Data Privacy Act
Section 24. Applicability to Government Contractors. - In entering into any contract that may involve accessing or requiring sensitive personal information from one thousand (1,000) or more individuals, an agency shall require a contractor and its employees to register their personal information processing system with the Commission in accordance with this Act and to comply with the other provisions of this Act including the immediately preceding Section, in the same manner as agencies and government employees comply with such requirements.