Notice2026-00764
Agency Information Collection Activity: Department of Veterans Affairs Acquisition Regulation (VAAR)-Information Security and Privacy Contract Clauses
Primary source
Metadata and text below are from the Federal Register, a public-domain U.S. government work. Always verify the official published version before relying on it for any legal matter.
Published
January 16, 2026
Issuing agencies
Veterans Affairs Department
Abstract
Office of Acquisition and Logistics (OAL), Department of Veterans Affairs (VA), is announcing an opportunity for public comment on the proposed collection of certain information by the agency. Under the Paperwork Reduction Act (PRA) of 1995, Federal agencies are required to publish notice in the Federal Register concerning each proposed collection of information, including each proposed extension of a currently approved collection, and allow 60 days for public comment in response to the notice.
Full Text
<html>
<head>
<title>Federal Register, Volume 91 Issue 11 (Friday, January 16, 2026)</title>
</head>
<body><pre>
[Federal Register Volume 91, Number 11 (Friday, January 16, 2026)]
[Notices]
[Pages 2276-2277]
From the Federal Register Online via the Government Publishing Office [<a href="http://www.gpo.gov">www.gpo.gov</a>]
[FR Doc No: 2026-00764]
-----------------------------------------------------------------------
DEPARTMENT OF VETERANS AFFAIRS
[OMB Control No. 2900-0895]
Agency Information Collection Activity: Department of Veterans
Affairs Acquisition Regulation (VAAR)--Information Security and Privacy
Contract Clauses
AGENCY: Office of Acquisition and Logistics, Department of Veterans
Affairs.
ACTION: Notice.
-----------------------------------------------------------------------
SUMMARY: Office of Acquisition and Logistics (OAL), Department of
Veterans Affairs (VA), is announcing an opportunity for public comment
on the
[[Page 2277]]
proposed collection of certain information by the agency. Under the
Paperwork Reduction Act (PRA) of 1995, Federal agencies are required to
publish notice in the Federal Register concerning each proposed
collection of information, including each proposed extension of a
currently approved collection, and allow 60 days for public comment in
response to the notice.
DATES: Comments must be received on or before March 17, 2026.
ADDRESSES: Comments must be submitted through <a href="http://www.Regulations.gov">www.Regulations.gov</a>.
FOR FURTHER INFORMATION CONTACT:
Program-Specific information: Forrest Browne, 202-632-9677,
<a href="/cdn-cgi/l/email-protection#a2e4cdd0d0c7d1d68ce0d0cdd5ccc7e2d4c38cc5cdd4"><span class="__cf_email__" data-cfemail="fcba938e8e998f88d2be8e938b9299bc8a9dd29b938a">[email protected]</span></a>.
VA PRA information: Dorothy Glasgow, 202-461-1084, <a href="/cdn-cgi/l/email-protection#8cdacddcdecdccfaeda2ebe3fa"><span class="__cf_email__" data-cfemail="0d5b4c5d5f4c4d7b6c236a627b">[email protected]</span></a>.
SUPPLEMENTARY INFORMATION: Under the PRA of 1995, Federal agencies must
obtain approval from the Office of Management and Budget (OMB) for each
collection of information they conduct or sponsor. This request for
comment is being made pursuant to Section 3506(c)(2)(A) of the PRA.
With respect to the following collection of information, OAL
invites comments on: (1) whether the proposed collection of information
is necessary for the proper performance of OAL's functions, including
whether the information will have practical utility; (2) the accuracy
of OAL's estimate of the burden of the proposed collection of
information; (3) ways to enhance the quality, utility, and clarity of
the information to be collected; and (4) ways to minimize the burden of
the collection of information on respondents, including through the use
of automated collection techniques or the use of other forms of
information technology.
Title: Department of Veterans Affairs Acquisition Regulation
(VAAR)--Information Security and Privacy Contract Clauses.
OMB Control Number: 2900-0895. <a href="https://www.reginfo.gov/public/do/PRASearch">https://www.reginfo.gov/public/do/PRASearch</a> (Once at this link, you can enter the OMB Control Number to
find the historical versions of this Information Collection).
Type of Review: Revision of a currently approved collection.
Abstract: VA uses three Department of Veterans Affairs Acquisition
Regulation (VAAR) contract clauses to ensure security when a contractor
has access to VA information or information systems, as follows:
<bullet> Clause 852.239-70, Security Requirements for Information
Technology Resources, is required in all solicitations, contracts and
orders exceeding the micro-purchase threshold that include information
technology services. This clause requires the contractor to be
responsible for information technology security for all systems
connected to a VA network or operated by the contractor for VA,
regardless of location.
<bullet> Clause 852.239-72, Information System Design and
Development, is required in all solicitations, contracts, orders and
agreements where services to perform information system design and
development are required.
<bullet> Clause 852.239-73, Information System Hosting, Operation,
Maintenance, or Use, is required in all solicitations, contracts,
orders and agreements where services to perform information system
hosting, operation, or maintenance are required.
Clauses 852.239-72 and 852.239-73 are intended to protect VA
sensitive information and information technology by requiring
contractor and subcontractor personnel to be subject to the same
Federal laws, regulations, standards, and VA directives and handbooks
as VA and VA personnel regarding information and information system
security.
This revision changes the title from ``Department of Veterans
Affairs Acquisition Regulation Clause 852.239-70, VA Information and
Information System Security and Privacy'' to ``Department of Veterans
Affairs Acquisition Regulation (VAAR)--Information Security and Privacy
Contract Clauses''. The previous title implied that this OMB Control
Number covered a single clause instead of multiple clauses. The title
change is the only revision to the currently approved collection.
Affected Public: Business or other for-profit.
Estimated Annual Burden: 4,815 hours.
Estimated Average Burden per Respondent: 19 minutes.
Frequency of Response: Less than quarterly.
Estimated Number of Respondents: 15,384.
Authority: 44 U.S.C. 3501 et seq.
Lanea Haynes,
Acting, VA PRA Clearance Officer, (Alt), Office of Information
Technology, Data Governance Analytics, Department of Veterans Affairs.
[FR Doc. 2026-00764 Filed 1-15-26; 8:45 am]
BILLING CODE 8320-01-P
</pre><script data-cfasync="false" src="/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js"></script></body>
</html>Indexed from Federal Register on January 16, 2026.
This is legal information, not legal advice. Laws vary by jurisdiction and change frequently. Always verify current law with official sources and consult a licensed attorney in your jurisdiction for advice on your specific situation.