Servicemember Payment Data Privacy and Security

Current understanding

HR8787, the Servicemember Payment Data Privacy and Security Act, has been introduced to establish privacy and security protections for payment data belonging to military servicemembers. The bill would extend data privacy frameworks to a specific population defined by military status, creating obligations for entities handling servicemember payment information. Status: introduced; substantive requirements and enforcement mechanisms remain to be characterized as text and analysis become available.

Evidence log

• 2026-04-13 — A joint resolution providing for congressional disapproval under chapter 8 of title 5, United States Code, of the rule submitted by the Bureau of Consumer Financial Protection relating to the withdrawal of the rule relating to “Consumer Financial Protection Circular 2022-04: Insufficient Data Protection or Security for Sensitive Consumer Information”.: cross-connection with cfpb-circular-2022-04-data-protection: Both address data security obligations for entities handling consumer financial data, with the CRA resolution operating at the general UDAAP-guidance level while HR8787 targets a specific servicemember population. (novelty: 2)
• 2026-05-13 — Servicemember Payment Data Privacy and Security Act: cross-connection with investor-pii-protection: Both bills carve out population-specific data privacy protections in the financial sector (servicemembers’ payment data vs. investors’ PII), reflecting a segmented rather than omnibus approach to consumer financial data privacy. (novelty: 2)

Open questions

Related