(a) The contracting officer shall insert the clause at FAR 52.224-3, Privacy Training, in solicitations and contracts when, on behalf of the agency, contractor employees will—

1. (1) Have access to a system of records;
2. (2) Create, collect, use, process, store, maintain, disseminate, disclose, dispose, or otherwise handle personally identifiable information; or
3. (3) Design, develop, maintain, or operate a system of records.