Proposed rulemaking with contractor data breach requirements enters new stage of review

A long-pending proposed rulemaking establishing requirements for data breach reporting by federal contractors is moving into an interagency review process to be conducted by the Office of Management and Budget.

The notice of proposed rulemaking would amend federal procurement rules known as the “Federal Acquisition Regulation” to meet requirements contained in a January 2017 OMB memorandum from the Obama administration to address personally identifiable information. The NPRM for review was received by OMB’s Office of Information and Regulatory Affairs...