SpendQueryBeta

48 CFR · Federal Acquisition Regulation and Defense supplement

FAR and DFARS navigator

The codified text (eCFR, as of 2026-10-02). Under the Revolutionary FAR Overhaul ↗, agencies follow class deviations with new text for many parts while the formal rules go through the Federal Register: check the solicitation and your contract's clauses, which rule.

Ask the FAR

Try: · · ·

Clear

36 sections with “classified data”

  • FAR 8.608 Protection of classified and sensitive information.
    …all not enter into any contract with FPI that allows an inmate worker access to any— (a) Classified data; (b) Geographic data regarding the location of— (1) Surface and subsurface infrastructure providing communications or water or elect…
  • FAR 2.101 Definitions.
    …ssful performance of ongoing Federal operations. All advisory and assistance services are classified in one of the following definitional subdivisions: (1) Management and professional support services, i.e., contractual services that provi…
  • FAR 4.402 General.
    …ndustrial Security Program” (NISP), establishes a program to safeguard Federal Government classified information that is released to contractors, licensees, and grantees of the United States Government. Executive Order 12829 amends Executiv…
  • DFARS 252.204-7012 Safeguarding Covered Defense Information and Cyber Incident Reporting.
    …ublicly available without restrictions. Covered contractor information system means an unclassified information system that is owned, or operated by or for, a contractor and that processes, stores, or transmits covered defense information.…
  • DFARS 252.227-7037 Validation of Asserted Restrictions on Technical Data.
    …allenge notice and all related correspondence shall be subject to handling procedures for classified information and controlled unclassified information. Such challenge will— (i) State the specific grounds for challenging the asserted rest…
  • FAR 4.606 Reporting Data.
    …ise national security). (6) Contract actions in which the required data would constitute classified information. (7) Resale activity (i.e., commissary or exchange activity). (8) Revenue generating arrangements (i.e., concessions). (9) T…
  • FAR 27.404-4 Contractor's release, publication, and use of data.
    …ncies shall not place any restrictions on the conduct of or reporting on the results of unclassified basic or applied research, except as provided in applicable U.S. statutes. However, agencies may restrict the release or disclosure of comp…
  • FAR 52.211-2 Availability of Defense Specifications, Standards, and Data Item Descriptions in the Acquisition Streamlining and Standardization Information System (ASSIST) website.
    …reamlining and Standardization Information System (ASSIST) Website (SEP 2023) (a) Most unclassified Defense specifications and standards may be downloaded from the ASSIST website at https://assist.dla.mil. (b) Defense documents not availa…
  • FAR 4.2301 Definitions.
    …ederal or non-Federal information system, subject to the requirements of the Controlled Unclassified Information program (see 32 CFR part 2002); or (4) Hardware, systems, devices, software, or services that include embedded or incidental i…
  • FAR 5.102 Availability of solicitations.
    …i) Disclosure would compromise the national security (e.g., would result in disclosure of classified information, or information subject to export controls) or create other security risks. The fact that access to classified matter may be ne…
  • FAR 8.405-6 Limiting sources.
    …en disclosure would compromise the national security (e.g., would result in disclosure of classified information) or create other security risks. (b) Items peculiar to one manufacturer. An item peculiar to one manufacturer can be a particu…
  • DFARS 204.7301 Definitions.
    …ublicly available without restrictions. Covered contractor information system means an unclassified information system that is owned, or operated by or for, a contractor and that processes, stores, or transmits covered defense information.…
  • DFARS 252.245-7005 Management and Reporting of Government Property.
    …m's original identity, utility, form, fit, and function have been destroyed. Items can be classified as scrap if processed by cutting, tearing, crushing, mangling, shredding, or melting. Intact or recognizable components and parts are not “…
  • FAR 4.603 Policy.
    … the Federal Funding Accountability and Transparency Act of 2006 (Pub. L. 109-282), all unclassified Federal award data must be publicly accessible. (b) Executive agencies shall use FPDS to maintain publicly available information about all…
  • FAR 4.1102 Policy.
    …asing and payment mechanism, as opposed to using the purchase card for payment only; (2) Classified contracts (see 2.101) when registration in SAM, or use of SAM data, could compromise the safeguarding of classified information or national…
  • FAR 16.505 Ordering.
    …en disclosure would compromise the national security (e.g., would result in disclosure of classified information) or create other security risks. (D) The justification is subject to the screening requirement in paragraph (b)(2)(ii)(D)(4) o…
  • DFARS 227.7103-13 Government right to review, verify, challenge, and validate asserted restrictions.
    …allenge notice and all related correspondence shall be subject to handling procedures for classified information and controlled unclassified information. A contractor's or subcontractor's failure to respond to the challenge notice cannot be…
  • DFARS 232.7002 Policy.
    …s and receiving reports are required to be submitted in electronic form, except for— (1) Classified contracts or purchases when electronic submission and processing of payment requests and receiving reports could compromise the safeguardin…
  • DFARS 252.204-7009 Limitations on the Use or Disclosure of Third-Party Contractor Reported Cyber Incident Information.
    …is lawfully publicly available without restrictions. Covered defense information means unclassified controlled technical information or other information (as described in the Controlled Unclassified Information (CUI) Registry at http://www…
  • DFARS 252.239-7010 Cloud Computing Services.
    …within an information system. Spillage security incident that results in the transfer of classified or controlled unclassified information onto an information system not accredited (i.e., authorized) for the appropriate security level. (b…
  • DFARS 252.239-7016 Telecommunications security equipment, devices, techniques, and services.
    …, when employed by Government agencies, contractors, and subcontractors to transmit— (i) Classified or sensitive information; (ii) Matters involving intelligence activities, cryptologic activities related to national security, the command…
  • FAR 7.105 Contents of written acquisition plans.
    …see 11.002 and part 23). (18) Security considerations. (i) For acquisitions dealing with classified matters, discuss how adequate security will be established, maintained, and monitored (see subpart 4.4). (ii) For information technology a…
  • FAR 42.302 Contract administration functions.
    …n forms. (20) Ensure processing and execution of duty-free entry certificates. (21) For classified contracts, administer those portions of the applicable industrial security program delegated to the CAO (see Subpart 4.4). (22) Issue work…
  • FAR 42.1503 Procedures.
    …ll as any subsequent agency review of comments received. Past performance evaluations for classified contracts and special access programs shall not be reported in CPARS, but will be reported as stated in this subpart and in accordance with…
  • FAR 52.204-10 Reporting Executive Compensation and First-Tier Subcontract Awards.
    …d information will be made public. (c) Nothing in this clause requires the disclosure of classified information. (d)(1) Executive compensation of the prime contractor. As a part of its annual registration requirement in the System for Awa…
  • FAR 52.204-21 Basic Safeguarding of Covered Contractor Information Systems.
    …information systems generally or other Federal safeguarding requirements for controlled unclassified information (CUI) as established by Executive Order 13556. (c) Subcontracts. The Contractor shall include the substance of this clause, in…
  • DFARS 204.270-1 Policy.
    …. Contract attachments shall be uploaded to EDA, except for contract attachments that are classified, are too sensitive for widespread distribution (e.g., personally identifiable information and Privacy Act and Health Insurance Portability …
  • DFARS 204.802 Contract files.
    …iple parties, including the contractor. Do not include in EDA contract documents that are classified, too sensitive for widespread distribution (e.g., personally identifiable information and Privacy Act and Health Insurance Portability and …
  • DFARS 204.7302 Policy.
    …nment personnel using NIST SP 800-171A, “Assessing Security Requirements for Controlled Unclassified Information.” (5) The NIST SP 800-171 DoD Assessment will not duplicate efforts from any other DoD assessment or the Cybersecurity Maturit…
  • DFARS 204.7401 Definitions.
    … Information by Litigation Support Contractors. Sensitive information means controlled unclassified information of a commercial, financial, proprietary, or privileged nature. The term includes technical data and computer software, but does…
  • DFARS 217.207 Exercise of options.
    …ion systems that process, store, or transmit Federal contract information or controlled unclassified information (see 204.7503(c)).
  • DFARS 225.7603 Exceptions.
    …pertaining to the use of any equipment, technology, data, or services for intelligence or classified purposes, or to the acquisition or lease thereof, in the interest of national security.
  • DFARS 239.7301 Definitions.
    …horized under criteria established by an Executive order or an Act of Congress to be kept classified in the interest of national defense or foreign policy. Information technology (see 40 U.S.C 11101(6)) means, in lieu of the definition at …
  • DFARS 252.204-7014 Limitations on the Use or Disclosure of Information by Litigation Support Contractors.
    …ort under a contract that contains this clause. Sensitive information means controlled unclassified information of a commercial, financial, proprietary, or privileged nature. The term includes technical data and computer software, but does…
  • DFARS 252.204-7015 Notice of Authorized Disclosure of Information for Litigation Support.
    … Information by Litigation Support Contractors. Sensitive information means controlled unclassified information of a commercial, financial, proprietary, or privileged nature. The term includes technical data and computer software, but does…
  • DFARS 252.209-7002 Disclosure of Ownership or Control by a Foreign Government.
    …OMSEC) material, excluding controlled cryptographic items when unkeyed or utilized with unclassified keys; (iii) Restricted Data as defined in the U.S. Atomic Energy Act of 1954, as amended; (iv) Special Access Program (SAP) information; …

FAR (chapter 1)

DFARS (chapter 2, Defense)

Source: eCFR, 48 CFR chapters 1 and 2 (GPO GovInfo bulk data) ↗. Rule changes in progress: FAR, DFARS. Terms: glossary.