Section 1 Short title
This Act may be cited as the “Protecting Americans’ Privacy Act of 2025”.
Protecting Americans’ Privacy Act of 2025
A BILL
To provide that unauthorized access to the central payment systems of the Bureau of the Fiscal Service is unlawful.
Sec. 2 Unauthorized access to the central payment systems of the Bureau of the Fiscal Service
Prohibitions—
In general— It shall be unlawful for an individual to knowingly access or exercise administrative control over any public money receipt or payment system of the Department of the Treasury (including any payment system of the Bureau of the Fiscal Service (or any successor thereof)) if the individual—
is not—
a Federal employee; or
a Federal contractor whose current continuous service in a position on an agency's contract, as of the date of such access, is for a period of at least 1 year;
is a Federal employee—
who is employed as the chief executive officer, chief financial officer, chief operating officer, or a position of similar stature at a covered entity;
who serves on the Board of Directors of a covered entity;
who has control over a covered entity; or
whose current continuous service in a position in the civil service (as that term is defined in section 2101 of title 5, United States Code), as of the date of such access, is for a period of less than 1 year; or
is a covered employee who—
has a conflict of interest as described in section 208 of title 18, United States Code, with respect to such central payment system, or
has not signed a written ethics agreement with either the covered employee's respective agency or the Office of Government Ethics.
Facilitation of access— It shall be unlawful for an individual to facilitate access to or the exercise of administrative control over any such public money receipt or payment system, or to knowingly permit such access or exercise of control, which such individual knows or should know is in violation of paragraph (1).
Enforcement by individuals—
In general— Any persons harmed by a violation of subsection (a) may file a civil action in any district court of the United States or State court of general jurisdiction to recover from the individual who engaged in the violation appropriate relief described in paragraph (2).
Relief— In an action under this subsection, appropriate relief includes—
preliminary and other equitable or declaratory relief, as appropriate;
damages as described in paragraph (3);
punitive damages, as appropriate; and
reasonable attorney’s fees and other reasonable litigation costs.
Damages— In an action under this subsection, a court may assess as damages an amount equal to the greater of—
the sum of the actual damages suffered by the plaintiff; or
$250,000 for each unauthorized access relating to the plaintiff.
Joint and several liability— Any individual who violates subsection (a)(1) and any individual who violates subsection (a)(2) shall be jointly and severally liable to the extent such violations relate to the same access.
Definitions— In this section:
Agency— The term agency—
has the meaning given the term “Executive agency” in section 105 of title 5, United States Code; and
includes each component of the Executive Office of the President, including each such component established under title 3, United States Code.
Control— The term control means, with respect to an entity—
ownership of, or the power to vote, more than 50 percent of the outstanding shares of any class of voting security of the entity;
control over the election of a majority of the directors of the entity (or of individuals exercising similar functions); or
the power to exercise a controlling influence over the management of the entity.
Covered employee— The term covered employee includes the following individuals:
Each individual who is—
a noncareer employee; and
described in any of paragraphs (3) through (8) of section 13103(f) of title 5, United States Code.
Each individual serving in a position with respect to which a determination has been made under section 7511(b)(2) of title 5, United States Code.
Each special Government employee, as defined in section 202(a) of title 18, United States Code.
Covered entity— The term covered entity means a corporation (and the subsidiaries it controls), company, association, firm, partnership, society, joint stock company, or any other organization or institution, including an organization described in section 501(c) of the Internal Revenue Code.
Federal contractor— The term Federal contractor means an individual, other than a Federal employee, working under a contract with an agency.
Federal employee— The term Federal employee means an individual employed by or holding office in an agency.
Noncareer employee— The term noncareer employee means an individual who is—
serving in a position to which the President appointed the individual (without regard to whether the advice and consent of the Senate was required with respect to that appointment), other than an individual who is—
a member of a uniformed service, as that term is defined in section 210(m) of the Social Security Act (42 U.S.C. 410(m)); or
a member of the Foreign Service serving under a career appointment, as described in section 301 of the Foreign Service Act of 1980 (22 U.S.C. 3941);
a noncareer appointee, as that term is defined in section 3132(a) of title 5, United States Code;
serving in a position in a Federal executive system (other than the Senior Executive Service established under subchapter II of chapter 31 of title 5, United States Code), if appointment to the position is not made through merit-based procedures; or
serving in a position with respect to which a determination has been made under section 7511(b)(2) of title 5, United States Code.
No inference— Nothing in this section shall be construed as creating any inference as to whether any act which occurred prior to the enactment of this Act was lawful or otherwise permitted.
Sec. 3 Confidentiality of returns and return information under Internal Revenue Code of 1986
In general— Section 6103 of the Internal Revenue Code of 1986 is amended by redesignating subsection (q) as subsection (r) and by inserting after subsection (p) the following new subsection:
“(q) Prohibition on disclosure to certain employees—Notwithstanding any other provision of this section, no return or return information shall be disclosed by means of access to any public money receipt or payment system of the Department of the Treasury (including any payment system of the Bureau of the Fiscal Service (or any successor thereof)) to any individual described in subparagraph (B) or (C) of section 2(a)(1) of the Protecting Americans’ Privacy Act of 2025.”
Civil damages for unauthorized inspection or disclosure—
In general— Subsection (a) of section 7431 of the Internal Revenue Code of 1986 is amended by adding at the end the following new paragraph:
“(3) Inspection or disclosure by certain employees—If any individual described in subparagraph (B) or (C) of section 2(a)(1) of the Protecting Americans’ Privacy Act of 2025 knowingly, or by reason of negligence, inspects or discloses any return or return information with respect to a taxpayer in violation of section 6103(q), such taxpayer may bring a civil action for damages against such person in a district court of the United States. In any action brought under this paragraph, subsection (c)(1)(A) shall be applied by substituting “$250,000” for “$1,000”.”
Conforming amendment— Paragraph (1) of section 7431(a) of such Code is amended by striking “If any” in paragraph (1) and inserting “Except as provided in paragraph (3), if any”.
No inference— Nothing in the amendments made by this section shall be construed as creating any inference as to whether any disclosure or inspection prior to the enactment of this Act was lawful or permitted by section 6103 of the Internal Revenue Code of 1986.