SF_30_Block_14_Continuation_Page.pdf

HSCG23-17-R-MCM022

Amendment 0001

SF 30 Block 14 Continuation Page

52.224-3 Privacy Training – Alternate I (DEVIATION) DHS FAR Class Deviation 17-03

(a) Definition. As used in this clause, personally identifiable information means information that can be used to distinguish or trace an individual’s identity, either alone or when combined with other information that is linked or linkable to a specific individual. (See Office of Management and Budget (OMB) Circular A–130, Managing Federal Information as a Strategic Resource).

(b) The Contractor shall ensure that initial privacy training, and annual privacy training thereafter, is completed by contractor employees who—

(1) Have access to a system of records;

(2) Create, collect, use, process, store, maintain, disseminate, disclose, dispose, or otherwise handle personally identifiable information on behalf of an agency; or

(3) Design, develop, maintain, or operate a system of records (see also FAR subpart 24.1 and 39.105).

(c) The contracting agency will provide initial privacy training, and annual privacy training thereafter, to Contractor employees for the duration of this contract. Contractor employees shall satisfy this requirement by completing Privacy at DHS: Protecting Personal Information accessible at http://www.dhs.gov/dhs-security-and-training-requirements-contractors. Training shall be completed within 30 days of contract award and be completed on an annual basis thereafter not later than October 31st of each year.

(d) The Contractor shall maintain and, upon request, provide documentation of completion of privacy training to the Contracting Officer.

(e) The Contractor shall not allow any employee access to a system of records, or permit any employee to create, collect, use, process, store, maintain, disseminate, disclose, dispose or otherwise handle personally identifiable information, or to design, develop, maintain, or operate a system of records unless the employee has completed privacy training, as required by this clause.

(f) The substance of this clause, including this paragraph (f), shall be included in all subcontracts under this contract, when subcontractor employees will—

(1) Have access to a system of records;

(2) Create, collect, use, process, store, maintain, disseminate, disclose, dispose, or otherwise handle personally identifiable information; or

(3) Design, develop, maintain, or operate a system of records.

(End of Clause)

3. Replace RFP, Section A, pages 13-28 with the attached replacement pages Amendment 0001 13 thru 29.

Changes are annotated with a bar mark in the right margin.

4. The hour and date specified in the RFP, of August 18, 2017 at 2:00 pm ET, for receipt of offers, has NOT been extended.

http://www.dhs.gov/dhs-security-and-training-requirements-contractors

HSCG23-17-R-MCM022

Amendment 0001

5. Offerors shall acknowledge receipt of the amendment in accordance with the RFP FAR Clause 52.212-1, Instructions to Offerors- Commercial Items (Jan 2017).

End of Amendment 0001