Anthony LaFaziaCEO, Atlantic Training · CEO at Atlantic Training | EdTech & Safety Compliance Leader

The Personal Devices and Apps That Are Strictly Off Limits for Federal Contractors

16 Sept 2026 · 2 min

Watch on YouTube

1:49

The excerpt outlines the Federal Acquisition Regulation (FAR) privacy training requirement that strictly forbids federal contractors from using any unauthorized personal equipment or applications to handle federal personally identifiable information (PII). It enumerates prohibited actions—including accessing, storing, forwarding, scanning, or otherwise processing federal PII on personal computers, tablets, smartphones, personal email accounts, personal cloud drives, unapproved apps, USB drives, consumer file‑sharing tools, or texting. The speaker emphasizes that even well‑intentioned shortcuts can cause data breaches and breach contract terms. When in doubt about the authorization status of a device, app, or method, contractors are instructed to stop and consult their supervisor, the contracting officer’s representative, or the security/privacy point of contact before proceeding.

Chapters

The FAR privacy training requirement is very direct here. It requires training on restrictions against using unauthorized equipment to create, Collect, use, process, store, maintain, disseminate, disclose, dispose of, or otherwise access PII. In practice, this often means: Don't access federal PII using personal devices, such as your own computer, tablet, or smartphone, unless the agency has explicitly authorized it. Don't forward federal PII to personal email accounts, Don't store federal PII on personal cloud drives or unapproved apps. Don't scan or take photos of sensitive records using personal or unauthorized devices. Don't use temporary tools like personal USB drives, consumer file-sharing tools, or texting as a shortcut. Even if your intentions are good, like finishing work faster or working from home, Using unauthorized equipment can create a data breach and violate contract requirements. If you're unsure whether a device, app, or method is authorized, don't guess. Stop and ask your supervisor, the contracting officer's representative, or your security or privacy point of contact before proceeding.