FAR 52.224-3 Privacy Training. Basic (Jan 2017) (Current)

As prescribed in 24.302(a), the contracting officer shall insert the clause at FAR 52.224-3, Privacy Training, in solicitations and contracts when, on behalf of the agency, contractor employees will–
(1) Have access to a system of records;
(2) Create, collect, use, process, store, maintain, disseminate, disclose, dispose, or otherwise handle personally identifiable information; or
(3) Design, develop, maintain, or operate a system of records.

(b) When an agency specifies that only its agency-provided training is acceptable, use the clause with its Alternate I.

Privacy Training (Jan 2017)

(a) Definition. As used in this clause, “personally identifiable information” means information that can be used to distinguish or trace an individual's identity, either alone or when combined with other information that is linked or linkable to a specific individual. (See Office of Management and Budget (OMB) Circular A-130, Managing Federal Information as a Strategic Resource).

(b) The Contractor shall ensure that initial privacy training, and annual privacy training thereafter, is completed by contractor employees who–

    (1) Have access to a system of records;

    (2) Create, collect, use, process, store, maintain, disseminate, disclose, dispose, or otherwise handle personally identifiable information on behalf of an agency; or

    (3) Design, develop, maintain, or operate a system of records (see also FAR subpart 24.1 and 39.105).

(c)(1) Privacy training shall address the key elements necessary for ensuring the safeguarding of personally identifiable information or a system of records. The training shall be role-based, provide foundational as well as more advanced levels of training, and have measures in place to test the knowledge level of users. At a minimum, the privacy training shall cover–

        (i) The provisions of the Privacy Act of 1974 (5 U.S.C. 552a), including penalties for violations of the Act;

        (ii) The appropriate handling and safeguarding of personally identifiable information;

        (iii) The authorized and official use of a system of records or any other personally identifiable information;

        (iv) The restriction on the use of unauthorized equipment to create, collect, use, process, store, maintain, disseminate, disclose, dispose or otherwise access personally identifiable information;

        (v) The prohibition against the unauthorized use of a system of records or unauthorized disclosure, access, handling, or use of personally identifiable information; and

        (vi) The procedures to be followed in the event of a suspected or confirmed breach of a system of records or the unauthorized disclosure, access, handling, or use of personally identifiable information (see OMB guidance for Preparing for and Responding to a Breach of Personally Identifiable Information).

    (2) Completion of an agency-developed or agency-conducted training course shall be deemed to satisfy these elements.

(d) The Contractor shall maintain and, upon request, provide documentation of completion of privacy training to the Contracting Officer.

(e) The Contractor shall not allow any employee access to a system of records, or permit any employee to create, collect, use, process, store, maintain, disseminate, disclose, dispose or otherwise handle personally identifiable information, or to design, develop, maintain, or operate a system of records unless the employee has completed privacy training, as required by this clause.

(f) The substance of this clause, including this paragraph (f), shall be included in all subcontracts under this contract, when subcontractor employees will–

    (1) Have access to a system of records;

    (2) Create, collect, use, process, store, maintain, disseminate, disclose, dispose, or otherwise handle personally identifiable information; or

    (3) Design, develop, maintain, or operate a system of records.

(End of clause)

(f) The substance of this clause, including this paragraph (f), shall be included in all subcontracts under this contract, when subcontractor employees will– (1) Have access to a system of records; (2) Create, collect, use, process, store, maintain, disseminate, disclose, dispose, or otherwise handle personally identifiable information; or (3) Design, develop, maintain, or operate a system of records.
Mandatory (Exception);
  52.244-6   52.212-5  (Applies when contractor employees will (1) have access to a system of records; (2) create, collect, use, process, store, maintain, disseminate, disclose, dispose, or otherwise handle personally identifiable information; or (3) design, develop, maintain, or operate a system of records.

52.204-9 Personal Identity Verification of Contractor Personnel.

52.207-3 Right of First Refusal of Employment.

52.222-46 Evaluation of Compensation for Professional Employees.

52.224-1 Privacy Act Notification.

52.224-2 Privacy Act.

52.232-23 Assignment of Claims.

52.232-24 Prohibition of Assignment of Claims.

52.232-39 Unenforceability of Unauthorized Obligations.

52.233-1 Disputes.

52.233-2 Service of Protest.

52.233-4 Applicable Law for Breach of Contract Claim.

52.242-13 Bankruptcy.

52.242-5 Payments to Small Business Subcontractors.

52.243-4 Changes.

52.248-1 Value Engineering.

52.203-18 Prohibition on Contracting with Entities that Require Certain Internal Confidentiality Agreements or Statements-Representation.

52.216-32 Task-Order and Delivery-Order Ombudsman.

252.226-7002 Representation for Demonstration Project for Contractors Employing Persons with Disabilities.

252.235-7004 Protection of Human Subjects.

1852.231-70 Precontract Costs.

5252.215-9505 EXCLUSIVE TEAMING ARRANGEMENTS WHICH INHIBIT COMPETITION (NAVAIR)

5252.233-9500 PROTEST/APPEAL FILED WITH THE NAVAL AIR SYSTEMS COMMAND (NAVAIR)

3052.205-70 Advertisements, Publicizing Awards, and Releases.

3052.235-70 Dissemination of information - educational institutions.

5152.233-4703 AMC-LEVEL PROTEST PROGRAM

5152.233-5900 AGENCY PROTEST PROGRAM

552.215-73 Notice.

552.232-78 Commercial Supplier Agreements –Unenforceable Clauses.

552.241-70 Availability of Funds for the Next Fiscal Year or Quarter.

552.241-71 Disputes (Utility Contracts).

652.206-70 Advocate for Competition/Ombudsman.

652.243-70 Notices.

752.222-70 USAID disability policy.

752.231-71 Salary supplements for HG employees.

752.236-70 Standards for accessibility for the disabled in USAID construction contracts.

952.203-70 Whistleblower protection for contractor employees.

952.233-4 Notice of protest file availability.

952.233-5 Agency protest review.

970.5209-1 Requirement for guarantee of performance.

Working with a set of FAR clauses from an RFP or contract?

Try pasting them into our tool to instantly generate a risk profile, including the basic flow down recommendation.

Info

Works best with Chrome and Edge browsers!