Subcontract flowdown requirements Clause Samples

Subcontract flowdown requirements. Con- tractors shall flow down this clause to all subcontracts and purchase orders or other agreements and require that subcontractors incorporate this clause in their subcontracts, appropriately modified for identification of the parties. The Contractor shall enforce the terms of the clause, including action against its subcontractors, their employees and asso- ciates, or third-parties, for noncompliance. All subcontractors given access to any PII must agree to— (1) Abide by the clauses set forth herein, including, without limitation, provisions re- lating to compliance with data privacy standards for the Protection of Data about Individuals, Breach Notification Controls, and Notice of Security and/or Privacy Inci- dent; (2) Restrict use of PII only for subcontrac- tor’s internal business purposes and only as necessary to render services to Contractor in connection with Contractor’s performance of its obligations under the contract;

Subcontract flowdown requirements. The Contractor shall— (1) Include this clause, including this para- graph (o), in subcontracts, or similar con- tractual instruments, for operationally crit- ical support, or for which subcontract per- formance will involve DOT sensitive data, including subcontracts for commercial prod- ucts and commercial services, without alter- ation, except to identify the parties. The Contractor shall determine if the informa- tion required for subcontractor performance retains its identity as DOT sensitive data and will require protection under this clause, and, if necessary, consult with the Con- tracting Officer; and (2) Require subcontractors to— (i) Notify the prime Contractor (or next higher-tier subcontractor) when submitting a request to vary from a NIST SP 800–171, Rev. 2 security requirement to the Con- tracting Officer, in accordance with para- graph (b)(2)(iii) of this clause; and (ii) Provide the incident report number, automatically assigned by DOT, to the prime Contractor (or next higher-tier subcon- tractor) as soon as practicable, when report- ing a cyber incident to DOT as required in paragraph (c) of this clause. (End of clause) As prescribed in 1239.7104, insert the following clause: DOT Protection of Information About In- dividuals, PII, and Privacy Risk Manage- ment Requirements (NOV 2022)

Subcontract flowdown requirements. In addition to terms and conditions that are included in the prime contract which direct application of such terms and conditions in appropriate subcontracts, the Contractor shall include the following clauses in subcontracts, as applicable: (1) ▇▇▇▇▇-▇▇▇▇▇ clauses prescribed in 48 CFR 22.407. Los Alamos National Security, LLC Contract No. DE-AC52-06NA25396 Modification No. 259 Attachment 2 Page 7 of 7 (2) Foreign Travel clause prescribed in 48 CFR 952.247-70.

Subcontract flowdown requirements. Subcontractor agrees to flowdown any mandatory FAR and DFAR clauses of this Subcontract, and other sections of this Subcontract to lower tier subcontractors. Subcontractor agrees to furnish all information requested by Contractor respective to such subcontracts. If Subcontractor does not choose to pass these clauses down, it does not relieve Subcontractor of its responsibilities and obligations.