48 CFR § 1239.7104 - 1239.7104 Contract clause.

---
identifier: "/us/cfr/t48/s1239.7104"
source: "ecfr"
legal_status: "authoritative_unofficial"
title: "48 CFR § 1239.7104 - 1239.7104   Contract clause."
title_number: 48
title_name: "Federal Acquisition Regulations System"
section_number: "1239.7104"
section_name: "1239.7104   Contract clause."
chapter_number: 12
chapter_name: "DEPARTMENT OF TRANSPORTATION"
subchapter_number: "F"
subchapter_name: "SPECIAL CATEGORIES OF CONTRACTING"
part_number: "1239"
part_name: "ACQUISITION OF INFORMATION TECHNOLOGY"
positive_law: false
currency: "2026-03-24"
last_updated: "2026-03-24"
format_version: "1.1.0"
generator: "[email protected]"
authority: "5 U.S.C. 301; 41 U.S.C. 1121(c)(3); 41 U.S.C. 1702; and 48 CFR 1.301 through 1.304."
regulatory_source: "87 FR 61159, Oct. 7, 2022, unless otherwise noted."
cfr_part: "1239"
---


# 1239.7104 1239.7104   Contract clause.

The contracting officer shall insert the clause at 1252.239-75, DOT Protection of Information About Individuals, PII and Privacy Risk Management Requirements, in solicitations and contracts involving contractor performance of data protection functions and for contracts involving the design, development, or operation of an information system with access to personally identifiable information as described in DOT Order 1351.18, Privacy Risk Management, and DOT Order 1351.37, Departmental Cyber Security Policy.