If the request is granted, OPM would be forced to disconnect its server until it can construct a plan for how to protect employees’ data, a requirement of the E-Government Act of 2002.