---
kind: "section"
citation: "48 C.F.R. § 4.1302"
title: "48"
number: "4.1302"
heading: "Acquisition of approved products and services for personal identity verification."
url: "https://uscodex.org/cfr/48/4.1302"
---

# §4.1302. Acquisition of approved products and services for personal identity verification.

- (a) In order to comply with FIPS PUB 201, agencies must purchase only approved personal identity verification products and services.
- (b) Agencies may acquire the approved products and services from the GSA, Federal Supply Schedule 70, Special Item Number (SIN) 132-62, HSPD-12 Product and Service Components, in accordance with ordering procedures outlined in FAR [Subpart 8.4](/cfr/48/subpart8.4.md).
- (c) When acquiring personal identity verification products and services not using the process in [paragraph (b)](#b) of this section, agencies must ensure that the applicable products and services are approved as compliant with FIPS PUB 201 including—
  - (1) Certifying the products and services procured meet all applicable Federal standards and requirements;
  - (2) Ensuring interoperability and conformance to applicable Federal standards for the lifecycle of the components; and
  - (3) Maintaining a written plan for ensuring ongoing conformance to applicable Federal standards for the lifecycle of the components.
- (d) **For more information on personal identity verification products and services see <I>http—** //www.idmanagement.gov.

## Notes

### Source

Source: 72 FR 46335, Aug. 17, 2007, unless otherwise noted.

### Authority

Authority: 41 U.S.C. 1121(b); 40 U.S.C. 121(c); 10 U.S.C. chapter 4 and 10 U.S.C. chapter 137 legacy provisions (see 10 U.S.C. 3016); and 51 U.S.C. 20113.

### Source

Source: 48 FR 42113, Sept. 19, 1983, unless otherwise noted.