U.S. flag
          An official website of the United States Government  Main navigation
  

        

              Data Initiatives
                              Regulations
                                                                        Row 1
                                              FAR FAR
                              Smart Matrix Smart Matrix
                              Chapter 99 (CAS) Chapter 99 (CAS)
                              Row 2
                                              DFARS DFARS
                              DFARSPGI DFARSPGI
                              AFARS AFARS
                              DAFFARS DAFFARS
                              DAFFARS MP DAFFARS MP
                              DARS DARS
                              DLAD DLAD
                              NMCARS NMCARS
                              Row 3
                                              SOFARS SOFARS
                              TRANSFARS TRANSFARS
                              AGAR AGAR
                              AIDAR AIDAR
                              CAR CAR
                              DEAR DEAR
                              DIAR DIAR
                              DOLAR DOLAR
                              Row 4
                                              DOSAR DOSAR
                              DTAR DTAR
                              EDAR EDAR
                              EPAAR EPAAR
                              FEHBAR FEHBAR
                              GSAM/R GSAM/R
                              HHSAR HHSAR
                              HSAR HSAR
                              Row 5
                                              HUDAR HUDAR
                              IAAR IAAR
                              JAR JAR
                              LIFAR LIFAR
                              NFS NFS
                              NRCAR NRCAR
                              TAR TAR
                              VAAR VAAR
                              Tools
                                                                        Archives
                              Smart Matrix
                              Regulations Search
                              Acquisition Regulation Comparator (ARC)
                              Policy Network
                                                                        CAOC
                              CAAC
                              FAR Council
                              ISDC
 Breadcrumb
        Home
                            Regulations
                            FAR
                            52.224-3 Privacy Training.
        
                  FAR
FAR
FAC Number: 2024-03 Effective Date: 02/23/2024
PartPart 1Part 2Part 3Part 4Part 5Part 6Part 7Part 8Part 9Part 10Part 11Part 12Part 13Part 14Part 15Part 16Part 17Part 18Part 19Part 20Part 21Part 22Part 23Part 24Part 25Part 26Part 27Part 28Part 29Part 30Part 31Part 32Part 33Part 34Part 35Part 36Part 37Part 38Part 39Part 40Part 41Part 42Part 43Part 44Part 45Part 46Part 47Part 48Part 49Part 50Part 51Part 52Part 53
Subpart52.052.152.252.3
Section52.20052.20152.20252.20352.20452.20552.20652.20752.20852.20952.21052.21152.21252.21352.21452.21552.21652.21752.21852.21952.22052.22152.22252.22352.22452.22552.22652.22752.22852.22952.23052.23152.23252.23352.23452.23552.23652.23752.23852.23952.24052.24152.24252.24352.24452.24552.24652.24752.24852.24952.25052.25152.25252.253
Leave this field blank
        
                  

                                
                  
        « PreviousNext »
52.224-3 Privacy Training.52.224-3 Privacy Training.       As prescribed in 24.302, insert the following clause:          Privacy Training (Jan 2017)                                       (a)                   *Definition*. As used in this clause, "personally identifiable information" means information that can be used to distinguish or trace an individual's identity, either alone or when combined with other information that is linked or linkable to a specific individual. (See Office of Management and Budget (OMB) Circular A-130, Managing Federal Information as a Strategic Resource).                                          (b) 						            The Contractor shall ensure that initial privacy training, and annual privacy training thereafter, is completed by contractor employees who-                                                         (1) 								                Have access to a system of records;                                                            (2) 								                Create, collect, use, process, store, maintain, disseminate, disclose, dispose, or otherwise handle personally identifiable information on behalf of an agency; or                                                            (3) 								                Design, develop, maintain, or operate a system of records (see also FAR subpart  24.3 and  39.105).                                                                             (c)                                                         (1) 								                "Privacy training shall address the key elements necessary for ensuring the safeguarding of personally identifiable information or a system of records. The training shall be role-based, provide foundational as well as more advanced levels of training, and have measures in place to test the knowledge level of users. At a minimum, the privacy training shall cover-                                                                           (i) 										                    The provisions of the Privacy Act of 1974 (  5 U.S.C. 552a), including penalties for violations of the Act;                                                                              (ii) 										                    The appropriate handling and safeguarding of personally identifiable information;                                                                              (iii) 										                    The authorized and official use of a system of records or any other personally identifiable information;                                                                              (iv) 										                    The restriction on the use of unauthorized equipment to create, collect, use, process, store, maintain, disseminate, disclose, dispose or otherwise access personally identifiable information;                                                                              (v) 										                    The prohibition against the unauthorized use of a system of records or unauthorized disclosure, access, handling, or use of personally identifiable information; and                                                                              (vi) 										                    The procedures to be followed in the event of a suspected or confirmed breach of a system of records or the unauthorized disclosure, access, handling, or use of personally identifiable information (see OMB guidance for Preparing for and Responding to a Breach of Personally Identifiable Information).                                                                                                           (2) 								                Completion of an agency-developed or agency-conducted training course shall be deemed to satisfy these elements.                                                                             (d) 						            The Contractor shall maintain and, upon request, provide documentation of completion of privacy training to the Contracting Officer.                                          (e) 						            The Contractor shall not allow any employee access to a system of records, or permit any employee to create, collect, use, process, store, maintain, disseminate, disclose, dispose or otherwise handle personally identifiable information, or to design, develop, maintain, or operate a system of records unless the employee has completed privacy training, as required by this clause.                                          (f) 						            The substance of this clause, including this paragraph (f), shall be included in all subcontracts under this contract, when subcontractor employees will-                                                         (1) 								                Have access to a system of records;                                                            (2) 								                Create, collect, use, process, store, maintain, disseminate, disclose, dispose, or otherwise handle personally identifiable information; or                                                            (3) 								                Design, develop, maintain, or operate a system of records.                                                                    (End of clause)          Alternate I (Jan 2017). As prescribed in 24.302(b), if the agency specifies that only its agency-provided training is acceptable, substitute the following paragraph (c) for paragraph (c) of the basic clause:             (c) The contracting agency will provide initial privacy training, and annual privacy training thereafter, to Contractor employees for the duration of this contract.    **Parent topic:**  52.224 [Reserved]
« PreviousNext »
FavoriteX

      Far Parts
            Regulations FAR Menu
  

        
      Index
                              List of Sections Affected
                              DOD Deviations
                              CAAC Deviations
                              1
                              2
                              3
                              4
                              5
                              6
                              7
                              8
                              9
                              10
                              11
                              12
                              13
                              14
                              15
                              16
                              17
                              18
                              19
                              20
                              21
                              22
                              23
                              24
                              25
                              26
                              27
                              28
                              29
                              30
                              31
                              32
                              33
                              34
                              35
                              36
                              37
                              38
                              39
                              40
                              41
                              42
                              43
                              44
                              45
                              46
                              47
                              48
                              49
                              50
                              51
                              52
                              53
                              Chapter 99 (CAS)Definitions
    Toggle
FAC Changes
    Toggle
Style Formatter
    Toggle

      ×
        Data Initiatives
                                                              Regulations
                                                              Tools
                                              Archives
                                                              Smart Matrix
                                                              Regulations Search
                                                              Acquisition Regulation Comparator (ARC)
                                                              Policy Network
                                              CAO.gov
                                                        CAO Home
                                                              Council Member
                                                                    Large Agencies
                                                              Small Agencies
                                                              Council Defining Documents
                                                                    CAOC History
                                                              CAOC Charter
                                                              Civilian Agency Acquisition Council (CAAC)
                                                              Federal Acquisition Regulatory Council
                                                              Interagency Suspension and Debarment Committee (ISDC)
                                                              Search
 ˄ Top Sign up for FAR News

                            Share the FAR
                        Upper Footer Menu
  

        
      Useful Links
                              FAR Resources
                              Training
                              Acquisition Systems
            
                            **Contact Us/FAQs**
                        **Privacy and Security Notice**
                        **Accessibility Aids**
                        **Last Updated 03/29/2024**
 ACQUISITION.GOV
                An official website of the General Services Administration About GSA
                Accessibility support
                FOIA requests
                No FEAR Act data
                Office of the Inspector General
                Performance reports
                Privacy policy Looking for U.S. government information and services?
            Visit USA.gov
 «
    
    Tt