48 CFR · Federal Acquisition Regulation and Defense supplement

FAR and DFARS navigator

The codified text (eCFR, as of 2026-10-02). Under the Revolutionary FAR Overhaul ↗, agencies follow class deviations with new text for many parts while the formal rules go through the Federal Register: check the solicitation and your contract's clauses, which rule.

Ask the FAR

Try: · · ·

Clear

32 sections with “unauthorized disclosure”

  • DFARS 252.204-7014 Limitations on the Use or Disclosure of Information by Litigation Support Contractors.
    …ovided written consent to such disclosure; (3) Take all precautions necessary to prevent unauthorized disclosure of litigation information; (4) Not use litigation information to compete against a third party for Government or nongovernmen…
  • DFARS 252.227-7025 Limitations on the Use or Disclosure of Government-Furnished Information Marked with Restrictive Legends.
    … party whose name appears in the legend, release or disclose such data or software to any unauthorized person. (ii) If the Contractor is a covered Government support contractor, the Contractor is also subject to the additional terms and co…
  • FAR 3.104-4 Disclosure, protection, and marking of contractor bid or proposal information and source selection information.
    …actor bid or proposal information and source selection information must be protected from unauthorized disclosure in accordance with 14.401, 15.207, applicable law, and agency regulations. (c) Individuals unsure if particular information i…
  • DFARS 252.204-7009 Limitations on the Use or Disclosure of Third-Party Contractor Reported Cyber Incident Information.
    … (a) Definitions. As used in this clause— Compromise means disclosure of information to unauthorized persons, or a violation of the security policy of a system, in which unauthorized intentional or unintentional disclosure, modification, …
  • FAR 24.301 Privacy training.
    …ords or any other personally identifiable information; (4) The restriction on the use of unauthorized equipment to create, collect, use, process, store, maintain, disseminate, disclose, dispose, or otherwise access personally identifiable …
  • FAR 52.224-3 Privacy Training.
    …rds or any other personally identifiable information; (iv) The restriction on the use of unauthorized equipment to create, collect, use, process, store, maintain, disseminate, disclose, dispose or otherwise access personally identifiable i…
  • DFARS 252.239-7010 Cloud Computing Services.
    …e-as-a-service, and platform-as-a-service. Compromise means disclosure of information to unauthorized persons, or a violation of the security policy of a system, in which unauthorized intentional or unintentional disclosure, modification, …
  • FAR 23.106 Exemptions.
    …extent the Director determines necessary to protect intelligence sources and methods from unauthorized disclosure. (b) The head of an agency may exempt the following: (1) Particular agency activities and related personnel, resources, and …
  • FAR 27.404-5 Unauthorized, omitted, or incorrect markings.
    (a) Unauthorized marking of data. (1) The Government has, in accordance with paragraph (e) of the clause at 52.227-14, the right to either return data containing unauthorized markings or to cancel or ignore the markings. (2) Agencies shall…
  • DFARS 202.101 Definitions.
    … designs, formulas, and/or specifications. Compromise means disclosure of information to unauthorized persons, or a violation of the security policy of a system, in which unauthorized intentional or unintentional disclosure, modification, …
  • DFARS 227.7103-7 Use and nondisclosure agreement.
    …ecurity measures designed to protect these Data from inadvertent release or disclosure to unauthorized third parties. (3) The Recipient agrees to accept these Data “as is” without any Government representation as to suitability for intende…
  • DFARS 252.204-7012 Safeguarding Covered Defense Information and Cyber Incident Reporting.
    … measures that are commensurate with the consequences and probability of loss, misuse, or unauthorized access to, or modification of information. Compromise means disclosure of information to unauthorized persons, or a violation of the sec…
  • FAR 2.101 Definitions.
    …icted data following the procedures in 10 CFR 1045.21; and (2) Must be protected against unauthorized disclosure according to Executive Order 12958, Classified National Security Information, April 17, 1995, or classified in accordance with…
  • FAR 15.207 Handling proposals and information.
    …hall be transmitted to the designated officials. (b) Proposals shall be safeguarded from unauthorized disclosure throughout the source selection process. (See 3.104 regarding the disclosure of source selection information (41 U.S.C. chapte…
  • FAR 52.217-12 Reverse Auction Services.
    …icer to take all measures to protect Government data and Government-related data from any unauthorized disclosure. (4) Assert no right or license in the data gathered or generated during a reverse auction. Use Government-related data only …
  • FAR 52.227-14 Rights in Data—General.
    … action, in accordance with paragraphs (e) and (f) of this clause; and (iv) Protect from unauthorized disclosure and use those data that are limited rights data or restricted computer software to the extent provided in paragraph (g) of thi…
  • FAR 27.203-1 General.
    (a) Unauthorized disclosure of classified subject matter, whether in patent applications or resulting from the issuance of a patent, may be a violation of 18 U.S.C. 792, et seq. (Chapter 37—Espionage and Censorship), and related statutes, a…
  • DFARS 252.204-7003 Control of government personnel work product.
    …ent Personnel Work Product (APR 1992) The Contractor's procedures for protecting against unauthorized disclosure of information shall not require Department of Defense employees or members of the Armed Forces to relinquish control of their…
  • FAR 52.246-26 Reporting Nonconforming Items.
    …lications versus a single or peculiar application. Counterfeit item means an unlawful or unauthorized reproduction, substitution, or alteration that has been knowingly mismarked, misidentified, or otherwise misrepresented to be an authenti…
  • DFARS 204.7302 Policy.
    …oprietary information that is not customarily shared outside of the company, and that the unauthorized use or disclosure of such information could cause substantial competitive harm to the contractor that reported the information. The Gover…
  • FAR 4.802 Contract files.
    … or source selection information as defined in 2.101 must be protected from disclosure to unauthorized persons (see 3.104-4). (f) Agencies may retain contract files in any medium (paper, electronic, microfilm, etc.) or any combination of m…
  • FAR 9.505-4 Obtaining access to proprietary information.
    … for the Government must agree with the other companies to protect their information from unauthorized use or disclosure for as long as it remains proprietary and refrain from using the information for any purpose other than that for which …
  • FAR 14.503-1 Step one.
    …on receipt, the contracting officer shall— (1) Safeguard proposals against disclosure to unauthorized persons; (2) Accept and handle data marked in accordance with 15.609 as provided in that section; and (3) Remove any reference to price…
  • FAR 17.802 Policy.
    …ect the terms and conditions of a Government solicitation or contract; (4) Protects from unauthorized use or disclosure and does not release outside of the Government— (i) All contractor bid or proposal information (see 3.104-1) and sourc…
  • FAR 27.402 Policy.
    …o prevent the compromise of these interests, agencies shall protect proprietary data from unauthorized use and disclosure. The protection of such data is also necessary to encourage qualified contractors to participate in and apply innovati…
  • FAR 52.227-20 Rights in Data—SBIR Program.
    …ent purposes, but is relieved of all disclosure prohibitions and assumes no liability for unauthorized use of these data by third parties. This notice shall be affixed to any reproductions of these data, in whole or in part. (End of notice…
  • DFARS 204.7301 Definitions.
    … measures that are commensurate with the consequences and probability of loss, misuse, or unauthorized access to, or modification of information. Contractor attributional/proprietary information means information that identifies the contra…
  • DFARS 225.772-1 Definitions.
    …formation or information systems and any related consequences caused by or resulting from unauthorized access, use, disclosure, degradation, disruption, modification, or destruction of such information or information systems, including such…
  • DFARS 227.7108 Contractor data repositories.
    …te procedures for protecting technical data delivered to or stored at the repository from unauthorized release or disclosure; (2) Establish and maintain adequate procedures for controlling the release or disclosure of technical data from t…
  • DFARS 227.7203-5 Government rights.
    …ministrative burden associated with protecting documentation subject to restrictions from unauthorized release or disclosure. The negotiated license rights must stipulate the rights granted the Government to use, modify, reproduce, release,…
  • DFARS 252.225-7049 Prohibition on Acquisition of Certain Foreign Commercial Satellite Services—Representations.
    …formation or information systems and any related consequences caused by or resulting from unauthorized access, use, disclosure, degradation, disruption, modification, or destruction of such information or information systems, including such…
  • DFARS 252.227-7018 Rights in Other Than Commercial Technical Data and Computer Software—Small Business Innovation Research Program and Small Business Technology Transfer Program.
    …he time period during which the Government is obligated to protect SBIR/STTR data against unauthorized use and disclosure in accordance with SBIR/STTR data rights. The SBIR/STTR data protection period begins on the date of award of the cont…

FAR (chapter 1)

DFARS (chapter 2, Defense)

Source: eCFR, 48 CFR chapters 1 and 2 (GPO GovInfo bulk data) ↗. Rule changes in progress: FAR, DFARS. Terms: glossary.