Federal businesses didn’t present sufficient info to find out whether or not Division of Authorities Effectivity (DOGE) groups adequately protected delicate authorities knowledge when accessing company programs as directed by an government order, in line with a new report from the Authorities Accountability Workplace (GAO).
GAO reviewed the scope of DOGE entry at six authorities businesses however couldn’t totally confirm whether or not safety safeguards had been adopted. The programs accessed by DOGE had been used to handle contacts, funds, grants, and contracts, and so they contained personal and delicate knowledge, together with personally identifiable info.
“The breadth of this entry has led to issues by members of Congress and others that company programs and their delicate info and knowledge could have been susceptible to unauthorized disclosure or modification,” notes the report.
In response to GAO’s requests for info, the reviewed businesses provided incomplete documentation or didn’t reply.
President Donald Trump issued the manager order on January 20, 2025, with the acknowledged purpose of modernizing federal know-how and enhancing authorities effectivity.
Scope of DOGE entry stays unclear
The GAO audit ran from March 2025 via September 2026 and included the Departments of Schooling (Schooling) and Veterans Affairs (VA), the Client Monetary Safety Bureau (CFPB), Nationwide Oceanic and Atmospheric Administration (NOAA), Securities and Trade Fee (SEC), and Small Enterprise Administration (SBA).
4 businesses—CFPB, Schooling, NOAA, and SEC—reported giving DOGE groups entry to greater than 23 programs used for human sources, funds, grants, and contract administration. A few of these programs contained personally identifiable info.
The permissions granted to DOGE group members diverse. CFPB reported that one DOGE group member was given entry to eight inner programs. This particular person was allowed to view, modify, and delete knowledge in its major human sources system. Two of six DOGE members had been granted entry to the data know-how (IT) programs and community at Schooling, however GAO couldn’t verify the extent and stage of their entry.
Congress and the general public lack info wanted to verify if DOGE group members adopted the IT guidelines of habits they agreed to at these businesses.
GAO was unable to determine the programs DOGE groups had entry to on the SBA or VA.
Three of the six businesses (CFPB, Schooling, and SEC) supplied restricted documentation concerning the extent to which DOGE group members adopted IT safety guidelines. CFPB and SEC reported that there had not been any privateness incidents pertaining to DOGE entry however didn’t inform GAO how they recognized IT safety compliance.
“Consequently, Congress and the general public lack info wanted to verify if DOGE group members adopted the IT guidelines of habits they agreed to at these businesses,” notes the report.
Companies resist requests, dispute GAO authority
The businesses provided completely different causes for withholding info. CFPB asserted that the requested info was redundant and pointless and that offering it might unnecessarily disrupt bureau operations.
Schooling cited ongoing litigation and issues about disclosing DOGE personnel’s confidentiality. NOAA and SEC challenged GAO’s authority to conduct the evaluate. The VA acknowledged that it might not deal with the requests nor present a purpose for not doing so.
GAO maintains it “has ample statutory authority to conduct audit work” and entry the requested information.
