48 CFR § 839.106-70 - 839.106-70 Information security and privacy contract clauses.

---
identifier: "/us/cfr/t48/s839.106-70"
source: "ecfr"
legal_status: "authoritative_unofficial"
title: "48 CFR § 839.106-70 - 839.106-70   Information security and privacy contract clauses."
title_number: 48
title_name: "Federal Acquisition Regulations System"
section_number: "839.106-70"
section_name: "839.106-70   Information security and privacy contract clauses."
chapter_number: 8
chapter_name: "DEPARTMENT OF VETERANS AFFAIRS"
subchapter_number: "F"
subchapter_name: "SPECIAL CATEGORIES OF CONTRACTING"
part_number: "839"
part_name: "ACQUISITION OF INFORMATION TECHNOLOGY"
positive_law: false
currency: "2026-03-24"
last_updated: "2026-03-24"
format_version: "1.1.0"
generator: "[email protected]"
authority: "38 U.S.C. 5723-5724, 5725(a)-(c); 40 U.S.C. 121(c), 11319(b)(1)(C); 41 U.S.C. 1121(c)(3), 1303 and 1702; and 48 CFR 1.301 through 1.304."
regulatory_source: "88 FR 4746, Jan. 25, 2023, unless otherwise noted."
cfr_part: "839"
---


# 839.106-70 839.106-70   Information security and privacy contract clauses.

(a) Contracting officers shall insert the clause at 852.239-70, Security Requirements for Information Technology Resources, and the clause at 852.239-71, Information System Security Plan and Accreditation, in all solicitations, contracts, and orders exceeding the micro-purchase threshold that include information technology services.

(b) Contracting officers shall insert the clause at 852.239-72, Information System Design and Development, in solicitations, contracts, orders, and agreements where services to perform information system design and development are required.

(c) Contracting officers shall insert the clause at 852.239-73, Information System Hosting, Operation, Maintenance or Use, in solicitations, contracts, orders, and agreements where services to perform information system hosting, operation, maintenance, or use are required.

(d) Contracting officers shall insert the clause at 852.239-74, Security Controls Compliance Testing, in solicitations, contracts, orders, and agreements, when the clause at 852.239-72 or 852.239-73 is inserted.