Privacy for Everyone! New FAR Rule Imposes Mandatory Training Requirements for Employees Handling PII
Client Alert | less than 1 min read | 12.28.16
After years of consideration, DoD, GSA, and NASA have published a final rule requiring contractor employees who handle personally identifiable information (PII) or work with a system of records to complete initial and annual privacy training that addresses specified elements, including the Privacy Act, working with PII, and the contractor’s incident response plan. The final rule – effective January 19, 2017, and applicable to all contracts including those for commercial items and those below the Simplified Acquisition Threshold – also requires contractors to identify each covered employee, maintain records indicating that its employees have completed the requisite training, and to provide these records to contracting officers upon request.
Contacts
Partner, Crowell Global Advisors Senior Director
Insights
Client Alert | 15 min read | 08.20.25
In this eighth alert in our weekly series on the EU Pharma Package, we continue our overview of initiatives with respect to security of supply and shortage prevention and mitigation. Our last alert looked at how the Pharma Package seeks to address these issues. However, the Pharma Package does not exist in isolation, and in this alert we will discuss the interplay between its measures and those contained in other important EU initiatives such as the proposed Critical Medicines Act (CMA), and the Medicinal Countermeasures Strategy and the EU Stockpiling Strategy.
Client Alert | 2 min read | 08.19.25
Client Alert | 4 min read | 08.19.25
Forged Faces, Real Liability: Deepfake Laws Take Effect in Washington State and Pennsylvania
Client Alert | 1 min read | 08.19.25
