1. Home
  2. |Insights
  3. |Setting the Floor: New FAR Rule Defines Minimum Contractor Information System Safeguarding

Setting the Floor: New FAR Rule Defines Minimum Contractor Information System Safeguarding

Client Alert | 1 min read | 05.17.16

Shifting approaches, on May 16, 2016, the FAR Council concluded a long-running rulemaking with a final rule and a new clause, FAR 52.204-21, that will establish minimum security controls pulled from NIST Special Publication 800-171 over contractor information systems that may process, store, or transmit “Federal contract information,” defined as information provided to or generated under any government contract (except for COTS) that is not intended for public release. Future rules will address more specific controls applicable to more sensitive information such as Controlled Unclassified Information (CUI), but this rule focuses instead on establishing those baseline controls the FAR Council believes any prudent business would implement in relation to its information systems and does not replace more stringent security requirements like those in the DFARS Safeguarding Rule.

Contacts

Insights

Client Alert | 3 min read | 11.21.25

A Sign of What’s to Come? Court Dismisses FCA Retaliation Complaint Based on Alleged Discriminatory Use of Federal Funding

On November 7, 2025, in Thornton v. National Academy of Sciences, No. 25-cv-2155, 2025 WL 3123732 (D.D.C. Nov. 7, 2025), the District Court for the District of Columbia dismissed a False Claims Act (FCA) retaliation complaint on the basis that the plaintiff’s allegations that he was fired after blowing the whistle on purported illegally discriminatory use of federal funding was not sufficient to support his FCA claim. This case appears to be one of the first filed, and subsequently dismissed, following Deputy Attorney General Todd Blanche’s announcement of the creation of the Civil Rights Fraud Initiative on May 19, 2025, which “strongly encourages” private individuals to file lawsuits under the FCA relating to purportedly discriminatory and illegal use of federal funding for diversity, equity, and inclusion (DEI) initiatives in violation of Executive Order 14173, Ending Illegal Discrimination and Restoring Merit-Based Opportunity (Jan. 21, 2025). In this case, the court dismissed the FCA retaliation claim and rejected the argument that an organization could violate the FCA merely by “engaging in discriminatory conduct while conducting a federally funded study.” The analysis in Thornton could be a sign of how forthcoming arguments of retaliation based on reporting allegedly fraudulent DEI activity will be analyzed in the future....