Contracting officers shall insert the clause at DOLAR 2952.224-70, Privacy Breach Notification Requirements, in all solicitations and contracts except solicitations and contracts that are solely for the acquisition of commercially available off-the-shelf items.