The original Epstein Files Transparency Act asked 1 agency for files
The MAD Act mandates 75 government entities to hand over their records - and not to the Attorney General, but to the National Archives
How Title VII of the MAD Act Addresses the Epstein Files
Mandatory Declassification, Whistleblower Immunity, Maxwell Deposition & Custody Verification
What the First Law Left Open — and Title VII Closes
The Epstein Files Transparency Act left three specific openings, all tracing back to one design choice: it leaned almost entirely on a single agency, the Department of Justice — then led by Attorney General Pam Bondi, appointed by President Donald Trump. Title VII is built around closing each one.
The original Act directed its disclosure demand at the Department of Justice alone, rather than at the federal government as a whole. Records held by the intelligence agencies, the financial-surveillance agencies, the travel and border agencies, the White House, and dozens of others were never reached. Title VII instead names 75 federal entities as expected record holders and makes the duty reach every federal agency.
The Act provided that survivors' personally identifiable information may be redacted rather than shall be redacted. Because the protection was permissive rather than mandatory, survivors' identifying information was legally able to be released alongside the document dump. Title VII makes survivor-protective redaction the non-discretionary default, removable only by the survivor's own written election.
Congress did not assert its own limited court-carveout authority to compel access to classified material or material held by the executive branch beyond the Department of Justice; it only asked DOJ to declassify to the maximum extent possible. Classified holdings elsewhere in the government stayed out of reach. Title VII asserts a government-wide declassification-and-disclosure mandate on Epstein files, reaching classified and unclassified records alike.
With Production Obligations
Requested to Produce
Authorities Requested
2028
Publication Deadline
Every Published Record
The Epstein Files Transparency Act, Public Law 119-38, passed the House 427 to 1 and cleared the Senate by unanimous consent. It said, broadly: release all the files. The Department of Justice then missed the statutory disclosure deadline, asserted common-law privileges the Act did not permit, applied redactions to shield politically exposed persons, and released documents in piecemeal waves rather than on the required schedule, failures documented in a January 8, 2026 letter to the court and a March 11, 2026 letter from a bipartisan group of Senators requesting a GAO review. Title VII of the MAD Act, the "Epstein Accountability" title also called the "Epstein Act Part II," does not repeat that approach. Rather than ask a single Attorney General to gather files, it names 75 federal entities across eleven groups as expected record holders, explicitly an illustrative, non-exhaustive list since the duty reaches every federal agency, and it opens a parallel voluntary channel for 18 named state, territorial, and local authorities and more than 30 named private companies. It routes everything through an independent body inside the National Archives, the Federal Unit for Managing Epstein Documents, whose head is appointed by the Archivist of the United States, which is staffed exclusively by career archivists employed before January 20, 2025, funded through a dedicated appropriation, and insulated from executive direction by statute. It sets a hard October 15, 2028 publication ceiling. It grants self-executing Espionage Act immunity to government employees and contractors who bring records forward. And it requires Ghislaine Maxwell to testify under oath before Congress, with quarterly biometric verification of her identity in federal custody and a public verdict on the court's docket after every visit.
Congress passed a near-unanimous transparency law; the Department of Justice violated it in four documented ways. Title VII's structural overhaul is a direct response to each.
- Missed the statutory disclosure deadline. The Act set a clear schedule. DOJ did not meet it, and instead released documents in waves. These violations were documented in a January 8, 2026 letter to a federal court and in a March 11, 2026 letter from a bipartisan group of United States Senators requesting a Government Accountability Office review of the redactions.
- Asserted common-law privileges the Act did not permit. DOJ invoked the deliberative process privilege and the attorney work-product doctrine, privileges the statute did not authorize against this disclosure obligation.
- Applied redactions to shield politically exposed persons. The Act prohibited withholding records to protect politically exposed persons. DOJ applied those redactions anyway, inconsistent with the statute's express prohibition.
- Released documents in piecemeal waves. Rather than producing on the schedule the statute required, DOJ released material in waves, frustrating the timeline Congress had set.
- Congress finds the failure was structural. The violations do not require a finding of individual bad faith; they reflect the predictable operation of structural incentives that make executive compliance with politically sensitive disclosure mandates systematically unreliable absent independent oversight. At the same time, Congress is explicit that individual bad faith is not ruled out and may, in particular cases, be warranted. Title VII changes the structure rather than relying on goodwill.
Every Record of the Epstein Network must be released to the public, not handed to Congress, on a rolling schedule, cleared by the Unit, and published on GovInfo.gov with cryptographic verification, all behind an absolute October 15, 2028 ceiling.
- Records go directly to the public, subject only to narrow, enumerated exceptions. "Records of the Epstein Network" means any federally held document, file, recording, communication, photograph, or financial record relating to Epstein, his associates, properties, travel, or finances; any investigation or non-prosecution of the network; any Covered Individual's association, presence, communication, or financial relationship with Epstein or Maxwell; or the circumstances of Epstein's death on August 10, 2019, classified and unclassified alike. The only permitted withholdings are survivor PII, a Presidential Postponement Certification on strictly limited grounds, and a short list of genuine national-security carve-outs. No other privilege or order may block disclosure.
- October 15, 2028 is the hard, unextendable ceiling, four weeks before the November 2028 election. Every cleared record must be published by that date. It cannot be moved by executive order, agency directive, postponement, or any mechanism other than an Act of Congress. Congress finds this the last practicable date for full disclosure with time for meaningful public deliberation before voters decide.
- Rolling submission and tranched publication, with no batch dump on the final day. Day 60: agencies file sworn, IG-certified inventories with SHA-256 hash manifests. Records are then transmitted within five business days of being identified. The Unit publishes in tranches by review type, each due on its day count or July 16, 2028, whichever comes first: roughly Day 300 (records needing only survivor-PII review), Day 600 (declassification review), Day 850 (mosaic and combination review), and Day 851 (everything remaining). Anything an agency submits after July 16, 2028 drops into a Degraded Review Regime and publishes on October 15, 2028 with only survivor PII, sexually explicit imagery, graphic depictions, and routine-personnel names redacted, with no postponements accepted.
- SHA-256 verification, and a searchable copy of everything. Each record is published with its SHA-256 hash, posted under NIST FIPS 180-4, so anyone can confirm a downloaded file has not been altered; a hash mismatch is falsification under 18 U.S.C. § 1519. Each record appears in two versions, the original (canonical) plus a searchable OCR version, and the whole collection is offered as bulk-download archives and through a public API.
- A preservation duty attaches the moment the Act takes effect. From enactment, every Record of the Epstein Network must be preserved intact, and all records-retention and disposition schedules are suspended as to those records, identified or not. Destroying, deleting, or directing the destruction of any such record is falsification under 18 U.S.C. § 1519 and obstruction under 18 U.S.C. § 1505.
- The Privacy Act, executive orders, and the deliberative-process and law-enforcement privileges cannot be used to hide these records. This matters most for Covered Individuals, anyone who in the past thirty years held federal or state elective office, a Senate-confirmed federal position, or served as a senior officer or director of a federal intelligence agency. Those protections are removed as to their association with Epstein or Maxwell, and as to perpetrators and enablers. The single narrow exception is the identity of a confidential human source currently active in an ongoing investigation.
An independent body inside the National Archives sits between the originating agencies and the Government Publishing Office as the single authority that reviews and redacts every Epstein record, built to be insulated from executive pressure.
- Established within NARA and staffed only by career archivists. No political appointee, no employee hired on or after January 20, 2025, and no contractor without prior continuous NARA career service may perform any function in the Unit. It draws on career staff from across NARA, including the National Declassification Center and the Information Security Oversight Office, chosen for declassification and national-security records expertise.
- The Unit Head is appointed by the Archivist of the United States, within fifteen days. If the Archivist does not act in that window, the most senior qualifying career employee becomes acting Unit Head with full authority. The Archivist must certify the appointment was made free of White House or OMB direction, and the Unit Head reports directly and exclusively to both Judiciary Committees, not to any executive official, on the Unit's substantive work.
- The Unit is the sole redaction authority. No originating agency may pre-redact, withhold pages, or modify records before submission, apart from a narrow exception that lets an agency obscure raw child-sexual-abuse or other traumatic imagery itself. Every redaction the Unit applies is compelled by a specific enumerated criterion, with no discretion to widen or narrow it. This ministerial role is the constitutional basis for the Unit's independence.
- Hard staffing floor, with notice required to move anyone. The Unit must reach 40 career reviewers within 90 days (20 within 60) and works toward an aspirational target of 175. No staff member may be reassigned or removed without 45 days' written notice to both Judiciary Committees and a sworn anti-retaliation certification; an action taken without notice is void, and interference with the Unit's decisions is obstruction under 18 U.S.C. § 1505.
- Funded by a dedicated appropriation, with consequences for starving it. The Unit is funded directly, not from NARA's general budget, and the Archivist cannot impound or redirect that money; its independent legal counsel is funded from the United States Courts appropriation. If Congress specifically and intentionally zeroes out the Unit's funding, every disclosure deadline extends by one year per defunded year and records release with only survivor-protective redactions. A receipt-and-reconciliation ledger, cross-checked by the originating agency, the GPO, and NARA's Inspector General, tracks every file so that a dropped or altered record becomes visible immediately.
The one way to keep a record back is a certification the President must sign and publish personally, on one of two narrow grounds. No other official, agency, or privilege can authorize withholding.
- The President, personally, may postpone specific records by signing and publicly releasing a Presidential Postponement Certification. Only two grounds are allowed: that disclosure would reveal the identity of a living confidential human source currently active in an ongoing criminal investigation or intelligence collection, related or unrelated to the network; or that disclosure would directly and imminently endanger a named individual's physical safety in an active intelligence operation. General national security, foreign-policy sensitivity, institutional or personal embarrassment, and any interest in concealing a Covered Individual's conduct are expressly excluded.
- A Certification is void from the outset if it fails to identify specific records or a sufficiently narrow category, rests on an impermissible ground, is signed by anyone other than the President, is substantially based on embarrassment or political sensitivity, or is filed after September 1, 2028, the absolute cutoff designed to foreclose any last-minute wave of certifications before the election.
- Specificity, not volume, is the limit. A Certification must either name each record by its document identifier or define a narrow category: a single originating agency, a date range no longer than 100 days, a specific subject matter, and an operative ground that applies to every record in it. A category drawn so broadly that it covers substantially all of an agency's records is void. A public, weekly aggregate transparency report shows how much each agency has postponed and on what ground, and any affected person may ask the D.C. District Court to strike a Certification, or a group of them, as a de facto wholesale postponement, with the executive bearing the burden, by clear and convincing evidence, that the categories are genuinely narrow and the ground genuinely applies, tested by in camera review of a representative sample.
- Maximum duration 180 days, renewable once. No postponement, and no stay pending appeal, may push any record past the October 15, 2028 ceiling, and postponed records release automatically when their period expires, with no further presidential action required.
Survivors are given their own enforcement tools and control over whether they are named at all.
- A private right of action to force disclosure. A survivor may sue in the D.C. District Court, or the FISA Court for FISA-court records, to compel submission or publication of records or to strike an improper redaction or postponement. The government bears the burden by clear and convincing evidence, the survivor may recover attorney's fees, and may proceed under a pseudonym, with no requirement of any prior public identification.
- Notification when a record they appear in is touched. Whenever the Unit redacts, or a postponement or carve-out withholds, a record in which a survivor is identified, the Unit routes a notification through the Department of Justice's Victim Notification System, using each survivor's existing contact preferences, telling them of the action and their right to challenge it.
- Survivor-controlled identification. The default is redaction. A survivor who was a minor at the time and is now an adult, and any adult survivor, may affirmatively elect, in writing, to have their own identity revealed, in whole or in part, and may revoke that election; no one may pressure them and the Unit may not solicit such elections. Any sexually explicit depiction of a survivor stays obscured regardless of the election.
Instead of a blanket "release all files" command, Title VII names each expected record holder and describes what it is likely to hold. The list is illustrative and non-exhaustive: the duty reaches every federal agency, and any named agency that claims to hold nothing, or less than its role would predict, must file a sworn non-existence and disposition affidavit accounting for what it searched and what became of any records it once held.
FBI (Palm Beach investigation 2005–2007, the SDNY prosecutions of Epstein and Maxwell, the MCC death and DOJ OIG materials, any foreign-intelligence nexus, and all aircraft and flight records including N908JE, the Boeing 727 known as the "Lolita Express," and N212JE, the Gulfstream later re-registered N550GP); DOJ Main Justice, SDFL, and SDNY; the U.S. Marshals Service; the Bureau of Prisons (all MCC records July 1–August 15, 2019, with surveillance footage, guard schedules, and visitor logs); plus CEOS, the National Security Division, DEA, OPR, the Counterintelligence Division, and the Civil Rights, Tax, Public Integrity, Legal Counsel, MLARS, Fraud, Antitrust, and Civil components, ATF, and the Postal Inspection Service.
CIA; NSA (all SIGINT); the Defense Intelligence Agency; ODNI; the National Geospatial-Intelligence Agency (imagery of Little Saint James, Great Saint James, Zorro Ranch, 9 East 71st Street, 22 Avenue Foch, and the Palm Beach estate); the National Reconnaissance Office (satellite imagery 1980–2019); the Defense Counterintelligence and Security Agency; and DHS Intelligence and Analysis.
CBP (TECS and ATS border crossings 1980–2019); ICE; the TSA; the FAA (the tail numbers above plus the Zorro Ranch airstrip); the Coast Guard and Coast Guard Intelligence; Homeland Security Investigations; Border Patrol's El Paso Sector; and the State Department (passports, visas, diplomatic cables, and consular records touching the attempted purchase of the Marrakech "Bin Ennakhil" palace).
FinCEN (SARs on Financial Trust, Southern Trust, HBRK, the Butterfly Trust, Hyperion Air and related entities, plus the roughly $14.95 million July 2019 Marrakech wire request through Charles Schwab); OFAC; the IRS (the USVI tax claims; Southern Trust reported about $656 million in income 2013–2017 with no visible clients); the SEC; the OCC (JPMorgan 1998–2013); the Federal Reserve (Deutsche Bank 2013–2019); Treasury Intelligence and Analysis; the USDA Farm Service Agency (Zorro Ranch); and the FEC.
The White House Office of Records Management (visitor logs, correspondence, and pardon-inquiry records 1980–2019); the Secret Service (including site-specific Zorro Ranch records); the National Security Council; the Department of Labor (Secretary Acosta's tenure and the NPA); and OPM and DCSA clearance files.
The Department of Energy and its national laboratories (including Los Alamos, the Office of Intelligence and Counterintelligence, and the Robert Maxwell–PROMIS/Sandia history); NIH (grants, and Southern Trust's claimed "DNA research"); the NSF; the Department of Education (Epstein donations to Harvard and MIT); and DARPA.
The Administrative Office of the U.S. Courts (sealed records in U.S. v. Epstein, the NPA proceedings, and U.S. v. Maxwell); the GAO (its Public Law 119-38 compliance review, including the March 11, 2026 senators' request); the Inspectors General of DOJ, DHS, DOD, and Treasury; and the Federal Public Defender and CJA panel (non-privileged administrative records only). FISC records are handled under a separate procedure.
All Presidential Records Act holdings at the National Archives from the Clinton, Bush, Obama, and Trump administrations relating to Epstein, Maxwell, or the network, including White House visitor logs, correspondence, briefing materials, and any clemency-consideration records.
The Army Corps of Engineers (Albuquerque District), EPA Region 6, the Bureau of Land Management (New Mexico), the USDA Natural Resources Conservation Service, the U.S. Fish and Wildlife Service (New Mexico), and the Bureau of Indian Affairs (Southwest), covering permits, inspections, and records of underground construction, tunneling, and the airstrip, 1993–2019.
The National Archives must search all of its own holdings, accessioned records, every Federal Records Center, all Presidential libraries and Vice-Presidential records, every regional archive, and all special-media holdings, on the same terms as any other agency, firewalled from the Unit so its records receive no special treatment.
Beyond the enumerated categories, the FBI and DOJ must each search every branch, division, field office, task force, legal attaché, and records system for any Record of the Epstein Network. The enumerated lists are a floor, not a ceiling.
Two parallel channels feed the same public collection on a voluntary basis, under the same redaction rules and published the same way. Neither is compelled; the private channel runs only as far as the Stored Communications Act and other law allow, and good-faith private producers get a safe harbor from federal civil claims.
Congress requests voluntary production from eighteen named authorities, including the Palm Beach Police Department and County Sheriff; the Florida Department of Law Enforcement and Attorney General; the State Attorney for the Fifteenth Judicial Circuit; the U.S. Virgin Islands Attorney General, Governor's office, and tax and planning authorities; the New York City Medical Examiner and Police Department; the New York Attorney General and Manhattan District Attorney; the New York Department of Financial Services; and the New Mexico Attorney General, State Police, Santa Fe County Sheriff, Environment Department, and State Engineer.
To the extent the law allows, more than thirty named private entities are asked to produce: communications and technology platforms (Google, Microsoft, Apple, Meta, X, Discord, Snap, Telegram, Signal); gaming companies (Epic, Sony, Nintendo, Valve); carriers and ISPs (Verizon, AT&T, T-Mobile, Comcast, Charter); payment and financial firms (PayPal/Venmo, Block/Cash App, Stripe, Western Union, American Express, Visa, Mastercard, and Charles Schwab); and hospitality, travel, and private-aviation providers (Airbnb, Booking, Expedia, the major hotel groups, Uber, Lyft, NetJets, Flexjet, VistaJet, Wheels Up). Good-faith producers receive a safe harbor from federal civil claims.
Anyone inside the government who comes forward in good faith with Epstein Network records is immune from Espionage Act prosecution the instant they disclose, with no prior approval, clearance, or review required.
- The Espionage Act (18 U.S.C. §§ 793–798) and the Federal Records Act are carved out for these disclosures. A Qualified Disclosant is broadly defined: any current or former officer, employee, contractor, or detailee of any executive department, independent agency, or element of the Intelligence Community; any member of the Armed Forces; any person with firsthand knowledge that such records were destroyed, concealed, altered, or removed; and Unit staff. The immunity is self-executing, attaches the moment a good-faith disclosure is made, requires no prior approval, and good faith is presumed unless the government disproves it by clear and convincing evidence.
- Disclosure straight to the public is the protected, intended endpoint, alongside disclosure to Congress or an Inspector General. The official disclosure regime is not a precondition. The statute directs that every immunity be read broadly in the discloser's favor and every limitation read narrowly.
- A disclosant who suffers retaliation may sue in federal court. Once they show the disclosure was a contributing factor in an adverse action, the agency must prove by clear and convincing evidence that it would have acted the same way regardless. Remedies include reinstatement, back pay, lost retirement and benefits, compensatory and punitive damages, and attorney's fees, and the suit may be brought up to ten years after the retaliation.
- Gag clauses fall, and clearance retaliation is reviewable. Non-disclosure agreements and secrecy oaths are unenforceable as to these records, settlement gag clauses are void as against public policy, and even a retaliatory security-clearance action may be reviewed.
- Immunity does not cover fabricated or knowingly falsified records, though authentic records disclosed alongside them stay protected; disclosure to any foreign government, adversary, ally, or neutral, for intelligence purposes; or disclosures made primarily to inflict reputational harm using information known to be false. The federal immunity also does not bar a third party's state-law claim, such as defamation.
Maxwell must testify under oath before Congress and cannot take the Fifth, receiving immunity only for what the government does not already know, with her sentence untouched and her co-conspirators unprotected.
- Both Judiciary Committees, acting jointly, may depose Maxwell (Bureau of Prisons Register Number 02879-509). Notice goes to her and her counsel of record at least 30 days ahead, and the Bureau of Prisons transports her under a writ of habeas corpus ad testificandum issued by the Southern District of New York, not on any executive directive. The Attorney General may not direct or interfere with the transport.
- The questioning reaches, at a minimum, the identities of everyone who participated in, facilitated, or knew of the trafficking; every Covered Individual present at an Epstein property or gathering; the nature and extent of Maxwell's own cooperation with federal law enforcement; and what she knows about the circumstances of Epstein's death on August 10, 2019.
- She receives use and derivative use immunity, conferred by the statute itself and coextensive with the Fifth Amendment under Kastigar, so she cannot refuse to answer on Fifth Amendment grounds. Thirty days beforehand the Attorney General files a sealed Pre-Deposition Evidence Certification inventorying what the government already knows. The immunity does not shield any crime the government can prove with independent evidence, nor perjury in the deposition itself; her existing sentence is unaffected; and it gives no protection to any co-conspirator she names.
- The full transcript and audio-video recording are public within 30 days. The only permitted redactions are survivor PII, information under a valid Presidential Postponement Certification, and information within a valid national-security carve-out. Nothing else may be cut.
- Limitations periods are tolled for one year after the transcript is released, but only for offenses committed by people other than Maxwell. Crimes of her own that surface for the first time in her testimony are not tolled, by deliberate design, so that candor about others is rewarded without extending prosecutorial reach over her newly revealed conduct.
Every quarter, an unannounced master from a multi-district pool verifies, by fingerprint, photograph, and forensic comparison, that the person held under Maxwell's register number is the woman convicted in her case, with the verdict made public after each visit.
- The Southern District of New York convenes a Cross-Regional Special Master Pool of no fewer than five masters, drawn from senior-status, magistrate, or retired federal judges who serve in a district other than the one where Maxwell is held. Assignments rotate, and no master may conduct more than two consecutive visits.
- Each master is supported by a forensic team: a board-certified forensic anthropologist, a fingerprint examiner certified by the International Association for Identification, and an independent court reporter who works for none of the agencies involved.
- Visits are quarterly and unannounced, with the Bureau of Prisons learning neither the date nor the master's identity in advance. Each visit takes a fresh ten-print FD-258 fingerprint card, verifies physical descriptors and skeletal landmarks against the baseline, captures at least two photographs (one full-face frontal, one strict 90-degree right profile, to FBI CJIS standards), and records Maxwell's own attestation of identity.
- The Baseline Biometric Record is compiled by the U.S. Marshals from FBI, Marshals, and Bureau of Prisons fingerprints, photographs, dental records, and DNA, supplemented where available by records sought from the UK National Crime Agency and the French national police through Letters Rogatory, and is held under permanent seal by the court's clerk.
- The master files a Summary Order within 10 days, and the court posts it publicly on its website within 5 business days, stating only "IDENTITY VERIFIED" or "IDENTITY UNVERIFIED" with the specific discrepancy. The underlying fingerprints, biometrics, and the verification photographs themselves stay under seal. The public sees the verdict, not the images.
- An "IDENTITY UNVERIFIED" result escalates immediately. It triggers notice within 24 hours to both Judiciary Committees, the FBI Director, and the Attorney General, and a second visit by a different master within 72 hours; if that also fails, the FBI opens a criminal investigation reaching the Bureau of Prisons Director and the warden personally. Verification continues through Maxwell's sentence and supervised release, with a final visit within 30 days of release, and if she dies in custody, a master observes the autopsy and cause-of-death determination, with a public Summary Order within 10 days.
The Act does not invent new penalties or mandatory minimums; it routes interference into the federal integrity statutes already on the books, and attaches personal liability to the officials responsible.
- Contempt of Congress and personal liability. Beyond these statutes, a pattern of late submission, a bad-faith document dump, or interference with the Unit exposes the agency head personally to contempt of Congress. The Bureau of Prisons' obstruction of a verification visit is obstruction of proceedings with personal liability for its Director and the warden, and an "IDENTITY UNVERIFIED" result triggers a criminal investigation reaching them by name.
- No "routine disposal" defense. The duty to preserve every Record of the Epstein Network attaches by operation of law at enactment and suspends every records-retention and disposition schedule. Each record destroyed, altered, or improperly removed is a separate offense, with personal liability for anyone who performed, ordered, or knowingly permitted it.
Within 180 days the FBI Director must put a complete factual account on the public record covering the agency's deepest unanswered questions about Epstein, unclassified to the maximum extent possible, with a classified annex only if necessary, and the unclassified portion posted on the Bureau's website the day it goes to Congress.
- The 2007–2008 non-prosecution agreement: what the FBI knew and did, including its awareness of the co-conspirator immunity provisions and the agreement's sealed status.
- Epstein's relationship to federal law enforcement: any cooperation, source, or informant arrangement, squarely including the partially redacted 2008 FBI memo stating that Epstein "provided information to the FBI as agreed upon," and his 2011 FOIA request probing an "open affiliation" with the CIA that the agency met with a Glomar response.
- The foreign-intelligence nexus: any assessment of ties to Israeli, British, or other intelligence services, including Robert Maxwell's alleged relationship with Israeli intelligence, and any coordination with the CIA, NSA, or ODNI.
- Epstein's death at MCC New York on August 10, 2019: cause of death, the surveillance and guard failures detailed in DOJ OIG Report 23-085, any third-party involvement, and any evidence inconsistent with the finding of suicide.
- The Acosta email gap: the documented eleven-month gap in U.S. Attorney Acosta's incoming email from May 2007 through April 2008, which the OPR attributed to a "technological error," and any forensic analysis or investigation of possible deletion.
- Maxwell's custody and the PROMIS-software connection: the FBI's role in her facility status, and any investigation into Robert Maxwell's reported efforts to market PROMIS software to U.S. national laboratories.
A single public, televised joint hearing with full subpoena power brings the whole record, including Epstein's death, into open session.
- Within a year of enactment, both Judiciary Committees must jointly hold a public hearing, closed only for the narrowest national-security or survivor-protection reasons that both chairs agree on.
- The hearing's scope is broad, covering executive compliance and non-compliance with the Act; the two FBI reports; Maxwell's deposition and any new testimony; the Special Masters' findings; the pattern of released records and any Presidential Postponement Certifications; and the circumstances of Epstein's death. The Committees have full subpoena power, reaching the Attorney General, the FBI Director, the U.S. Attorneys for the Southern Districts of Florida and New York, the Bureau of Prisons Director and wardens, senior intelligence officials, and any survivor who chooses to testify under protective measures.
- The record follows, and so does a legislative recommendation. The public record of the hearing is released within 30 days, and within 120 days the Committees must issue a public report on any further legislation the findings require.
Within 90 days the FBI Director must report, to both Judiciary Committees and at the same time publicly on the Bureau's website, on terms in the already-released DOJ files that public reporting has alleged are coded references.
- The report must address each alleged term — among them "pizza," "pasta," "hot dogs," "cheese," "cheese pizza," "ice cream," "grape soda," and "walnut sauce," and similar food and consumer-product terms — wherever it appears in the files.
- For each term it must identify every document and page where the term appears, give the full surrounding context, and set out every plausible explanation: ordinary usage; FBI internal slang or investigative shorthand; documented use by criminal networks as coded language for trafficking or the sexual exploitation of minors; and any usage found in law-enforcement case files, criminological study, or forensic-linguistic analysis known to the Bureau.
- It must also state whether any investigation was opened, extended, or discontinued because of a term, and whether any interpretation was ever shared with a superior, an oversight body, or the public before this Act.