48 CFR 324.103(c) and104
Listed by: DoD Registry, Related authorities
Designation evidence
- DoD authority row: 48 CFR 324.103(c) and104. DoD lists this citation for the category; this DoD detail page does not display a separate Basic/Specified field.
- Related authority evidence: DoD lists this authority for the category; the linked authority text is extracted below when available.
- Registry designation context: Specified, CUI//SP-CONTRACT. The linked authority text contains category-scope or applicability language that helps determine when the information falls within this CUI category. The linked authority text contains disclosure, access, protection, release, dissemination, or distribution-control language relevant to handling. The linked authority text contains violation, penalty, sanction, or enforcement language that may affect consequences for mishandling.
- Registry designation for this category is Specified with banner CUI//SP-CONTRACT.
Extracted authority meaning
- Subpart 324.70—Health Insurance Port-
- Registry designation context: Specified, CUI//SP-CONTRACT. The linked authority text contains category-scope or applicability language that helps determine when the information falls within this CUI category. The linked authority text contains disclosure, access, protection, release, dissemination, or distribution-control language relevant to handling. The linked authority text contains violation, penalty, sanction, or enforcement language that may affect consequences for mishandling.
Operating conditions
- DoD category scope used with this authority: The Privacy Act requirements apply when a contract or order requires the contractor to design, develop, or operate any Privacy Act system of records on individuals to accomplish an agency function.
- DoD lists this authority for the category; the linked authority text is extracted below when available.
- NARA registry status: Specified. Per-authority NARA status values: Specified. NARA banner marking evidence: CUI//SP-CONTRACT. The registry evidence is preserved here; detailed primary-law or regulation text analysis remains pending for this category.
- NARA category scope: Stipulations for a contractor to meet before material may be used in performance of certain contracts.
- DoD category scope: The Privacy Act requirements apply when a contract or order requires the contractor to design, develop, or operate any Privacy Act system of records on individuals to accomplish an agency function.
- Extracted authority condition: (a) The contracting officer shall in- sert the clause at 352.224–70, Privacy Act, in solicitations, contracts, and or- ders that require the design, develop- ment, or operation of a system of records to notify the contractor that it and its employees are subject to crimi- nal penalties for violations of the Pri- vacy Act (5 U.S.C. 552a(i)) to the same
- Extracted authority condition: (b) The contracting officer shall en- sure that the statement of work or per- formance work statement (SOW or PWS) specifies the system(s) of records or proposed system(s) of records to which the Privacy Act and the imple- menting regulations are applicable or may be applicable.
- Extracted authority condition: (c) The contracting officer shall en- sure that the contract SOW or PWS specifies for both the Privacy Act and the Federal Records Act the disposi- tion to be made of the system(s) of records upon completion of contract performance.
- Extracted authority condition: If there is a le- gitimate need for a contractor to keep copies of the records after completion of a contract, the contractor must take measures, as approved by the con- tracting officer, to keep the records confidential and protect the individ- uals’ privacy.
Safeguarding and dissemination controls
- DoD applicable policies: Hosted by Department of War Information Activity - WEB.mil, ![Image 2: Veterans Crisis Line number. Dial 988 then Press 1
- Nara basic or specified: Specified
- Nara authority rows: 48 CFR 324.103(c) | status: Specified | banner: CUI//SP-CONTRACT || 48 CFR 324.104 | status: Specified | banner: CUI//SP-CONTRACT
- Nara banner markings: CUI//SP-CONTRACT
- Dod applicable policies: Hosted by Department of War Information Activity - WEB.mil, ![Image 2: Veterans Crisis Line number. Dial 988 then Press 1
- No DoD required dissemination control is listed on the registry page. Apply approved limited dissemination controls only when required or permitted by the designating agency or governing authority.
- Use the registry assertions, NARA authority rows, DoD authorities, DoD policies, warning statements, required dissemination controls, and examples first. Where the cited authority does not specify a handling detail, apply CUI Basic safeguards and dissemination rules so long as they do not conflict with the authority or agency-specific controls.
- Extracted authority control: The contracting officer shall estab- lish the restrictions that govern the contractor employees’ access to Gov- ernment or third party information in order to protect the information from unauthorized use or disclosure.
- Extracted authority control: If there is a le- gitimate need for a contractor to keep copies of the records after completion of a contract, the contractor must take measures, as approved by the con- tracting officer, to keep the records confidential and protect the individ- uals’ privacy.
- Extracted authority control: Subpart 324.1—Protection of Individual Privacy 324.103 Procedures for the Privacy Act.
- Extracted authority control: 324.104 Restrictions on Contractor Ac- cess to Government or Third Party Information.
- Extracted authority control: (a) The contracting officer shall in- sert the clause at 352.224–70, Privacy Act, in solicitations, contracts, and or- ders that require the design, develop- ment, or operation of a system of records to notify the contractor that it and its employees are subject to crimi- nal penalties for violations of the Pri- vacy Act (5 U.S.C. 552a(i)) to the same
Authority excerpts
Most relevant extracted authority passage
The contracting officer shall estab- lish the restrictions that govern the contractor employees’ access to Gov- ernment or third party information in order to protect the information from unauthorized use or disclosure.
Extracted authority passage 2
If there is a le- gitimate need for a contractor to keep copies of the records after completion of a contract, the contractor must take measures, as approved by the con- tracting officer, to keep the records confidential and protect the individ- uals’ privacy.
Extracted authority passage 3
Subpart 324.1—Protection of Individual Privacy 324.103 Procedures for the Privacy Act.
Extracted authority passage 4
324.104 Restrictions on Contractor Ac- cess to Government or Third Party Information.
Extracted authority passage 5
(a) The contracting officer shall in- sert the clause at 352.224–70, Privacy Act, in solicitations, contracts, and or- ders that require the design, develop- ment, or operation of a system of records to notify the contractor that it and its employees are subject to crimi- nal penalties for violations of the Pri- vacy Act (5 U.S.C. 552a(i)) to the same
Extracted authority passage 6
(b) The contracting officer shall en- sure that the statement of work or per- formance work statement (SOW or PWS) specifies the system(s) of records or proposed system(s) of records to which the Privacy Act and the imple- menting regulations are applicable or may be applicable.