25QE024_ATTACH6_PRIVCHECKLIST_012825.pdf

The document is a Department of Defense Education Activity (DoDEA) Privacy Checklist from December 2022, designed to ensure privacy and data protection compliance for contractors working with DoDEA. The checklist outlines several key privacy and security requirements, including:

Contractors must comply with the Privacy Act of 1974, complete a Privacy Impact Assessment, provide initial and annual privacy training to employees, and develop procedures for notifying and assisting individuals in case of a data breach. The document also includes specific prohibitions on acquiring hardware, software, or services from Russian-based Kaspersky Labs and from China, reflecting current national security considerations. Contractors must report any such discoveries before or during contract performance and are limited in how they can use, process, store, and disclose personally identifiable information (PII) during the course of their work with DoDEA.