Beginning January 19, federal government contracts will contain additional training requirements for contractors who deal with personally identifiable information (PII) or with a system of records.
Affected contractors must provide privacy training to their employees, and be prepared to provide documentation of the training to the appropriate contracting officer. Contractors also must ensure that their employees not access PII or a system of records prior to completing the training. Finally, contractors will be required to flow down this training requirement to their subcontractors.
The substance of the new rule, which will be FAR 52.224-3, may be found here.