DoD is proposing to amend the Defense Federal Acquisition Regulation Supplement to implement section 803 of the National Defense Authorization Act (NDAA) for Fiscal Year (FY) 2024 and section 836 of the NDAA for FY 2025.  Section 803 adds 10 U.S.C. 4662, which prohibits a contractor from selling, licensing, or otherwise transferring covered individually identifiable DoD employee data to any individual or entity other than the Federal Government, except when allowed by statute or Office of Management and Budget (OMB) guidance. Section 836 removes the OMB guidance exception and adds that the provision does not apply in circumstances in which the transfer of such data would otherwise be authorized by law.