REGULATORY WATCH BRIEF Moderate 54 🧭 Regulatory Guidance published

Commerce announces new computer matching program under Privacy Act to prevent improper payments

The program expands inter‑agency data sharing for payment integrity, raising privacy and security considerations for personal records.

ImpactModerate 54
Type🧭 Regulatory Guidance
Statuspublished enacted, check the effective date
JurisdictionUS
Effective10 September 2029

What happened

The Department of Commerce issued a Federal Register notice establishing a new matching program that will compare its federal benefit program records with the Treasury's Do Not Pay Working System. The program is authorized under the Privacy Act of 1974 and the Payment Integrity Information Act of 2019. Its purpose is to identify and prevent improper payments and support recovery activities.

Why it matters for trust and compliance

  • Its status is published. It is enacted but may not be in force yet. Check the effective date before planning around it.
  • The program expands inter‑agency data sharing for payment integrity, raising privacy and security considerations for personal records.
  • Takes effect September 10, 2029.

Who is affected

government controller processor Department of Commerce Treasury Bureau of the Fiscal Service

Recommended actions

  1. Check that privacy notices describe the practices this addresses.
  2. Revisit retention schedules and data minimisation for the data involved.
  3. Map the security requirements to existing controls and close gaps.

Regulations library

Every US state privacy law, on one map

24 states have a comprehensive privacy law in the library, alongside the EU, UK, US federal and global laws: 102 in all, each explained in plain words with its sources. Select a state to see what applies there.

  • In force
  • Coming into force
  • Sector laws
AK ME VT NH WA ID MT ND MN IL WI MI NY RI MA OR NV WY SD IA IN OH PA NJ CT CA UT CO NE MO KY WV VA MD DE AZ NM KS AR TN NC SC DC OK LA MS AL GA HI TX FL