41 CFR 105-64.108
§ 105-64.108 How does GSA safeguard personal information?
United States · 41 CFR — Public Contracts and Property Management · Status: effective
Cite this
- Citation
- 41 CFR 105-64.108, § 105-64.108 How does GSA safeguard personal information?, United States, version 1 as recorded 2026-07-09, yourstate.us, https://yourstate.us/provision/198774
- Permanent ID
ys:prov:198774@1- SHA-256
4ba10c4b76c13244361b1843929f86b99bb91ae98b4f95d5b7e368a0906a860f
The hash is SHA-256 of this version's text, with every run of whitespace collapsed to a single space and the ends trimmed. The ID always leads back here, and checking it says whether the text you cited is still the current version.
Full text
(a) System managers will establish administrative, technical, and physical safeguards to ensure the security and confidentiality of records, protect the records against possible threats or hazards, and permit access only to authorized persons. Automated systems will incorporate security controls such as password protection, verification of identity of authorized users, detection of break-in attempts, firewalls, or encryption, as appropriate.
(b) System managers will ensure that employees and contractors who have access to personal information in their system will have the proper background investigation and meet all privacy training requirements.
Legislative history
This is a federal regulation, adopted through agency rulemaking under the Administrative Procedure Act — not enacted by a recorded vote of Congress.