GSA issues new AI acquisition clause to safeguard government data
Summary
The General Services Administration (GSA) has announced a new AI acquisition clause that introduces specific data protection requirements for government agencies utilizing AI systems, as reported on October 1, 2026. This clause mandates that contractors and subcontractors must safeguard government data when using AI technologies, including large language models and chatbots. Under this policy, subcontractors are only held accountable for data handling if they access government data, while prime contractors are responsible for implementing the clause. The directive also highlights the importance of coordination between procurement teams and senior data officials to evaluate risks associated with AI tools prior to their deployment, ensuring compliance with federal data protection regulations.