--- kind: "section" citation: "42 U.S.C. § 19085" title: "42" title_heading: "The Public Health and Welfare" number: "19085" heading: "National secure data service" release: "119-102" date: "2026-07-12" url: "https://uscodex.org/usc/42/19085" units: - "Chapter 163 — Research and Development, Competition, and Innovation" - "Subchapter III — National Science Foundation for the Future" - "Part F — Research Infrastructure" --- # §19085. National secure data service - (a) **In general—** The [Director](/usc/42/18921.md?p=1), in consultation with the [Director](/usc/42/18921.md?p=1) of the Office of Management and Budget and the interagency committee established under [section 9413 of title 15](/usc/15/9413.md), shall establish a demonstration [project](/usc/42/13641.md?p=2) to develop, refine, and test models to inform the full implementation of the Commission on Evidence-Based Policymaking recommendation for a governmentwide data linkage and access infrastructure for statistical activities conducted for statistical purposes, as defined in chapter 35 of title 44. - (b) **Establishment—** Not later than one year after August 9, 2022, the [Director](/usc/42/18921.md?p=1) shall establish a National Secure Data Service demonstration [project](/usc/42/13641.md?p=2). The National Secure Data Service demonstration [project](/usc/42/13641.md?p=2) shall be— - (1) aligned with the principles, best [practices](/usc/42/17061.md?p=19), and priority actions recommended by the [Advisory Committee](/usc/42/17061.md?p=2) on Data for Evidence Building, to the extent feasible; and - (2) operated directly by or via a contract that is managed by the National [Center](/usc/42/18901.md?p=17) for Science and Engineering Statistics. - (c) **Data—** In carrying out this section, the [Director](/usc/42/18921.md?p=1) shall engage with Federal and [State agencies](/usc/42/300s–3.md?p=12) to collect, acquire, analyze, report, and disseminate statistical data in the United States and other nations to support governmentwide evidence-building activities consistent with the [Foundations](/usc/42/18901.md?p=11) for Evidence-Based Policymaking Act of 2018. - (d) **Voluntary participation—** Participation in the National Secure Data Service demonstration [project](/usc/42/13641.md?p=2) by Federal and [State agencies](/usc/42/300s–3.md?p=12) shall be voluntary. - (e) **Privacy and confidentiality protections—** If the [Director](/usc/42/18921.md?p=1) issues a management contract under [subsection (b)](#b), the [recipient](/usc/42/18901.md?p=24) shall be designated as an “agent” under subchapter III of [chapter 35](/usc/44/chch35.md) of title 44 with all requirements and obligations for protecting confidential information delineated in the Confidential Information Protection and Statistical Efficiency Act of 2018 and the Privacy Act of 1974. - (f) **Technology and privacy standards—** In carrying out this subsection, the [Director](/usc/42/18921.md?p=1) shall— - (1) consider application and use only of systems and technologies that incorporate protection measures to reasonably ensure confidential data and statistical products are protected in accordance with obligations under subchapter III of [chapter 35](/usc/44/chch35.md) of title 44, including systems and technologies that ensure— - (A) raw data and other sensitive inputs are not accessible to [recipients](/usc/42/18901.md?p=24) of statistical outputs from the National Secure Data Service demonstration [project](/usc/42/13641.md?p=2); - (B) no individual entity’s data or information is revealed by the National Secure Data Service demonstration [project](/usc/42/13641.md?p=2) platform to any other party in an identifiable form; - (C) no information about the data assets used in the National Secure Data Service demonstration [project](/usc/42/13641.md?p=2) is revealed to any other party, except as incorporated into the final statistical output; - (D) the National Secure Data Service demonstration [project](/usc/42/13641.md?p=2) permits only authorized analysts to perform statistical queries necessary to answer approved [project](/usc/42/13641.md?p=2) questions, and prohibits any other queries; and - (E) the National Secure Data Service demonstration [project](/usc/42/13641.md?p=2) conducts privacy risk assessments to minimize the privacy risks to individual entities whose data has been made available by a reporting entity, including those privacy risks that could result from data breaches of any system operated by the reporting entity, as well as for determining approved [project](/usc/42/13641.md?p=2) questions under [subparagraph (D)](#f-1-D) to minimize the privacy risks to individuals affected by uses of the statistical output; and - (2) the National Secure Data Service demonstration [project](/usc/42/13641.md?p=2) shall implement reasonable measures commensurate with the risks to individuals’ privacy to achieve the outcomes under subparagraphs [(A)](#f-1-A) through [(E)](#f-1-E) of paragraph (1), which may include the appropriate application of privacy-enhancing technologies and appropriate measures to minimize or prevent reidentification risks consistent with any applicable guidance or regulations issued under subchapter III of chapter 35 of title 44. - (g) **Transparency—** The National Secure Data Service established under [subsection (b)](#b) shall maintain a public website with up-to-date information on supported [projects](/usc/42/13641.md?p=2). - (h) **Report—** Not later than 2 years after August 9, 2022, the National Secure Data Service demonstration [project](/usc/42/13641.md?p=2) established under [subsection (b)](#b) shall submit a report to Congress that includes— - (1) a description of policies for protecting data, consistent with applicable Federal law; - (2) a comprehensive description of all completed or active data linkage activities and [projects](/usc/42/13641.md?p=2); - (3) an assessment of the effectiveness of the demonstration [project](/usc/42/13641.md?p=2) for mitigating risks and removing barriers to a sustained implementation of the National Secure Data Service as recommended by the Commission on Evidence-Based Policymaking; and - (4) if deemed effective by the [Director](/usc/42/18921.md?p=1), a plan for scaling up the demonstration [project](/usc/42/13641.md?p=2) to facilitate data access for evidence building while ensuring transparency and privacy. - (i) **Authorization of appropriations—** There are authorized to be appropriated to the [Director](/usc/42/18921.md?p=1) to carry out this subsection $9,000,000 for each of fiscal years 2023 through 2027. ## Source credit (Pub. L. 117–167, div. B, title III, § 10375, Aug. 9, 2022, 136 Stat. 1574.) ## Notes ### Editorial Notes ### References in Text The Foundations for Evidence-Based Policymaking Act of 2018, referred to in subsec. (c), is Pub. L. 115–435, Jan. 14, 2019, 132 Stat. 5529. For complete classification of this Act to the Code, see Short Title of 2019 Amendment note set out under section 101 of Title 5, Government Organization and Employees, and Tables. The Confidential Information Protection and Statistical Efficiency Act of 2018, referred to in subsec. (e), is title III of Pub. L. 115–435, Jan. 14, 2019, 132 Stat. 5544. For complete classification of this Act to the Code, see Short Title of 2019 Amendment note set out under section 101 of Title 44, Public Printing and Documents, and Tables. The Privacy Act of 1974, referred to in subsec. (e), is Pub. L. 93–579, Dec. 31, 1974, 88 Stat. 1896, which enacted section 552a of Title 5, Government Organization and Employees, and provisions set out as notes under section 552a of Title 5. For complete classification of this Act to the Code, see Short Title of 1974 Amendment note set out under section 552a of Title 5 and Tables.