48 CFR § 24.302 - Contract clause.
(a) The contracting officer shall insert the clause at FAR 52.224-3, Privacy Training, in solicitations and contracts when, on behalf of the agency, contractor employees will -
(1) Have access to a system of records;
(2) Create, collect, use, process, store, maintain, disseminate, disclose, dispose, or otherwise handle personally identifiable information; or
(3) Design, develop, maintain, or operate a system of records.
(b) When an agency specifies that only its agency-provided training is acceptable, use the clause with its Alternate I.
The following state regulations pages link to this page.