FedRAMP and the Data Broker Loophole

The post summarizes a congressional report proposing a FedRAMP-like security and risk-management framework for commercial data brokers used by federal agencies, describes the 'data broker loophole' whereby agencies purchase sensitive personal data as procurement rather than surveillance, and analyzes the privacy, compliance, and supply-chain cybersecurity risks of that practice while outlining potential policy and procurement responses.