
**Main Purpose & Objectives**
The Protecting DOD Data Act of 2025 is a bill that claims to enhance the protection of data affecting operational security of Department of Defense personnel. (rolls eyes) How original. The main purpose is to create the illusion of improving national security while actually doing very little to address the real issues.
**Key Provisions & Changes to Existing Law**
The bill requires the Secretary of Defense to:
1. Identify and prioritize personal data related to operational security. 2. Review and issue new guidance on protecting such data by June 2026. 3. Limit storage of sensitive data on non-Department servers or cloud services, with some exceptions (because who needs strict rules, right?). 4. Notify Congress of changes to Departmental issuances and certain events related to data security.
These provisions are just a rehashing of existing regulations with some minor tweaks. It's like putting a Band-Aid on a bullet wound.
**Affected Parties & Stakeholders**
The usual suspects:
1. Department of Defense personnel (the ones who will supposedly benefit from this bill). 2. Contractors and subcontractors (who will likely find ways to exploit the loopholes in this legislation). 3. Congress (which gets to pretend it's doing something about national security).
**Potential Impact & Implications**
This bill is a classic case of "security theater." It creates the illusion of improved security while doing little to address the root causes of data breaches and cybersecurity threats.
The real impact will be:
1. More bureaucratic red tape for DoD personnel. 2. Increased opportunities for contractors to profit from "enhanced" security measures. 3. A false sense of security among lawmakers and the public, which will only lead to complacency and more vulnerabilities in the long run.
In short, this bill is a placebo for national security concerns. It's a waste of time and resources that could be better spent on actual solutions rather than feel-good legislation. (shrugs) But hey, at least it makes for good PR.
Sen. Slotkin, Elissa [D-MI]
Congress 119 • 2024 Election Cycle
No PAC contributions found
No committee contributions found
Hub layout: Politicians in center, donors arranged by type in rings around them.
Showing 60 nodes and 30 connections (84 secondary connections hidden)
Total contributions: $127,700
Showing top 20 donors by contribution amount
Which industries are materially affected by specific provisions in this bill. 2 helped, 1 harmed.
Section 2(f) requires the Secretary of Defense to develop standards, training, reporting, and security debriefing requirements for system owners handling personal data affecting operational security, which will increase demand for cybersecurity services and training.
Section 2(c)(1) allows storage of personal data on non-Department servers or cloud services pursuant to a contract with a Department contractor or subcontractor, creating opportunities for defense contractors to provide compliant data storage solutions.
Section 2(c)(1) limits storage of Department personal data on non-Department servers or cloud services unless under a contract or with data subject permission, which could restrict use of commercial cloud providers (e.g., AWS, Azure, Google Cloud) for DoD data.
For each industry this bill affects, here's what the sponsor (Sen. Slotkin, Elissa [D-MI])received from donors associated with that industry during the 2022–present cycles. Donations are not proof of intent — they are a record of who funds the people writing the law.
This bill shows semantic similarity to the following sections of the Project 2025 policy document.AI-enhanced analysis provides detailed alignment ratings.
AI Analysis:
"The bill's focus on safeguarding DOD personnel data through enhanced guidance, storage restrictions, oversight, and congressional notification aligns closely with Project 2025's DoD emphasis on accountability, intelligence community oversight, and protecting national security against great‑power competition threats."
— 129 — Department of Defense 20. Staff Study, IC21: Intelligence Community in the 21st Century, Permanent Select Committee on Intelligence, U.S. House of Representatives, 104th Congress, 1996, p. 71, https://apps.dtic.mil/sti/pdfs/ADA315088.pdf (accessed February 15, 2023). 21. Ronald O’Rourke, “Great Power Competition: Implications for Defense—Issues for Congress,” Congressional Research Service Report for Members and Committees of Congress No. R43838, updated November 8, 2022, https://crsreports.congress.gov/product/pdf/R/R43838/93 (accessed February 15, 2023). 22. U.S. Government Accountability Office, Defense Intelligence and Security: DOD Needs to Establish Oversight Expectations and to Develop Tools That Enhance Accountability, GAO-21-295, May 2021, https://www.gao.gov/ assets/gao-21-295.pdf (accessed February 15, 2023). 23. The U.S. military has a long history of providing support to civil authorities, particularly in response to disasters but for other purposes as well. The Defense Department currently defines defense support of civil authorities (DSCA) as “Support provided by U.S. Federal military forces, DoD civilians, DoD contract personnel, DoD Component assets, and National Guard forces (when the Secretary of Defense, in coordination with the Governors of the affected States, elects and requests to use those forces in Title 32, U.S.C., status) in response to requests for assistance from civil authorities for domestic emergencies, law enforcement support, and other domestic activities, or from qualifying entities for special events. Also known as civil support.” U.S. Department of Defense, Directive No. 3025.18, “Defense Support of Civil Authorities (DSCA),” December 29, 2010, p. 16, https://www.dco.uscg.mil/Portals/9/CG-5R/nsarc/DoDD%203025.18%20Defense%20Support%20 of%20Civil%20Authorities.pdf (accessed February 15, 2023). 24. U.S. Army, “Who We Are: The Army’s Vision and Strategy,” https://www.army.mil/about/ (accessed February 17, 2023). 25. “[T]he Army’s internal assessment must be balanced against its own statements that unit training is focused on company-level operations [reflective of counterintelligence requirements] rather than battalion or brigade operations [much less division or corps to meet large-scale ground combat operations against a peer competitor such as Russia or China]. Consequently, how these ‘ready’ brigade combat teams would perform in combat operations is an open question.” “Executive Summary” in 2023 Index of U.S. Military Strength, ed. Dakota L. Wood (Washington: The Heritage Foundation, 2023), p. 16, http://thf_media.s3.amazonaws. com/2022/Military_Index/2023_IndexOfUSMilitaryStrength.pdf (accessed February 15, 2023). 26. For background on the USN’s fleet size, see Brent D. Sadler, “Rebuilding America’s Military: The United States Navy,” Heritage Foundation Special Report No. 242, February 18, 2021, https://www.heritage.org/sites/default/ files/2021-02/SR242.pdf, and Ronald O’Rourke, “Navy Force Structure and Shipbuilding Plans: Background and Issues for Congress,” Congressional Research Service Report for Members and Committees of Congress No. RL32665, December 21, 2022, https://crsreports.congress.gov/product/pdf/RL/RL32665 (accessed February 15, 2023). 27. The Joint Capabilities Integration and Development System (JCIDS) is the process by which the services develop and the Joint Staff approves the requirements for major defense acquisitions. See Defense Acquisition University, “Joint Capabilities Integration and Development System (JCIDA),” https://www.dau. edu/acquipedia/pages/articledetails.aspx#!371 (accessed February 15, 2023). 28. The board would seek to balance a mix of active military and civilians with expertise in and responsibility for major acquisitions and former military and civilians with experience in strategy and acquisitions. The proposed composition would include the Vice Chief of Naval Operations as Chairman, with three-star level membership from the Joint Staff, the Navy and Defense Acquisition Executives, and the Naval Sea Systems Command. In addition, there would be four-star retired naval officers/Navy civil servants as members, one each named by the Chairmen of the House and Senate Armed Services Committees, the Secretary of the Navy, and the Secretary of Defense. Finally, there would be a member appointed by the Secretary of the Navy who had previous senior experience in the defense industry. 29. See James Mattis, Secretary of Defense, Summary of the 2018 National Defense Strategy of the United States of America: Sharpening the American Military’s Competitive Edge, U.S. Department of Defense, https:// dod.defense.gov/Portals/1/Documents/pubs/2018-National-Defense-Strategy-Summary.pdf (accessed February 17, 2023), and U.S. Department of Defense, 2022 National Defense Strategy of the United States of America Including the 2022 Nuclear Posture Review and the 2022 Missile Defense Review, https://oldcc.gov/ resource/2022-national-defense-strategy (accessed February 17, 2023). — 130 — Mandate for Leadership: The Conservative Promise 30. U.S. Air Force, “The Air Force We Need: 386 Operational Squadrons,” September 17, 2018, https://www. af.mil/News/Article-Display/Article/1635070/the-air-force-we-need-386-operational-squadrons/ (accessed February 17, 2023). 31. General David H. Berger, Commandant of the Marine Corps, “Force Design 2030,” U.S. Department of the Navy, U.S. Marine Corps, March 2020, https://www.hqmc.marines.mil/Portals/142/Docs/CMC38%20Force%20 Design%202030%20Report%20Phase%20I%20and%20II.pdf?ver=2020-03-26-121328-460 (accessed February 17, 2023). 32. Department of the Navy, United States Marine Corps, “Force Design 2030,” March 2020, https://www.hqmc. marines.mil/Portals/142/Docs/CMC38%20Force%20Design%202030%20Report%20Phase%20I%20and%20II. pdf?ver=2020-03-26-121328-460 (accessed February 15, 2023). 33. Philip Athey, “Here Are Some of the Ways the Marines Are Trying to Improve Retention,” Marine Corps Times, November 15, 2021, https://www.marinecorpstimes.com/news/your-marine-corps/2021/11/15/treat-people- like-human-beings-here-are-some-of-the-ways-the-marines-are-trying-to-improve-retention/ (accessed February 15, 2023). 34. Megan Eckstein, “Marines, Navy Near Agreement on Light Amphibious Warship Features,” Defense News, October 5, 2022, https://www.defensenews.com/naval/2022/10/05/marines-navy-near-agreement-on-light- amphibious-warship-features/ (accessed February 16, 2023). 35. Megan Eckstein, “Marines Explain Vision for Fewer Traditional Amphibious Warships,” Defense News, June 21, 2021, https://www.defensenews.com/naval/2021/06/21/marines-explain-vision-for-fewer-traditional- amphibious-warships-supplemented-by-new-light-amphib/ (accessed February 16, 2023). 36. See Sidney J. Freedberg Jr., “Trump Eases Cyber Ops, but Safeguards Remain: Joint Staff,” Breaking Defense, September 17, 2018, https://breakingdefense.com/2018/09/trump-eases-cyber-ops-but-safeguards-remain- joint-staff/ (accessed March 7, 2023); Dustin Volz, “White House Confirms It Has Relaxed Rules on U.S. Use of Cyberweapons,” The Wall Street Journal, September 20, 2018, https://www.wsj.com/articles/white-house- confirms-it-has-relaxed-rules-on-u-s-use-of-cyber-weapons-1537476729 (accessed March 7, 2023); and Federation of American Scientists, Intelligence Resource Program, “National Security Presidential Memoranda [NSPMs]: Donald J. Trump Administration,” updated March 7, 2022, https://irp.fas.org/offdocs/nspm/index. html (accessed March 7, 2023). 37. U.S. Government Accountability Office, DOD Cybersecurity: Enhanced Attention Needed to Ensure Cyber Incidents Are Appropriately Reported and Shared, GAO-23-105084, November 2022, p. 36, https://www.gao. gov/assets/gao-23-105084.pdf (accessed February 17, 2023). 38. See Paul Evancoe, “Special Operations and the Interagency Team,” U.S.Military.com, https://usmilitary. com/special-operations-and-the-interagency-team/#:~:text=Seldom%20considered%20are%20those%20 other%20government%20agency%20%28OGA%29,response%20and%20consequence%20management%20 to%20name%20a%20few (accessed February 17, 2023). 39. U.S. Department of Defense, Nuclear Posture Review, February 2018, pp. 54–55, https://media.defense. gov/2018/Feb/02/2001872886/-1/-1/1/2018-NUCLEAR-POSTURE-REVIEW-FINAL-REPORT.PDF (accessed February 17, 2023). 40. U.S. Department of Defense, 2022 National Defense Strategy of the United States of America Including the 2022 Nuclear Posture Review and the 2022 Missile Defense Review, pp. 3 and 20. 41. Patty-Jane Geller, “Missile Defense,” in 2023 Index of U.S. Military Strength, ed. Dakota L. Wood (Washington: The Heritage Foundation, 2023), pp. 507–508, http://thf_media.s3.amazonaws.com/2022/Military_ Index/2023_IndexOfUSMilitaryStrength.pdf. 42. Matthew R. Costlow, “The Folly of Limiting U.S. Missile Defenses for Nuclear Arms Control,” National Institute for Public Policy Information Series, Issue No. 505, October 18, 2021, https://nipp.org/wp-content/ uploads/2021/10/IS-505.pdf (accessed February 16, 2023). 43. Forum for American Leadership, “Don’t Hand North Korea a Win in the Missile Defense Review,” January 4, 2022, https://forumforamericanleadership.org/dprk-missile-threat (accessed February 16, 2023). 44. Patty-Jane Geller, “It’s Time to Get Homeland Missile Defense Right,” Defense News, January 4, 2021, https:// www.defensenews.com/opinion/commentary/2021/01/04/its-time-to-get-homeland-missile-defense- right/#:~:text=Restoring%20our%20eroding%20edge%20when,advanced%20technology%20and%20 new%20capabilities.%E2%80%9D (accessed February 16, 2023).
AI Analysis:
"The bill focuses on protecting DOD personnel data from unauthorized access, which aligns with Project 2025's goal of increasing cyber resilience and protecting critical DOD networks, though it does not directly address offensive cyber operations, irregular warfare, or election-related restrictions outlined in the policy."
— 120 — Mandate for Leadership: The Conservative Promise 3. Expand defensive cyber-effects operations authorized by President Trump's classified National Security Presidential Memorandum 13, “United States Cyber Operations Policy.”36 4. End USCYBERCOM’s participation in federal efforts to “fortify” U.S. elections to eliminate the perception that DOD is engaging in partisan politics. l Increase USCYBERCOM’s effectiveness. 1. Accelerate the integration of cyber and electronic warfare (EW) doctrine and capabilities, abiding by the time-tested norms of combined-arms warfare. 2. Mandate that development teams will include both coders and soldiers, aircrew, and sailors with kinetic experience at the platoon level. 3. Break the paradigm of cyber authorities held at the strategic level. 4. Increase cyber resilience by, for example, protecting the Nuclear Command, Control, and Communications Network and the Air Force’s Cyber Resiliency Office for Weapons Systems (CROWS). 5. Expand coordination of joint operations with allies. 6. Implement the Government Accountability Office’s recommendation that the DOD Chief Information Officer, Commander of USCYBERCOM, and Commander of Joint Force Headquarters–DOD Information Network “align policy and system requirements to enable DOD to have enterprise-wide visibility of cyber incident reporting to support tactical, strategic, and military strategies for response.”37 l Rationalize strategy and doctrine. 1. Update the October 2022 National Security Strategy to define DOD roles and responsibilities beyond existing platitudes. 2. Apply traditional deterrence strategies and principles for using cyber/ EW in retaliation for foreign cyberattacks and/or EW actions against U.S. infrastructure and citizens. — 121 — Department of Defense SPECIAL OPERATIONS FORCES Even though America’s conventional war in Afghanistan was a failure, Special Operations Forces of the United States Special Operation Command (USSOCOM) executed an extremely effective counterterrorism campaign: There has not been another major attack on the homeland, global terrorist threats are reduced and managed, collaboration with international partners is effective, and units under USSOCOM are the most capable and experienced warfighters in two generations. There is a movement to reduce the scope and scale of USSOCOM’s mission in favor of other service priorities in great-power competition. This would be a mis- take because USSOCOM can be employed effectively in great-power competition. It makes sense to capitalize on USSOCOM’s experience and repurpose its mis- sion to include irregular warfare within the context of great-power competition, thereby providing a robust organization that is capable of achieving strategic effects that are critical both to our national defense and to the defense of our allies and partners around the globe. Irregular warfare should be used proactively to prevent state and nonstate actors from negatively affecting U.S. policies and objectives while simultaneously strengthening our regional partnerships. If we maintain irregular warfare’s traditional focus on nonstate actors, we limit ourselves to addressing only the symptoms (nonstate actors), not the problems themselves (China, Russia, North Korea, and Iran). Needed Reforms l Make irregular warfare a cornerstone of security strategy. The U.S. can project strength through unified action with our Interagency,38 allies, and partners by utilizing irregular warfare capabilities synchronized with elements of national power. Broadly redefining irregular warfare to address current state and nonstate actors is critical to countering irregular threats that range from the Chinese use of economic warfare to Russian disinformation and Islamist terrorism. A broad definition of irregular warfare in the National Security Strategy would allow for a whole-of- government approach, thereby providing resources and capabilities to counter threats and ultimately serve as credible deterrence at the strategic and tactical levels. 1. Define irregular warfare as “a means by which the United States uses all elements of national power to project influence abroad to counter state adversaries, defeat hostile nonstate actors, deter wider conflict, and maintain peace in great-power competition.” 2. Characterize the state and nonstate irregular threats facing the U.S. by region in the National Security Strategy.
AI Analysis:
"The bill focuses on protecting DOD personnel data from unauthorized access, which is a cybersecurity and privacy measure, while the Project 2025 policy emphasizes intelligence reform, accountability, and restoring trust in Defense Intelligence through structural and analytical changes. There is minimal thematic overlap, as the bill does not address intelligence integrity, independent analysis, or the DIE’s role in policy discussions."
— 107 — Department of Defense 5. Establish true alignment between DOD and DHS both to improve the defense of critical U.S. infrastructure and national border integrity and to develop vital information that enables defense against foreign targeted disruptions.23 l Restore accountability and public trust. In recent years, public trust in Defense Intelligence has been eroded by, for example, flawed assumptions leading up to our Afghanistan withdrawal, flawed Russia–Ukraine assessments, divergences in relations with key Gulf allies, and voids being filled by Russia and China around the world. For trust to be restored and sustained, officials must be held accountable. 1. Restore DIE critical thinking. Establish mechanisms to restore analytic integrity and return to true intelligence-driven operations. The next Administration should eliminate the conflict of interest in the current customer-based model (in which the customer is always right) by enforcing time-tested procedures that guarantee independent analysis, even if it means challenging policymakers’ assumptions. The Under Secretary of Defense for Intelligence and Security’s leadership role should be expanded to include providing analytic top-line views and improve DIE transparency by highlighting diverging views. 2. Elevate the DIE’s voice in national policy discussions, commensurate with the DIE’s 75 percent share of the IC budget. Present defense intelligence to senior policymakers, either independently to avoid all-source bias or in consensus products like the National Intelligence Estimates. l Eliminate peripheral intelligence obligations that do not advance military readiness. In 2019, following the catastrophic 2015 data breach at the U.S. Office of Personnel Management (OPM), the Defense Counterintelligence and Security Agency (DCSA) accepted transfer of the responsibility to conduct security clearance and suitability investigations for 95 percent of the U.S. government’s civilian workforce. This decision, which grew out of an intention to deconstruct OPM, was wrongheaded on many levels and made the federal bureaucracy dependent on a new overlay of DOD bureaucracy, in a sense instilling DOD control of civilian managers. This function should be returned to OPM except for military security clearance investigations.
Showing 3 of 5 policy matches
Policy matches are calculated using a hybrid approach: initial candidates are found using semantic similarity between bill summaries and Project 2025 policy text, then an AI model (Llama 3.1 70B) provides detailed alignment ratings and analysis. Ratings range from 1 (minimal alignment) to 5 (very strong alignment). This analysis does not imply direct causation or intent.
No Troops in Our Streets Act of 2025
119/s/3167
A bill to provide for interagency tabletop exercises to assess the impacts of Department of Defense decisions during crises and evaluate United States Government tools available to augment Department of Defense capabilities in competition, crisis, and conflict, and for other purposes.
119/s/3160
A bill to require a briefing on increasing procurement of strategic and critical materials from sources in the United States.
119/s/3164