The Wait Is Over: Final DFARS Safeguarding Rule Published Today
Client Alert | 1 min read | 10.21.16
Almost three years after its first iteration was published, DoD has finalized the DFARS Safeguarding Rule and corresponding DFARS clauses regarding the protection of “covered defense information” provided to or generated by defense contractors. Effective today, the Final Rule by and large reflects the same requirements of its interim versions and FAQs but with a few notable exceptions, including the definition of “covered defense information” now encompasses all forms of “controlled unclassified information” and thus aligns with the National Archive’s recent final rule, external cloud services housing covered defense information must comply with certain FedRAMP security requirements, and subcontractors must notify their primes when requesting variances from the security controls of NIST Special Publication 800-171.
Contacts

Partner and Crowell Global Advisors Senior Director
- Washington, D.C.
- D | +1.202.624.2698
- Washington, D.C. (CGA)
- D | +1 202.624.2500
Insights
Client Alert | 7 min read | 06.24.26
On June 17, 2026, the U.S. Department of Justice’s (DOJ( National Security Division (NSD) announced that it had issued a declination for Robert Bosch GmbH (Bosch) relating to potential violations of the Export Control Reform Act, 50 U.S.C. § 4819 (ECRA). Specifically, the DOJ declined to criminally prosecute Bosch’s violations of the Export Administration Regulations’ (EAR) Foreign Direct Product Rule (FDPR), which apparently resulted from two Bosch subsidiaries’ export of products and software manufactured with equipment that was the direct product of U.S. software or technology to Huawei Technologies Co., Ltd. and its “Entity List” affiliates, including Huawei Tech. Investment Co., Ltd., Hong Kong (collectively, Huawei). The same day, the U.S. Department of Commerce Bureau of Industry and Security (BIS) announced a parallel civil administrative settlement with Bosch.
Client Alert | 3 min read | 06.24.26
Client Alert | 4 min read | 06.23.26
EPA Hands Over AI Data Center Regulation to States and Communities to Develop Best Practices
Client Alert | 3 min read | 06.22.26
