REGULATORY WATCH BRIEF Moderate 53 🧭 Regulatory Guidance published

SBA seeks comments on modified matching program under Privacy Act

SBA is updating its data‑matching program and inviting feedback, which may affect how personal data are shared between agencies.

ADTP Regulatory Watch · September 24, 2026 · U.S. Small Business Administration

ImpactModerate 53

Type🧭 Regulatory Guidance

Statuspublished enacted, check the effective date

JurisdictionUS

What happened

The U.S. Small Business Administration issued a Federal Register notice requesting public comment on a Privacy Act notice for a revised computer‑matching program. The program will compare SBA benefits records with the Treasury Department’s Do Not Pay system under the Payment Integrity Information Act of 2019. The notice omitted the required System of Records appendix.

Why it matters for trust and compliance

Its status is published. It is enacted but may not be in force yet. Check the effective date before planning around it.
SBA is updating its data‑matching program and inviting feedback, which may affect how personal data are shared between agencies.

Who is affected

government controller processor U.S. Small Business Administration U.S. Department of Treasury's Bureau of the Fiscal Service U.S. Department of Treasury Bureau of the Fiscal Service

Recommended actions

Review consent, cookie and tracking practices against the requirement.
Check that privacy notices describe the practices this addresses.
Revisit retention schedules and data minimisation for the data involved.
Map the security requirements to existing controls and close gaps.