41 CFR § 105-64.108

41 CFR · Public Contracts and Property Management

§ 105-64.108 — How does GSA safeguard personal information?

41 CFR § 105-64.108

TitleTitle 41: Public Contracts and Property Management PartPart 105-64: GSA Privacy Act Rules

SourceeCFR (current through Mar 6, 2026)

This text of 41 C.F.R. § 105-64.108 (How does GSA safeguard personal information?) is published on Counsel Stack Legal Research, covering United States primary law. Counsel Stack provides free access to over 12 million legal documents including statutes, case law, regulations, and constitutions.

Bluebook

41 C.F.R. § 105-64.108 (2026).

Text

§ 105-64.108 How does GSA safeguard personal information?

(a)System managers will establish administrative, technical, and physical safeguards to ensure the security and confidentiality of records, protect the records against possible threats or hazards, and permit access only to authorized persons. Automated systems will incorporate security controls such as password protection, verification of identity of authorized users, detection of break-in attempts, firewalls, or encryption, as appropriate.

(b)System managers will ensure that employees and contractors who have access to personal information in their system will have the proper background investigation and meet all privacy training requirements.

Free access — add to your briefcase to read the full text and ask questions with AI

§ 105-64.108 How does GSA safeguard personal information?

(a) System managers will establish administrative, technical, and physical safeguards to ensure the security and confidentiality of records, protect the records against possible threats or hazards, and permit access only to authorized persons. Automated systems will incorporate security controls such as password protection, verification of identity of authorized users, detection of break-in attempts, firewalls, or encryption, as appropriate.

(b) System managers will ensure that employees and contractors who have access to personal information in their system will have the proper background investigation and meet all privacy training requirements.