Privacy for Everyone! New FAR Rule Imposes Mandatory Training Requirements for Employees Handling PII
Client Alert | less than 1 min read | 12.28.16
After years of consideration, DoD, GSA, and NASA have published a final rule requiring contractor employees who handle personally identifiable information (PII) or work with a system of records to complete initial and annual privacy training that addresses specified elements, including the Privacy Act, working with PII, and the contractor’s incident response plan. The final rule – effective January 19, 2017, and applicable to all contracts including those for commercial items and those below the Simplified Acquisition Threshold – also requires contractors to identify each covered employee, maintain records indicating that its employees have completed the requisite training, and to provide these records to contracting officers upon request.
Contacts
Partner and Crowell Global Advisors Senior Director
- Washington, D.C.
- D | +1.202.624.2698
- Washington, D.C. (CGA)
- D | +1 202.624.2500
Insights
Client Alert | 3 min read | 08.03.26
On July 20, 2026, New Jersey Governor Mikie Sherrill signed the Forbidding the Algorithmic Inflation of Rent (FAIR) Act into law, making New Jersey the fourth state to regulate algorithmic rent-setting practices. Three days later, on July 23, 2026, Governor Sherrill signed the Fair Price Protection Act, which targets “surveillance pricing”—the practice of using or collecting personal data about a user and using an algorithm or artificial intelligence to charge different consumers different prices for the same products. Together, these laws represent a significant expansion of New Jersey's consumer protection framework in the algorithmic pricing context.
Client Alert | 2 min read | 08.03.26
New York Becomes First State to Restrict Addictive Social Media Features for Minors
Client Alert | 4 min read | 08.03.26
Client Alert | 6 min read | 08.03.26
The Pipe, Not the Posts: How Section 230’s Protections Extend to Generative AI Platforms
