HR6874-118

1. Short title This Act may be cited as the Department of Veterans Affairs Watching over Electronic Benefits Act or the VA WEB Act.

2. System or process to actively monitor certain functions of the covered website for adverse events Not later than one year after the date of the enactment of this Act, the Secretary of Veterans Affairs shall develop and implement a system or process to actively monitor certain functions of the covered website, including covered features and any underlying interface or system, for adverse events. The Secretary may use the authority under section 701(a) of the Sergeant First Class Heath Robinson Honoring our Promise to Address Comprehensive Toxics Act of 2022 (Public Law 117–168; 38 U.S.C. 324 note) to carry out this subsection. The Secretary shall ensure that the system or process developed under subsection (a) is designed to monitor, and log and store data, with respect to— the volume of traffic to the covered website; the number of submissions made using a covered feature; software updates or other modifications to a covered feature or underlying interface or system; needs, deficiencies, or obsolescence of a covered feature or underlying interface or system; adverse events, including— the date and time of any such adverse event; the number of users of the covered website who were affected by the adverse event; the number of submissions affected by the adverse event; and any factor related to an underlying interface or system that caused or contributed to the adverse event; and any other factors, as determined by the Secretary. In the case of any significant adverse event affecting the covered website, not later than 30 days after the date of such event, the Secretary shall submit to the Committees on Veterans’ Affairs of the Senate and House of Representatives notice of the event, including a description of the event. Not later than 30 days after receiving a request from the Chair of the Committee on Veterans’ Affairs of the Senate or the Chair of the Committee on Veterans’ Affairs of the House of Representatives for a report about an adverse event, including a significant adverse event, the Secretary shall submit to the Committees on Veterans’ Affairs of the Senate and the House of Representatives a report on the adverse event covered by the request. Each such report shall include— a description of the adverse event; the date and time when the adverse event began and ended; the number of users of the covered website who were affected; the number of submissions made using a covered feature that were affected; and a description of any underlying interface or system that was affected. The requirements under this subsection shall expire on the date that is seven years after the date of the enactment of this Act. If the Secretary exercises authority under section 701(a) of the Sergeant First Class Heath Robinson Honoring our Promise to Address Comprehensive Toxics Act of 2022 (Public Law 117–168; 38 U.S.C. 324 note) to carry out subsection (a), not later than 30 days after the date on which the Secretary first exercises such authority for such purpose, the Secretary shall submit to the Committees on Veterans’ Affairs of the Senate and the House of Representatives and the Committees on Appropriations of the Senate and the House of Representatives a report about the exercise of such authority. Such report shall include— the cost of implementing the system or process developed under subsection (a); a description of any modernization or replacement of an underlying interface or system necessary to implement the system or process; an identification of any ways in which the covered website and any underlying interface or system is susceptible to any adverse event; and a description of how the Secretary plans to eliminate or mitigate, to the extent possible, any such susceptibility. Not later than one year after the date of the enactment of this Act, the Assistant Secretary for Information and Technology of the Department of Veterans Affairs shall submit to the Committees on Veterans’ Affairs of the Senate and the House of Representatives a strategy to reduce the occurrence of adverse events by improving testing for each modification or software update to a covered feature or underlying system or interface. In this section: The term adverse event means, with respect to the covered website, including covered features— a failure to properly receive or process a submission; a system outage; an error in an underlying interface or system that prevents the transmission of data; a deficiency in information storage capacity; a loss of data; a presentation of incorrect information; an error regarding a status notification; or any similar event that affects a function of the covered website, as determined by the Secretary. The term covered feature means any feature or function of the covered website for use in the facilitation of the application, maintenance, or receipt of benefits under the laws administered by the Secretary. The term covered website means the main internet website of the Department of Veterans Affairs. The term significant adverse event, with respect to the covered website, including covered features, means an adverse event that affects 1,000 or more users of, or submissions to, the covered website. The term underlying interface or system means— any information technology system that transmits data through, or accepts data from, a covered feature; or any mechanism through which any such information technology system connects and interacts with the covered website.