Prohibition on the transfer of certain data on employees of the Department of Defense to third parties

The Secretary of Defense may waive the requirements of subsection (a) with respect to the sale, licensing, or other transfer of covered individually identifiable Department employee data if the Secretary determines that such waiver— Not later than January 15, 2026, and annually thereafter for four years, the Under Secretary of Defense for Acquisition and Sustainment, shall submit to the congressional defense committees a report on the use of the waiver authority under subsection (b) for the fiscal year preceding the date of submission of the report. The report shall include, for each use of the waiver— In this section: The term “individually identifiable Department employee data” means information related to an employee of the Department of Defense, including a member of the Armed Forces, that—