Privacy for Everyone! New FAR Rule Imposes Mandatory Training Requirements for Employees Handling PII
Client Alert | less than 1 min read | 12.28.16
After years of consideration, DoD, GSA, and NASA have published a final rule requiring contractor employees who handle personally identifiable information (PII) or work with a system of records to complete initial and annual privacy training that addresses specified elements, including the Privacy Act, working with PII, and the contractor’s incident response plan. The final rule – effective January 19, 2017, and applicable to all contracts including those for commercial items and those below the Simplified Acquisition Threshold – also requires contractors to identify each covered employee, maintain records indicating that its employees have completed the requisite training, and to provide these records to contracting officers upon request.
Contacts

Partner, Crowell Global Advisors Senior Director
- Washington, D.C.
- D | +1.202.624.2698
- Washington, D.C. (CGA)
- D | +1 202.624.2500
Insights
Client Alert | 3 min read | 02.13.26
In October 2024, the FTC adopted a final rule that substantially modified the HSR form, requiring new categories of information and documents. The final rule was the most significant overhaul of the HSR premerger notification requirements in decades. The new requirements imposed additional time and expense on merging parties, with the FTC estimating that the new form would likely take triple the amount of time to complete than the previous form. Numerous groups, including the U.S. Chamber of Commerce, sued to challenge the rule.
Client Alert | 12 min read | 02.13.26
What Organ Procurement Organizations Need to Know About CMS's New Proposed Rule
Client Alert | 9 min read | 02.12.26
Client Alert | 3 min read | 02.12.26


