A proposed federal regulation would require mandatory privacy training for certain contractors.

Under a new rule put forward by the Department of Defense, the General Services Administration, and NASA, contractors would be required to identify employees designing, operating or having access to government systems of records, or handling personally identifiable information.

This training would be required upon the award of a contract and at least annually thereafter. Vendors would be required to maintain records of employee training for request by the government.

This rule does not apply to commercial items. The Regulatory Secretariat is accepting comments until December 13.