Cybersecurity Policy Report, Bipartisan House Bill Aims to Improve DoD’s Data Recovery Capabilities, (May 15, 2026)
The Department of Defense would have to develop plans to quickly recover lost data after a cyber attack under bipartisan House legislation.
The National Defense Data Resilience Act (H.R. 8710, 119th Cong. (2026)) was introduced by Rep. Suhas Subramanyam (D., Va.), ranking member of the House Oversight and Government Reform Committee’s military and foreign affairs subcommittee. Rep. Richard McCormick (R., Ga.) is the bill’s co-sponsor.
The legislation would require DoD to classify data as critical, important, or necessary and set mandatory “recovery time objectives” (RTOs) for the different classes of data.
“It is essential to have Recovery Time Objectives (RTOs) in place, which are the maximum time allowed to restore critical systems and data in the event of a cyber incident,” Rep. Subramanyam said yesterday in a news release.
The bill defines “critical data” as data “so vital to the United States, that the incapacity or destruction of such data would have a debilitating impact on security, national economic security, national public health or safety, or any combination thereof.”
The bill would require DoD to create “immutable backups” for critical data and conduct annual “recovery exercises that simulate sophisticated nation-state cyberattacks designed to cripple data systems,” according to the bill’s text.
“Cyber warfare is a growing threat, and our federal government should be prepared. Without this bill, we are leaving the safety and security of our nation vulnerable instead of maintaining necessary technological advancements. Now more than ever, we need to do everything we can to prevent the threats we know are coming from our adversaries,” Rep. Subramanyam said.
“Having a strong national defense starts with protecting the data our military relies on every day. When vital information is lost or disrupted, missions and readiness can be put at risk,” Rep. McCormick said.
“This bill takes an important step toward ensuring we can quickly restore critical systems by strengthening the way we safeguard and recover essential data,” Rep. McCormick added. “By building a more resilient defense infrastructure, we keep our servicemembers prepared for whatever they face next.”
MainStory: TopStory FederalLegislation DataSecurity