Government Regulations, Data Security

DOGE access to OPM data unlawful, judge rules

When the Office of Personnel Management hired its first CISO more than five years ago after the high-profile hack by the Chinese, that was an important nod to cyber’s growing importance, but today’s columnist, Reuven Aronahvili of CYE, argues that organizations have to go a step further and practice due diligence around all aspects of cybersecurity...

The Office of Personnel Management was found to have violated the law by providing the Department of Government Efficiency with access to its databases containing information on current and former federal workers, as well as job seekers, following the inauguration of President Donald Trump, according to The Hill.

Such access, which allowed DOGE to send government buyout email offers to employees, was in breach of the privacy act, said U.S. District Judge Denise Cote in a ruling that approved an injunction prohibiting further DOGE access on OPM databases. Cote also noted the action to be in violation of the Administrative Procedures Act. "The plaintiffs have pointed to clear evidence that the DOGE agents did not need access to the records disclosed to them, much less the administrative access that they were given... Database administrators who were responsible for the normal functioning of those systems had their access revoked," said Cote.

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

By clicking the Subscribe button below, you agree to SC Media Terms of Use and Privacy Policy.

You can skip this ad in 5 seconds