Section 1 Short title
This Act may be cited as the “VA Call Center Multi-Factor Authentication Act”.
VA Call Center Multi-Factor Authentication Act
A BILL
To amend title 38, United States Code, to require call centers of the Department of Veterans Affairs to use multi-factor identification to verify the identity of callers in connection with high-impact veteran or beneficiary actions, and for other purposes.
Sec. 2 Multi-factor authentication required to verify the identity of callers to Veterans Affairs call centers in connection with high-impact veteran or beneficiary actions
Section 5722(b)(3) of title 38, United States Code, is amended by adding at the end the following: “Such controls shall include the use of multi-factor authentication by Department call centers in connection with high-impact veteran or beneficiary actions to verify the identity of the caller and confirm that the participation of the caller in connection with the action is in fact appropriate. As used in the preceding sentence, an action is high-impact if an impersonator could cause real, durable harm to the veteran or beneficiary, such as by diverting funds, manipulating access to accounts, or disclosing sensitive information.”.