48 C.F.R. § 1824.102 – General.

(1) For NASA rules and regulations implementing the Privacy Act, see Privacy—NASA Regulations, (14 CFR 1212). The Act applies to any contractor maintaining a system of records to accomplish a NASA mission.
(2) Systems of records to which the Privacy Act does not apply include—
1. (i) Records maintained by a contractor on individuals employed by the contractor on its own behalf for the purpose of providing supplies and services to the Federal Government; and
2. (ii) Records that—
  1. (A) Are maintained under contracts with educational institutions to provide training;
  2. (B) Are generated on students working under the contract relative to their attendance (admission forms, grade reports, etc.);
  3. (C) Are similar to those maintained on other students; and
  4. (D) Are commingled with their records on other students.