---
kind: "section"
citation: "48 C.F.R. § 1212.301"
title: "48"
number: "1212.301"
heading: "Solicitation provisions and contract clauses for the acquisition of commercial products and commercial services."
url: "https://uscodex.org/cfr/48/1212.301"
---

# §1212.301. Solicitation provisions and contract clauses for the acquisition of commercial products and commercial services.

- (f) The following DOT provisions and clauses are authorized for use in acquisitions of commercial products or commercial services when required by the individual provision or clause prescription:
  - (1) 1252.201-70, Contracting Officer's Representative.
  - (2) 1252.204-70, Contractor Personnel Security and Agency Access.
  - (3) 1252.209-70, Organizational and Consultant Conflicts of Interest.
  - (4) 1252.209-71, Limitation of Future Contracting.
  - (5) 1252.211-70, Index for Specifications.
  - (6) 1252.216-70, Evaluation of Offers Subject to an Economic Price Adjustment Clause.
  - (7) 1252.216-71, Determination of Award Fee.
  - (8) 1252.216-72, Award Fee Plan.
  - (9) 1252.216-73, Distribution of Award Fee.
  - (10) 1252.216-74, Settlement of Letter Contract.
  - (11) 1252.222-70, Strikes or Picketing Affecting Timely Completion of the Contract Work.
  - (12) 1252.222-71, Strikes or Picketing Affecting Access to a DOT Facility.
  - (13) 1252.223-70, Removal or Disposal of Hazardous Substances—Applicable Licenses and Permits.
  - (14) 1252.223-71, Accident and Fire Reporting.
  - (15) 1252.223-73, Seat Belt Use Policies and Programs.
  - (16) 1252.232-70, Electronic Submission of Payment Requests.
  - (17) 1252.237-70, Qualifications of Contractor Employees.
  - (18) 1252.237-71, Certification of Data.
  - (19) 1252.237-72, Prohibition on Advertising.
  - (20) 1252.237-73, Key Personnel.
  - (21) 1252.239-70, Security Requirements for Unclassified Information Technology Resources.
  - (22) 1252.239-71, Information Technology Security Plan and Accreditation.
  - (23) 1252.239-72, Compliance with Safeguarding DOT Sensitive Data Controls.
  - (24) 1252.239-73, Limitations on the Use or Disclosure of Third-Party Contractor Reported Cyber Incident Information.
  - (25) 1252.239-74, Safeguarding DOT Sensitive Data and Cyber Incident Reporting.
  - (26) 1252.239-75, DOT Protection of Information About Individuals, PII, and Privacy Risk Management Requirements.
  - (27) 1252.239-76, Cloud Computing Services.
  - (28) 1252.239-77, Data Jurisdiction.
  - (29) 1252.239-78, Validated Cryptography for Secure Communications.
  - (30) 1252.239-79, Authentication, Data Integrity, and Non-Repudiation.
  - (31) 1252.239-80, Audit Record Retention for Cloud Service Providers.
  - (32) 1252.239-81, Cloud Identification and Authentication (Organizational Users) Multi-Factor Authentication.
  - (33) 1252.239-82, Identification and Authentication (Non-Organizational Users).
  - (34) 1252.239-83, Incident Reporting Timeframes.
  - (35) 1252.239-84, Media Transport.
  - (36) 1252.239-85, Personnel Screening—Background Investigations.
  - (37) 1252.239-86, Boundary Protection—Trusted Internet Connections.
  - (38) 1252.239-87, Protection of Information at Rest.
  - (39) 1252.239-88, Security Alerts, Advisories, and Directives.
  - (40) 1252.239-89, Technology Modernization.
  - (41) 1252.239-90, Technology Upgrades/Refreshment.
  - (42) 1252.239-91, Records Management.
  - (43) 1252.239-92, Information and Communication Technology Accessibility Notice.
  - (44) 1252.239-93, Information and Communication Technology Accessibility.
  - (45) 1252.242-70, Dissemination of Information—Educational Institutions.
  - (46) 1252.242-71, Contractor Testimony.
  - (47) 1252.242-72, Dissemination of Contract Information.

## Notes

### Authority

Authority: 5 U.S.C. 301; 41 U.S.C. 1121(c)(3); 41 U.S.C. 1702; and 48 CFR 1.301 through 1.304.

### Source

Source: 87 FR 61159, Oct. 7, 2022, unless otherwise noted.