Issued2026-09-01

GSAR 552.239-7001 – Basic Safeguarding of Data within Large Language Model Artificial Intelligence Systems (September 2026 Deviation)

Acquisition Regulation Class DeviationFederal

Summary

Establishes a contract clause for GSA procurements where LLM functionality is a material feature and government data is submitted directly to or produced by the model. Addresses data-use restrictions, safeguards, subcontractor flowdown, human oversight, incident reporting, portability and material-change notices, with exceptions for specified incidental and internal uses.

Healthcare Implications

Federal health agencies buying covered LLM systems through GSA and their suppliers must account for the clause's contract-specific data protections, oversight and reporting requirements. It does not govern every hospital AI purchase or all incidental contractor AI use; existing contracts depend on incorporation and applicable contracting procedures.

Impact Level

High

Keywords

Transparency & Governance; Safety & Risk; Privacy & Data

Stakeholders

Regulators & Government; Developers & Vendors; Providers & Health Systems