Privacy for Everyone! New FAR Rule Imposes Mandatory Training Requirements for Employees Handling PII
Client Alert | less than 1 min read | 12.28.16
After years of consideration, DoD, GSA, and NASA have published a final rule requiring contractor employees who handle personally identifiable information (PII) or work with a system of records to complete initial and annual privacy training that addresses specified elements, including the Privacy Act, working with PII, and the contractor’s incident response plan. The final rule – effective January 19, 2017, and applicable to all contracts including those for commercial items and those below the Simplified Acquisition Threshold – also requires contractors to identify each covered employee, maintain records indicating that its employees have completed the requisite training, and to provide these records to contracting officers upon request.
Contacts
Partner and Crowell Global Advisors Senior Director
- Washington, D.C.
- D | +1.202.624.2698
- Washington, D.C. (CGA)
- D | +1 202.624.2500
Insights
Client Alert | 4 min read | 07.31.26
On July 23, 2026, the U.S. Department of Justice’s Antitrust Division announced that it will again use targeted Second Request investigations and released a revised Model Timing Agreement, another signal that this Antitrust Division continues to take a more business friendly approach toward merger review. The model introduces an optional “Expedited Consideration” process that gives merging parties the option to address discrete competitive concerns identified by the DOJ before undertaking full Second Request compliance.
Client Alert | 5 min read | 07.28.26
Data Centers in the Crosshairs: The Plaintiffs' Bar Has Begun Filing New Claims Using Old Tricks
Client Alert | 2 min read | 07.24.26
GAO Finds That Challenge to Agency’s Failure to Comply With DFARS Requirement Comes Too Late
