48 CFR · Federal Acquisition Regulation and Defense supplement

FAR and DFARS navigator

The codified text (eCFR, as of 2026-10-02). Under the Revolutionary FAR Overhaul ↗, agencies follow class deviations with new text for many parts while the formal rules go through the Federal Register: check the solicitation and your contract's clauses, which rule.

Ask the FAR

Try: · · ·

Clear

9 sections with “Personally identifiable information”

  • FAR 24.301 Privacy training.
    …llect, use, process, store, maintain, disseminate, disclose, dispose, or otherwise handle personally identifiable information on behalf of the agency; or (3) Design, develop, maintain, or operate a system of records (see FAR subpart 24.1 a…
  • FAR 52.224-3 Privacy Training.
    …e following clause: Privacy Training (JAN 2017) (a) Definition. As used in this clause, personally identifiable information means information that can be used to distinguish or trace an individual's identity, either alone or when combined…
  • DFARS 252.204-7012 Safeguarding Covered Defense Information and Cyber Incident Reporting.
    … can be traced back to the contractor(s) (e.g., program description, facility locations), personally identifiable information, as well as trade secrets, commercial or financial information, or other commercially sensitive information that i…
  • FAR 24.101 Definitions.
    …ning the system of records, including the collection, use, and dissemination of records. Personally identifiable information means information that can be used to distinguish or trace an individual's identity, either alone or when combined…
  • FAR 24.302 Contract clause.
    …llect, use, process, store, maintain, disseminate, disclose, dispose, or otherwise handle personally identifiable information; or (3) Design, develop, maintain, or operate a system of records. (b) When an agency specifies that only its ag…
  • FAR 27.405-1 Special works.
    …volve research, development, or experimental work; (6) The collection of data containing personally identifiable information such that the disclosure thereof would violate the right of privacy or publicity of the individual to whom the inf…
  • DFARS 204.270-1 Policy.
    …act attachments that are classified, are too sensitive for widespread distribution (e.g., personally identifiable information and Privacy Act and Health Insurance Portability and Accountability Act, or cannot be practicably converted to ele…
  • DFARS 204.802 Contract files.
    … contract documents that are classified, too sensitive for widespread distribution (e.g., personally identifiable information and Privacy Act and Health Insurance Portability and Accountability Act), or attachments that cannot be practicabl…
  • DFARS 204.7301 Definitions.
    … can be traced back to the contractor(s) (e.g., program description, facility locations), personally identifiable information, as well as trade secrets, commercial or financial information, or other commercially sensitive information that i…

FAR (chapter 1)

DFARS (chapter 2, Defense)

Source: eCFR, 48 CFR chapters 1 and 2 (GPO GovInfo bulk data) ↗. Rule changes in progress: FAR, DFARS. Terms: glossary.