Cybersecurity rules in this supplement
The USDA Acquisition Regulation (AGAR) does not add agency-specific cybersecurity-safeguarding clauses. Its information-handling rules are limited to privacy and confidentiality:
AGAR Subpart 424.1 — Protection of Individual Privacy. Applies Privacy Act protections to covered work.
AGAR clauses 452.224-70 (Confidentiality of Information) and 452.237-75 (Restrictions Against Disclosure). Restrict use and disclosure of confidential information.
For cybersecurity obligations, USDA contractors look to the FAR baseline.
In plain terms
USDA's supplement adds privacy and confidentiality rules, not a dedicated cybersecurity-safeguarding clause. Your core cyber duties come from the government-wide FAR baseline (and any specific contract requirements).
Who it applies to
USDA contractors and subcontractors, particularly those handling Privacy Act records or confidential information.
What it requires
Follow the FAR baseline for safeguarding information, and comply with USDA's Privacy Act and confidentiality clauses where they apply.
Why it matters
Knowing the supplement adds no special cyber clause helps you scope obligations correctly — your cybersecurity floor is the FAR baseline, not an AGAR-specific rule.
Citation
USDA Acquisition Regulation (AGAR), codified at 48 C.F.R. Chapter 4.