48 CFR §24.302

1. (a)The contracting officer shall insert the clause at FAR 52.224-3, Privacy Training, in solicitations and contracts when, on behalf of the agency, contractor employees will—
   1. (1)Have access to a system of records;
   2. (2)Create, collect, use, process, store, maintain, disseminate, disclose, dispose, or otherwise handle personally identifiable information; or
   3. (3)Design, develop, maintain, or operate a system of records.
2. (b)When an agency specifies that only its agency-provided training is acceptable, use the clause with its Alternate I.