25QE044_Attachment_5_Privacy Checklist.pdf

This document is a Department of Defense Education Activity (DoDEA) Privacy Checklist dated December 2022, which outlines critical privacy and data handling requirements for contractors working with DoDEA. The checklist mandates multiple compliance obligations, including: adhering to the Privacy Act of 1974, completing a Privacy Impact Assessment, providing initial and annual privacy training for employees, developing procedures for notifying individuals in case of data breaches, and strictly controlling the transfer and use of Personally Identifiable Information (PII).

The document also includes specific prohibitions related to procurement, such as restrictions on acquiring hardware, software, or services from Russia-based Kaspersky Labs and limitations on procuring telecom or video equipment from China. Contractors must report any such discoveries before or during contract performance. The checklist requires an authorized representative's signature, certifying understanding of the privacy and data protection requirements, and serves as a formal acknowledgment of DoDEA's privacy guidelines for contractors involved in the K-12 Visual Arts Resource and Professional Learning Platform contract.