(a) See 41 CFR 105-64, GSA Order CIO 2201.1, Privacy Act Program, and Privacy Act Program information available on Insite, when contracting for the design, development, or operation of a system of records on individuals.

(b)  The Office of the Chief Acquisition Officer (OCAO) will review every two years a random sample of contracts that provide for the maintenance of a system of records pursuant to OMB Circular A-130, Appendix 1.