FAR and DFARS › DFARS Part 227: Patents, Data, and Copyrights › Subpart 227.71

DFARS 227.7103-7 Use and nondisclosure agreement.

The codified text (eCFR, as of 2026-10-02). Under the Revolutionary FAR Overhaul ↗, agencies follow class deviations with new text for many parts while the formal rules go through the Federal Register: check the solicitation and your contract's clauses, which rule.

In plain English

This DFARS section requires that before the Government releases certain restricted technical data or computer software to a third party, the intended recipient must sign a use and nondisclosure agreement. The agreement limits how the recipient can use, modify, reproduce, release, perform, display, or disclose the data, and it imposes obligations like protecting the data, notifying the contractor, and destroying the data after a set period. Contractors should understand this because it governs how their proprietary or restricted data may be shared with others and what protections apply.

Applies to: Third parties receiving restricted technical data or computer software from the Government, and Government contractors seeking access to such data.

What it requires

  • Sign the use and nondisclosure agreement before receiving the data.
  • Use, modify, reproduce, release, perform, display, or disclose the data only as permitted in the agreement.
  • Adopt operating procedures and physical security measures to protect the data from unauthorized release.
  • Destroy the data and all copies within 30 days after the agreement's end date and notify the contractor.

Key terms: technical data · computer software · use and nondisclosure agreement · government purpose rights · SBIR/STTR data rights

Written by AI from this section's text. A guide, not legal advice: the text below rules.

The text

(a) Except as provided in paragraph (b) of this section, technical data or computer software delivered to the Government with restrictions on use, modification, reproduction, release, performance, display, or disclosure may not be provided to third parties, unless the intended recipient completes and signs the use and nondisclosure agreement at paragraph (c) of this section prior to release or disclosure of the data.

(1) The specific conditions under which an intended recipient will be authorized to use, modify, reproduce, release, perform, display, or disclose technical data subject to limited rights or SBIR/STTR data rights, or computer software subject to restricted rights or SBIR/STTR data rights must be stipulated in an attachment to the use and nondisclosure agreement.

(2) For an intended release, disclosure, or authorized use of technical data or computer software subject to special license rights, modify paragraph (1)(d) of the use and nondisclosure agreement in paragraph (c) of this section to enter the conditions, consistent with the license requirements, governing the recipient's obligations regarding use, modification, reproduction, release, performance, display, or disclosure of the data or software.

(b) The requirement for use and nondisclosure agreements does not apply to Government contractors which require access to a third party's data or software for the performance of a Government contract that contains the clause at 252.227-7025, Limitations on the Use or Disclosure of Government-Furnished Information Marked with Restrictive Legends.

(c) The prescribed use and nondisclosure agreement is:

Use and NonDisclosure Agreement

The undersigned, ________________ (Insert Name) ________________, an authorized representative of the ________________ (Insert Company Name) ________________, (which is hereinafter referred to as the “Recipient”) requests the Government to provide the Recipient with technical data or computer software (hereinafter referred to as “Data”) in which the Government's use, modification, reproduction, release, performance, display or disclosure rights are restricted. Those Data are identified in an attachment to this Agreement. In consideration for receiving such Data, the Recipient agrees to use the Data strictly in accordance with this Agreement:

(1) The Recipient shall—

(a) Use, modify, reproduce, release, perform, display, or disclose Data marked with government purpose rights or SBIR/STTR data rights legends (after expiration of the SBIR/STTR data protection period provided in the SBIR/STTR data rights legend) only for government purposes and shall not do so for any commercial purpose. The Recipient shall not release, perform, display, or disclose these Data, without the express written permission of the contractor whose name appears in the restrictive legend (the “Contractor”), to any person other than its subcontractors or suppliers, or prospective subcontractors or suppliers, who require these Data to submit offers for, or perform, contracts with the Recipient. The Recipient shall require its subcontractors or suppliers, or prospective subcontractors or suppliers, to sign a use and nondisclosure agreement prior to disclosing or releasing these Data to such persons. Such agreement must be consistent with the terms of this agreement.

(b) Use, modify, reproduce, release, perform, display, or disclose technical data marked with limited rights legends or SBIR/STTR data rights legends only as specified in the attachment to this Agreement. Release, performance, display, or disclosure to other persons is not authorized unless specified in the attachment to this Agreement or expressly permitted in writing by the Contractor. The Recipient shall promptly notify the Contractor of the execution of this Agreement and identify the Contractor's Data that has been or will be provided to the Recipient, the date and place the Data were or will be received, and the name and address of the Government office that has provided or will provide the Data.

(c) Use computer software marked with restricted rights or SBIR/STTR data rights legends only in performance of Contract Number ____[insert contract number(s))]. The recipient shall not, for example, enhance, decompile, disassemble, or reverse engineer the software; time share, or use a computer program with more than one computer at a time. The recipient may not release, perform, display, or disclose such software to others unless expressly permitted in writing by the licensor whose name appears in the restrictive legend. The Recipient shall promptly notify the software licensor of the execution of this Agreement and identify the software that has been or will be provided to the Recipient, the date and place the software were or will be received, and the name and address of the Government office that has provided or will provide the software.

(d) Use, modify, reproduce, release, perform, display, or disclose Data marked with special license rights legends. [To be completed by the contracting officer. See 227.7103-7(a)(2). Omit if none of the data requested is marked with special license rights legends.]

(2) The Recipient agrees to adopt or establish operating procedures and physical security measures designed to protect these Data from inadvertent release or disclosure to unauthorized third parties.

(3) The Recipient agrees to accept these Data “as is” without any Government representation as to suitability for intended use or warranty whatsoever. This disclaimer does not affect any obligation the Government may have regarding Data specified in a contract for the performance of that contract.

(4) The Recipient may enter into any agreement directly with the Contractor with respect to the use, modification, reproduction, release, performance, display, or disclosure of these Data.

(5) The Recipient agrees to indemnify and hold harmless the Government, its agents, and employees from every claim or liability, including attorneys' fees, court costs, and expenses arising out of, or in any way related to, the misuse or unauthorized modification, reproduction, release, performance, display, or disclosure of Data received from the Government with restrictive legends by the Recipient or any person to whom the Recipient has released or disclosed the Data.

(6) The Recipient is executing this Agreement for the benefit of the Contractor. The Contractor is a third party beneficiary of this Agreement who, in addition to any other rights it may have, is intended to have the rights of direct action against the Recipient or any other person to whom the Recipient has released or disclosed the Data, to seek damages from any breach of this Agreement or to otherwise enforce this Agreement.

(7) The Recipient agrees to destroy these Data, and all copies of the Data in its possession, no later than 30 days after the date shown in paragraph (8) of this Agreement, to have all persons to whom it released the Data do so by that date, and to notify the Contractor that the Data have been destroyed.

(8) This Agreement shall be effective for the period commencing with the Recipient's execution of this Agreement and ending upon ________ (Insert Date) ________. The obligations imposed by this Agreement shall survive the expiration or termination of the Agreement.

Authorized Representative

Date

(End of use and nondisclosure agreement)

Sections it refers to

  • 252.227-7025 Limitations on the Use or Disclosure of Government-Furnished Information Marked with Restrictive Legends.

Sections that refer to it

  • 209.505-4 Obtaining access to proprietary information.
  • 227.7103-5 Government rights.
  • 227.7103-16 Providing technical data to foreign governments, foreign contractors, or international organizations.
  • 227.7108 Contractor data repositories.
  • 227.7203-5 Government rights.
  • 227.7203-16 Providing computer software or computer software documentation to foreign governments, foreign contractors, or international organizations.
  • 252.227-7013 Rights in Technical Data—Other Than Commercial Products and Commercial Services.
  • 252.227-7014 Rights in Other Than Commercial Computer Software and Other Than Commercial Computer Software Documentation.
  • 252.227-7018 Rights in Other Than Commercial Technical Data and Computer Software—Small Business Innovation Research Program and Small Business Technology Transfer Program.
  • 252.227-7019 Validation of Asserted Restrictions—Computer Software.
  • 252.227-7025 Limitations on the Use or Disclosure of Government-Furnished Information Marked with Restrictive Legends.

← 227.7103-6 Contract clauses. · 227.7103-8 Deferred delivery and deferred ordering of technical data. →

Rule changes for DFARS Part 227

Source: eCFR, 48 CFR chapters 1 and 2 (GPO GovInfo bulk data) ↗. Plain words for the terms: glossary.

DFARS 227.7103-7 Use and nondisclosure agreement · SpendQuery