Code of Federal Regulations (Last Updated: April 5, 2024) |
Title 48 - Federal Acquisition Regulations System |
Chapter 8 - Department of Veterans Affairs |
SubChapter D - Socioeconomic Programs |
Part 824 - Protection of Privacy and Freedom of Information |
Subpart 824.1 - Protection of Individual Privacy |
§ 824.103-71 - Liquidated damages - protection of information.
- Link to an amendment published at
824.103-71 xxx
Cross Reference
Liquidated damages - protection of information.
(a) Purpose. As required by 38 U.S.C. 5725 any contracts where sensitive personal information such as PHI must be disclosed to the contractor for the contractor to perform certain functions or services on behalf of VHA shall include a liquidated damages clause as prescribed at 811.503-70.
(b) Applicability to contracts requiring Business Associate Agreements. A liquidated damages clause is required (see 811.503-70) when performance under a contract requires a contractor to enter into a Business Associate Agreement with VHA because the contractor or its subcontractor is required to create, receive, maintain, or transmit VHA PHI or that will store, generate, access, exchange, process, or utilize such PHI, for certain services or functions, on behalf of VHA. The liquidated damages clause shall be added even in situations where the prime contractor never directly receives VA's sensitive personal information and the same flows directly to the prime contractor's subcontractor.
[88 FR 4746, Jan. 25, 2023
.]