# VA Acquisition Regulation: Acquisition of Information Technology; and Other Contracts for Goods and Services Involving Information, VA Sensitive Information, and Information Security; and Liquidated Damages Requirements for Data Breach
> **US Department of Veterans Affairs** · Final rule. · Published 2023-01-25 · Effective 2023-02-24 · 88 FR 4739
## Document
- **Document number:** 2023-00586
- **Category:** va-other
- **Agency:** US Department of Veterans Affairs
- **Federal Register citation:** 88 FR 4739
- **CFR reference:** 48 CFR 802
- **Publication date:** 2023-01-25
- **Effective date:** 2023-02-24
## Abstract

The Department of Veterans Affairs (VA) is issuing a final rule amending the VA Acquisition Regulation (VAAR). This rulemaking revises the VAAR by adding a part covering Acquisition of Information Technology and revising coverage concerning Other Contracts for Goods and Services involving mandatory information, privacy, and security requirements to include policy concerning VA sensitive personal information, information security, and liquidated damages requirements for data breach in the following parts: Administrative and Information Matters; Describing Agency Needs; Protection of Privacy and Freedom of Information; as well as Acquisition of Commercial Products and Commercial Services. It also revises affected parts concerning Definitions of Words and Terms, and Solicitation Provisions and Contract Clauses.

## Source
- [Federal Register document](https://www.federalregister.gov/documents/2023/01/25/2023-00586/va-acquisition-regulation-acquisition-of-information-technology-and-other-contracts-for-goods-and)
---
*MORVS · CC0 1.0*