On July 1, 2016, the Office of Management and Budget issued a memorandum which requires, with limited exceptions, agencies to use GSA’s Identity Monitoring Data Breach Response and Protection Services for providing comprehensive identity protection services, identity monitoring, and data breach response.