2021-24299: VA Acquisition Regulation: Acquisition of Information Technology; and Other Contracts for Goods and Services Involving Information, VA Sensitive Information, and Information Security; and Liquidated Damages Requirements for Data Breach

Summary

The Department of Veterans Affairs (VA) is proposing to amend and update its VA Acquisition Regulation (VAAR) in phased increments to revise or remove any policy superseded by changes in the Federal Acquisition Regulation (FAR), to remove procedural guidance internal to VA into the VA Acquisition Manual (VAAM), and to incorporate any new agency specific regulations or policies. This rulemaking revises the VAAR by adding a part covering Acquisition of Information Technology and revising coverage concerning Other Contracts for Goods and Services involving mandatory information, privacy, and security requirements to include policy concerning VA Sensitive Personal Information, information security, and liquidated damages requirements for data breach in the following parts: Administrative and Information Matters; Describing Agency Needs; Protection of Privacy and Freedom of Information, as well as Acquisition of Commercial Items. It also revises affected parts concerning Definitions of Words and Terms, and Solicitation Provisions and Contract Clauses.

The agency’s own summary, as published.

What this changes

Amends 7 parts of the Code of Federal Regulations — the standing rules this notice rewrites.

• 48 CFR 802 Definitions of Words and Terms
• 48 CFR 804 Administrative and Information Matters
• 48 CFR 811 Describing Agency Needs
• 48 CFR 812 Acquisition of Commercial Products and Commercial Services
• 48 CFR 824 Protection of Privacy and Freedom of Information
• 48 CFR 839 Acquisition of Information Technology
• 48 CFR 852 Solicitation Provisions and Contract Clauses