VA modifies system of records for life insurance policies under the Privacy Act

What happened

The Department of Veterans Affairs announced a modification to the system of records titled "Veterans and Uniformed Services Personnel Programs of U.S. Government Life Insurance--VA" (36VA29). The change moves the record system to a cloud‑based solution called LIPAS, hosted on the VA Enterprise Cloud AWS GovCloud High environment. The notice fulfills the Privacy Act of 1974 requirement to inform the public of the change.

Why it matters for trust and compliance

• Its status is published. It is enacted but may not be in force yet. Check the effective date before planning around it.
• The update signals VA's shift to a cloud‑based record‑keeping platform, impacting how veterans' personal and insurance data are stored and protected.
• Takes effect October 23, 2026.

Who is affected

Recommended actions

1. Check that privacy notices describe the practices this addresses.
2. Revisit retention schedules and data minimisation for the data involved.
3. Review the transfer mechanisms relied on for affected data flows.
4. Map the security requirements to existing controls and close gaps.
5. Confirm handling of sensitive data categories meets the stricter rules.