Overview
FAR 8.608 establishes strict prohibitions on the types of sensitive data that inmate workers at Federal Prison Industries (FPI) may access during the performance of a government contract. The regulation serves as a security safeguard to prevent the disclosure of national security information, critical infrastructure vulnerabilities, and private citizen data.
Key Rules
- Classified Information: Agencies are strictly prohibited from entering into contracts with FPI that allow inmate workers access to any classified data.
- Critical Infrastructure Mapping: Inmates may not have access to geographic data detailing the locations of:
- Surface or subsurface communications, water, or electrical power distribution infrastructure.
- Pipelines for natural gas, bulk petroleum, or other commodities.
- General utility locations.
- Personal and Financial Data: Access to a private citizen’s personal or financial information (including real property descriptions) is prohibited unless the individual provides prior consent.
Practical Implications
- Contract Screening: Procurement officers must carefully review Statements of Work (SOW) involving data entry, digitizing records, or GIS mapping to ensure no restricted infrastructure or PII is accessible to FPI.
- Limited Scope for FPI: This regulation effectively precludes FPI from performing high-security IT services, sensitive administrative processing, or utility grid maintenance support.