Establish mandatory recovery time objectives for federal data across federal agencies and require the Department of Defense to submit a data recovery strategy.

introduced the National Defense Data Resilience Act ... establishes mandatory RTOs for different thresholds of data across federal agencies, including the Pentagon, and establishes data recovery capability requirements for the data. The bill also requires the Secretary to submit a data recovery strategy for the Department of Defense.

Subramanyam introduced legislation that would set mandatory federal data recovery standards and require a DoD recovery strategy.

Rep. Subramanyam Introduces Bill to Protect Federal Government Data | Representative Suhas Subramanyam
primary · press_release · model gpt-5.4-mini

GovInfo lists H.R. 8710 as introduced by Mr. Subramanyam for himself and Mr. McCormick on May 7, 2026, referred to the House Committee on Armed Services. The bill title would require the Secretary of Defense to implement resilient capabilities to recover critical Department of Defense data.

Within the lookback window, Subramanyam introduced a bill addressing the DoD data-recovery part of the commitment, but it was only referred to committee and not enacted.

unresolved same_term A for effort

GovInfo: H.R. 8710 (IH) - National Defense Data Resilience Act
secondary · model gpt-5.5 · confidence 95%

MeriTalk reported that Reps. Suhas Subramanyam and Richard McCormick introduced the National Defense Data Resilience Act on May 7. If enacted, it would require DoD recovery time objectives for critical data within 180 days and important or necessary data within 270 days, plus a DoD data recovery strategy covering RTOs, technology, oversight, and funding. The article said the bill was referred to House Armed Services and appeared to have no Senate companion.

The reporting confirms the bill's substantive match to the RTO and DoD strategy promise, while emphasizing it remains conditional on enactment and pending in committee.

unresolved same_term A for effort

MeriTalk: House Bill Looks to Improve Pentagon's Data Recovery Efforts
secondary · model gpt-5.5 · confidence 88%

The amendment was offered by Mr. Subramanyam of Virginia to Rules Committee Print 119-8 and would add a section titled Data Recovery Requirements and Strategy. It directed the Secretary of Defense to designate essential data categories and establish mandatory recovery time objectives, including within 180 days for critical data.

This shows an earlier same-term legislative attempt closely matching the commitment, but it is amendment text rather than proof of enacted policy.

unresolved same_term A for effort

House Rules Committee Amendment: SUBRAM_053, Data Recovery Requirements and Strategy
secondary · model gpt-5.5 · confidence 82%

Congress.gov lists H.R. 3838 as passed by the House and received in the Senate, while related bill S.1071 became Public Law 119-60 on December 18, 2025. Review of the House-passed H.R. 3838 text found no matching data-recovery provisions for recovery time objectives, section 391c, or recovery certification.

The earlier NDAA amendment path does not appear to have delivered the promised data-recovery mandate in the enacted FY2026 NDAA vehicle.

never same_term

Congress.gov: H.R. 3838 All Information - FY2026 NDAA House Vehicle
secondary · model gpt-5.5 · confidence 72%

SC Media described the National Defense Data Resilience Act as a Subramanyam-McCormick bill that would require DoD to identify mission-critical data, establish mandatory recovery time objectives, deploy recovery capabilities, test them, and report results to Congress. It also framed DoD as a starting point for a broader federal standard, not a government-wide mandate already in force.

The article supports that the current action is a pending DoD-focused proposal and that broader federal-agency delivery remains unresolved.

unresolved same_term A for effort

SC Media: Recovery Is the New Cyber Deterrence
secondary · model gpt-5.5 · confidence 78%