Clauses · DFARS · Data rights
DFARS 252.227-7025 Limitations on the Use or Disclosure of Government-Furnished Information Marked with Restrictive Legends
Does the regulation require it to flow down?
No
The current text (JAN 2025) has no flow-down paragraph: 'subcontract' appears only once, in (b)(2), as an authorized recipient of GFI, not as an insertion mandate. Primes include it in the subcontract to extend to the sub the per-legend use restrictions and the (c) indemnity whenever they pass along marked GFI.
A clause can reach your subcontract without a mandate. Once it is in your document, it is a contract term all the same. The missing mandate is a fact about the regulation. It is not a ruling on your order.
Checked against acquisition.gov on 2026-08-04 · edition JAN 2025 · base v0.9.3 Read the text ↗
What it makes you produce
2 items for your checklist, slowest first.
Something you write
Days to weeks, and nobody outside your company has to agree to it.
- 252.227-7025(d)
Written use and nondisclosure obligations covering your own employees
Owed when an employee is to be given access to or use of any of the marked information
Something you fill in and send back
Hours, once you know which one is missing.
- 252.227-7025(b)(2)
The nondisclosure agreement at DFARS 227.7103-7, completed and signed before the marked data reaches them
Owed when you pass Government-furnished data carrying a government purpose rights legend, or a specially negotiated legend under (b)(3), to a supplier or prospective supplier
When it is used
Prescribed at 227.7103-6(c), 227.7104-4(b)(4), or 227.7203-6(d): goes into the prime's contract when the government is expected to furnish GFI (technical data or software) marked with a restrictive legend. Reaches the sub when the prime passes that GFI along — (b)(2) authorizes release to subcontractors and suppliers who need it to quote or perform. No dollar threshold.
Read closely
The legend on the package decides what is allowed: limited rights, government purpose rights, a specially negotiated license and a commercial legend each permit different things, and none of them permits commercial use of your own. Paragraph (c) makes the party named in the legend a third-party beneficiary with a direct right of action against you.
The 12 templates that name it, with the line
Source: acquisition.gov, DFARS 252.227-7025 and 227.7103-6(c) (verified 2026-08-04)
This is research, not legal advice. It states what the regulation says about this clause and cites the paragraph behind it. It does not rule on your order, and it does not rule on whether a prime's markings are correct.