In plain English
FAR 52.239-1, Privacy or Security Safeguards, is a contract clause prescribed at FAR 39.106, most recently dated Aug 1996. The complete official text is reproduced below, verbatim, from GSA's published FAR source files.
Its text contains no sentence requiring insertion into subcontracts; see the flowdown section below for what that does and does not mean.
Does it flow down to subcontracts?
No flowdown mandate found in the clause text
We scanned the full clause text and found no sentence directing the contractor to insert this clause into subcontracts. That is a statement about the text, not legal advice: a prime contractor may still flow terms down contractually, an agency supplement (DFARS, VAAR, …) may add requirements, and clauses listed below (if any) may order this clause into subcontracts from the outside.
Where it's prescribed
As prescribed in 39.106 , insert a clause substantially the same as the following:
Prescribing reference: FAR 39.106.
The official text, verbatim
As prescribed in 39.106 , insert a clause substantially the same as the following:
Privacy or Security Safeguards (Aug 1996)
-
(a) The Contractor shall not publish or disclose in any manner, without the Contracting Officer’s written consent, the details of any safeguards either designed or developed by the Contractor under this contract or otherwise provided by the Government.
-
(b) To the extent required to carry out a program of inspection to safeguard against threats and hazards to the security, integrity, and confidentiality of Government data, the Contractor shall afford the Government access to the Contractor’s facilities, installations, technical capabilities, operations, documentation, records, and databases.
-
(c) If new or unanticipated threats or hazards are discovered by either the Government or the Contractor, or if existing safeguards have ceased to function, the discoverer shall immediately bring the situation to the attention of the other party.
(End of clause)