Include [Assignment: organization-defined Privacy Act requirements] in the acquisition contract for the operation of a system of records on behalf of an organization to accomplish an organizational mission or function.
|
|
| Control Identifier | SA-4(11) |
| Latest Sync Date | 19/12/24 09:18:14 |
| Discussion | When, by contract, an organization provides for the operation of a system of records to accomplish an organizational mission or function, the organization, consistent with its authority, causes the requirements of the PRIVACT to be applied to the system of records. |
| Related Controls | PT-6. |