48 C.F.R. PART 24—PROTECTION OF PRIVACY AND FREEDOM OF INFORMATION
Title 48 - Federal Acquisition Regulations System
Authority: 40 U.S.C. 121(c); 10 U.S.C. chapter 137; and 42 U.S.C. 2473(c).
Source: 48 FR 42277, Sept. 19, 1983, unless otherwise noted.
This part prescribes policies and procedures that apply requirements of the Privacy Act of 1974 (5 U.S.C. 552a) (the Act) and OMB Circular No. A-130, December 12, 1985, to Government contracts and cites the Freedom of Information Act (5 U.S.C. 552, as amended.) [48 FR 42277, Sept. 19, 1983, as amended at 55 FR 38517, Sept. 18, 1990] As used in this subpart— Agency means any executive department, military department, Government corporation, Government controlled corporation, or other establishment in the executive branch of the Government (including the Executive Office of the President), or any independent regulatory agency. Individual means a citizen of the United States or an alien lawfully admitted for permanent residence. Maintain means maintain, collect, use, or disseminate. Operation of a system of records means performance of any of the activities associated with maintaining the system of records, including the collection, use, and dissemination of records. Record means any item, collection, or grouping of information about an individual that is maintained by an agency, including, but not limited to, education, financial transactions, medical history, and criminal or employment history, and that contains the individual's name, or the identifying number, symbol, or other identifying particular assigned to the individual, such as a fingerprint or voiceprint or a photograph. System of records on individuals means a group of any records under the control of any agency from which information is retrieved by the name of the individual or by some identifying number, symbol, or other identifying particular assigned to the individual. [48 FR 42277, Sept. 19, 1983, as amended at 66 FR 2130, Jan. 10, 2001] (a) The Act requires that when an agency contracts for the design, development, or operation of a system of records on individuals on behalf of the agency to accomplish an agency function the agency must apply the requirements of the Act to the contractor and its employees working on the contract. (b) An agency officer or employee may be criminally liable for violations of the Act. When the contract provides for operation of a system of records on individuals, contractors and their employees are considered employees of the agency for purposes of the criminal penalties of the Act. (c) If a contract specifically provides for the design, development, or operation of a system of records on individuals on behalf of an agency to accomplish an agency function, the agency must apply the requirements of the Act to the contractor and its employees working on the contract. The system of records operated under the contract is deemed to be maintained by the agency and is subject to the Act. (d) Agencies, which within the limits of their authorities, fail to require that systems of records on individuals operated on their behalf under contracts be operated in conformance with the Act may be civilly liable to individuals injured as a consequence of any subsequent failure to maintain records in conformance with the Act. (a) The contracting officer shall review requirements to determine whether the contract will involve the design, development, or operation of a system of records on individuals to accomplish an agency function. (b) If one or more of those tasks will be required, the contracting officer shall— (1) Ensure that the contract work statement specifically identifies the system of records on individuals and the design, development, or operation work to be performed; and (2) Make available, in accordance with agency procedures, agency rules and regulation implementing the Act. When the design, development, or operation of a system of records on individuals is required to accomplish an agency function, the contracting officer shall insert the following clauses in solicitations and contracts: (a) The clause at 52.224–1, Privacy Act Notification. (b) The clause at 52.224–2, Privacy Act. The Freedom of Information Act (5 U.S.C. 552, as amended) provides that information is to be made available to the public either by (a) publication in the (a) A proposal in the possession or control of the Government, submitted in response to a competitive solicitation, shall not be made available to any person under the Freedom of Information Act. This prohibition does not apply to a proposal, or any part of a proposal, that is set forth or incorporated by reference in a contract between the Government and the contractor that submitted the proposal. (See 10 U.S.C. 2305(g) and 41 U.S.C. 253b(m).) (b) No agency shall disclose any information obtained pursuant to 15.403–3(b) that is exempt from disclosure under the Freedom of Information Act. (See 10 U.S.C. 2306a(d)(2)(C) and 41 U.S.C. 254b(d)(2)(C).) (c) A dispute resolution communication that is between a neutral person and a party to alternative dispute resolution proceedings, and that may not be disclosed under 5 U.S.C. 574, is exempt from disclosure under the Freedom of Information Act (5 U.S.C. 552(b)(3)). [62 FR 257, Jan. 2, 1997, as amended at 62 FR 51270, Sept. 30, 1997; 63 FR 58594, Oct. 30, 1998; 68 FR 56689, Oct. 1, 2003] (a) The Act specifies, among other things, how agencies shall make their records available upon public request, imposes strict time standards for agency responses, and exempts certain records from public disclosure. Each agency's implementation of these requirements is located in its respective title of the Code of Federal Regulations and referenced in subpart 24.2 of its implementing acquisition regulations. (b) Contracting officers may receive requests for records that may be exempted from mandatory public disclosure. The exemptions most often applicable are those relating to classified information, to trade secrets and confidential commercial or financial information, to interagency or intra-agency memoranda, or to personal and medical information pertaining to an individual. Since these requests often involve complex issues requiring an in-depth knowledge of a large and increasing body of court rulings and policy guidance, contracting officers are cautioned to comply with the implementing regulations of their agency and to obtain necessary guidance from the agency officials having Freedom of Information Act responsibility. If additional assistance is needed, authorized agency officials may contact the Department of Justice, Office of Information and Privacy. [48 FR 42277, Sept. 19, 1983, as amended at 51 FR 31426, Sept. 3, 1986. Redesignated at 62 FR 257, Jan. 2, 1997]
Title 48: Federal Acquisition Regulations System
PART 24—PROTECTION OF PRIVACY AND FREEDOM OF INFORMATION
Section Contents
24.000 Scope of part.
24.101 Definitions.
24.102 General.
24.103 Procedures.
24.104 Contract clauses.
24.201 Authority.
24.202 Prohibitions.
24.203 Policy.
24.000 Scope of part.
top
Subpart 24.1—Protection of Individual Privacy
top
24.101 Definitions.
top
24.102 General.
top
24.103 Procedures.
top
24.104 Contract clauses.
top
Subpart 24.2—Freedom of Information Act
top
24.201 Authority.
top
24.202 Prohibitions.
top
24.203 Policy.
top
