CAT Step 1
Map your data
Identify where seized and collected data lives, and who holds it.
Resources / Legislative explainer
The Inventory Act, explained.
The Digital Asset Inventory and Audit Act of 2026 (H.R. 10317) would require federal agencies to find, secure and audit the digital assets in their data. Here is what it says and where it stands.
Introduced
Sep 8, 2026
by Rep. Darrell Issa, with Rep. Lance Gooden.
Status
Pending
Referred to the House Judiciary Committee. Not law.
Scope
Every agency
Any federal department, agency, bureau, office or component, including the Intelligence Community.
01
// What it would require
CATLABS · 01
Six provisions agencies should know.
| Section | What it would require |
|---|---|
| Sec. 3(a) | Within 180 days of enactment, the Attorney General, with DHS, Treasury and the DNI, issues a binding directive to scan seized or collected ESI for cryptocurrency key material, secure what is found, and audit logs annually. |
| Sec. 3(b) | After any seizure, forfeiture or acquisition of ESI, the agency scans it as soon as practicable. |
| Sec. 3(c) | The Attorney General, with NIST, sets standards for secure extraction, storage and access control of key material, including logging and monitoring of all access. |
| Sec. 4 | Each agency audits its digital assets every year: accounts for them, verifies custody and access controls, and documents losses and corrective actions, then reports within 180 days. |
| Sec. 5 and 7 | Inspectors General audit devices for assets and keys; GAO reviews compliance within a year and every three years after. |
| Sec. 8 | The DOJ Assets Forfeiture Fund and Treasury Forfeiture Fund may pay for the digital forensic tools the Act requires. |
The bill creates no new search or seizure authority (Sec. 5(b)). Summary based on the introduced text; it may change as the bill moves.
03
// FAQ
CATLABS · 03
Questions institutions ask first.
Is the Inventory Act law?
No. It was introduced on September 8, 2026 and referred to the House Judiciary Committee. Its text may change.
Who would it cover?
Every federal agency, as defined in the bill, including DOJ, Treasury, DHS, regulators, law enforcement and Intelligence Community elements.
Does it name specific tools?
No. It defines a discovery and scanning tool and leaves standards to the Attorney General and NIST.