Section 208 of the E-Government Act requires a privacy impact assessment before an agency develops or procures information technology that collects personally identifiable information. The assessment is the agency's, but the facts in it come from whoever is building the system.
Supplement clauses that impose it
Each clause below cites this authority in its own text and directs the contractor or offeror to do something about it.
DOLAR — Labor
DOSAR — State
TAR — Transportation
VAAR — Veterans Affairs
How this list was built
Every agency FAR supplement published by GSA is parsed in full, and each clause is matched against the statutory authorities cited in its own body text — never its title. A clause counts as imposing the obligation only when a directive addressed to the contractor sits alongside the citation; otherwise it is listed as naming it. That split matters: some clauses mention a statute only because a referenced form carries a burden statement. The controlling version of any clause is the one in the Code of Federal Regulations, linked from that clause's page.