What does Preamble of National Defense Data Resilience Act do?

This bill aims to amend title 10, United States Code. It requires the Secretary of Defense to implement resilient capabilities. These capabilities are intended to recover critical Department of Defense data. The data recovery is specifically for instances where data is lost, degraded, or destroyed.

What does SHORT TITLE. of National Defense Data Resilience Act do?

This bill is formally titled the National Defense Data Resilience Act

What does DATA RECOVERY REQUIREMENTS AND STRATEGY. of National Defense Data Resilience Act do?

This section amends Chapter 19 of title 10, United States Code, by inserting a new section 391c regarding data recovery requirements. The Secretary of Defense must designate data as 'critical,' 'important,' or 'necessary' and establish recovery time objectives (RTOs) for each designation. RTOs for critical data must be established within 180 days of enactment, and for important or necessary data within 270 days. Recovery time objectives must be based on data type and threat exposure and updated based on intelligence regarding evolving threats, including those from the People's Republic of China. The Secretary of Defense must submit an auditable recovery certification report annually to the congressional defense committees. The Secretary of Defense must field data recovery capabilities prioritizing national defense, including immutable backups, continuous monitoring, annual recovery exercises, and independent audits. When fielding data recovery capabilities, the Secretary of Defense may only adopt technology listed in a Department of Defense inventory for certified cybersecurity and data protection technology. The section defines 'critical data' as data whose incapacity or destruction would have a debilitating impact on national security or economy. The Secretary of Defense must submit a data recovery strategy to the congressional defense committees within 90 days of enactment, including recovery time objectives, necessary technology, oversight processes, and funding requirements.

Back to bills

National Defense Data Resilience Act

Last updated: 5/7/2026 · Introduced: 5/7/2026

Author: Suhas Subramanyam (D-VA)

TL;DR (AI)

The bill mandates the Secretary of Defense to classify Department of Defense data as 'critical,' 'important,' or 'necessary' and establish recovery time objectives for each classification.
It requires the Secretary of Defense to develop and implement data recovery capabilities, prioritizing national defense, and to utilize only certified cybersecurity and data protection technology.
The bill establishes annual reporting requirements for the Secretary of Defense to submit an auditable recovery certification report and a data recovery strategy to Congress.

119th Congressin committeeOfficial page

Verified Votes

No verified votes yet.

Community Votes

No community votes yet. Be the first!

Voting as guest · Sign in for verified votes

Other Sections

Includes provisions on preamble, short title., and 1 more.

3 sections

Click "Show details" to explore individual sections. Use the community vote above or visit All Sections to vote per section.

Read official text

Want the full experience?

Create a free account to cast verified votes on each section, get a personalized summary, and track your voting history.

Create Free Account